Basic Internet Setup

Your server's domain name. In outgoing mail, this will be added to the names of local users and to remote names that do not have a domain name specified. In the address user@huskyplanes.com, the domain name is huskyplanes.com.

Primary DNS (Domain Name Server)

The IP address of your primary DNS. If you do not maintain your own DNS server, obtain this address from your Internet Service Provider (ISP). If you have more than one DNS server, enter their addresses on the Advanced DNS form.

Postmaster name

All Internet email addressed to "postmaster" will be sent to this person. In most cases, this is the administrator.

We recommend that you create a separate mail address for the web administrator (for example, webadmin@huskyplanes.com). This way, rather than using the main administrator account for mail, you separate Internet and server administration.

Internet connection

The type of Internet connection.

• Continuous

Select this if you have a full-time connection to the Internet. Outgoing mail will flow continuously and news and mail polling will be controlled by the Internet Service Account schedule that you specified on the Service Account form.

• Intermittent or dial-up

Select this if you do not have a continuous connection to the Internet. Specify the connection schedule on the Service Account form. You must also set routing information on the Advanced Mail form.

Note

Before configuring Internet Services for dialup connections, you should already have installed and appropriately configured dialup software on the computer on which Internet Services is installed (for example, FreePPP on Mac OS and Dial-Up Networking on Windows).

You must also configure the system to recognize these. For more information, see your system documentation. You must set a low timeout value when you configure this software. The Scheduling tab of the Service Account form controls when you dial into your Internet Service Provider (ISP). The timeout value of your dialup software is how you control when the connection is dropped.

Routing button

Opens the Routing tab of the Advanced Mail form. Set routing information for outbound mail there, if you selected "Intermittent or dial-up".

Schedule button

Opens the Scheduling tab of the Service Account form. Set scheduling information there, if you selected "Intermittent or dial-up".

Start Internet Services automatically

Starts Internet Services whenever you start your server.

For this option to work, the Internet Services component of FirstClass must be installed on the same machine as the server component. If your server and Internet Services are installed on separate machines or as a clustered service, you cannot select this feature.

Warning

If both the server and Internet Services are on the same machine, and you have Internet Services running as a Windows NT service, do not select the "Start Internet Services automatically" option, as enabling both will result in two copies of Internet Services being started.

Top

Mail tab

Use this tab to set basic Internet mail protocols.

At the very least, you must enable SMTP mail if you want to send and receive Internet mail. You should also enable the POP3 and IMAP4 options if you have many users who send mail using third-party clients like Eudora or Outlook Express (see Connecting to servers in our Client Help for more information).

Enable SMTP

Allows FirstClass to make connections to and receive connections from other SMTP servers, to transfer Internet mail.

SMTP server domain name

The domain name for your SMTP server. Normally, this will be in a format like mail.firstclass.com. This name must be defined in your DNS and must point to the IP address of the machine on which Internet Services is installed.

For each protocol you enable in Basic Internet Setup that requires a server domain name, we recommend that you provide a separate server domain name, even if all these names point to the same server machine.

Enable POP3 (outbound)

Enables the Internet Services POP3 server to serve out POP3 mail.

Mail server (inbound)

The name of the POP3 server from where your users import their POP mail. The server you enter in this field will be used unless another one is specified on a user's Mail Import form in personal preferences (see Retrieving mail from Internet mail accounts in our Client Help).

Max outgoing mail

The maximum number of messages you want to send simultaneously.

Normally, you will accept the default 15. This is a large enough number to maintain significant mail flow but not so large as to cause memory problems. You may want to adjust this number if you notice mail overflow or low memory problems on your system, which you can monitor using the Internet Services Monitor. Increasing this number may require more memory resources.

Enable IMAP4 (outbound)

Enables the Internet Services IMAP4 server to serve out IMAP4 mail.

Advanced button

Opens the Advanced Mail form.

Top

News tab

Use this tab to set basic Internet news settings. You should only do this if you want to receive newsgroups.

For example, on Husky Planes we allow our users to register with newsgroups. We use news.huskyplanes.com as our news server domain and have registered it in our DNS. On Husky Planes, we use our ISP's news server, as we do not maintain our own. If you don’t maintain your own news server, you need to arrange which newsgroups your ISP sends you.

Enable NNTP

Provides for message transfer to and from Internet newsgroups by enabling the NNTP client protocol on your server.

NNTP server domain name

The domain name you want associated with the NNTP protocol (for example, news.centrinity.com). This name must be defined in your DNS and must point to the IP address of the machine on which Internet Services is installed.

NNTP feed server

The name of the server that provides your news feed. This is where newsgroup posts created on your system are sent. In most cases, this is your Internet Service Provider's news server.

Advanced button

Opens the Advanced News form.

Top

Web tab

Use this tab to enable the HTTP protocol to allow users to access your web site with their web browsers. The HTTP also lets you publish material on the web.

Enable HTTP

Lets you publish HTML documents from your web server by enabling the HTTP protocol on your server.

HTTP server domain name

The domain name you want associated with your web server.

For example, www.huskyplanes.com. This name must be defined in your DNS and point to the IP address of your Internet Services machine.

Multiple Sites button

Opens the Multiple Sites & Languages form. Configure this form if you support multiple web sites or multiple languages on one web site.

Advanced button

Opens the Advanced Web & File form.

Top

File tab

Use this tab to configure the FTP and CIFS/SMB file sharing protocols.

Enable FTP

Allows users to download files from your server and from users' home pages with an FTP client. To make files available for FTP, place them in the Internet Services/FTP folder.

FTP server domain name

The domain name you want associated with your FTP server. This name must resolve to your FTP server machine, be defined in your DNS server, and point to the IP address of the machine on which Internet Services is installed.

We recommend that you provide a separate server domain name, even if all these names point to the same server machine, for each protocol you enable that requires a server domain name.

Enable CIFS/SMB

Enable the CIFS/SMB protocol on your system to mount your FirstClass Desktop as a network file system.

For detailed steps on how to configure CIFS/SMB on your system, see About accessing files.

For advanced options (for example, CIFS ports) see the CIFS tab on the Advanced Web & File form.

Advanced button

Opens the Advanced Web & File form.

Top

Directory tab

Use this tab to give users with Finger and LDAP clients access to your FirstClass Directory.

Note

You can enable SSL support for LDAP on the [Link]LDAP tab on the Advanced Directory form. For information on creating a security certificate, see Creating a security certificate for your system.

Enable Finger

Allows Internet users to search the Directory using a Finger client by enabling the Finger protocol on your server.

Enable LDAP

Allows Internet users to search the Directory using an LDAP client by enabling the LDAP protocol on your server.

Advanced button

Opens the Advanced Directory form.

Top

UCE/Spam tab

Use this tab to configure if your site relays messages, how to handle spam and junk mail, and the behaviour of the Abuse section on the Security tab on the Internet Services Monitor.

For more information on controlling spam and securing your Internet Services environment, see About system security.

Relaying subtab

Use this subtab to control which messages your site relays and which messages to accept.

Disable ALL relaying, including SMTP AUTH and trusted IPs

Disallows all relaying off your system.

This is the most secure choice as it disables relaying completely including SMTP AUTH users (fully authenticated users) and trusted IP addresses.

This is a drastic measure that should only be used in extreme circumstances if you are experiencing many problems on your site due to relaying. This option provides you with the opportunity to stop the flow completely and fix the leaks but does not affect users sending email using FirstClass.

RBL subtab

Use this subtab to enable the Real Blackhole Lookup (RBL) option to handle problem IP addresses found on your RBL services.

Enable RBL lookups

Rejects connections from any IP address listed listed on the RBL hosts to which you are subscribed.

Injects X-RBL-Warning header instead of NDN

If option is unchecked, Internet Services sends a 550 error message followed by information in the "Help text" field.

Help text fields contain messages the sender receives that describes why the connection was refused and contains a link to the RBL site where the sender can take corrective action.

You will only have one message per RBL site. An example of this is, "Your mail has been found on our RBL service list and will not be delivered. Go to rbl.spamcop.org for more information".

Connection requests from an IP address found on one of your RBL services will be cached for an hour. This avoids the lengthy process of your system having to lookup a bad IP address every time it tries to connect to your server.

If option is checked, a warning in the header of the message goes to the recipient at your site. This warning tells the recipient that the email address has been found in the system RBL service and that he should use his personal mail rules to filter messages of this type (see Setting up automatic mail handling in our Client online help).

Note

Your system filter documents override any settings on the UCE/Spam tab (see The Internet Services Filters folder).

A note about RBL services

There are several reliable RBL services you can use with varying levels of aggressiveness. We recommend you choose one or two good RBL services that are not too aggressive in their spammer listings.

If you use more than one RBL service you should put the least aggressive service first and the most aggressive service last. Internet Services checks the RBL services in the order they are listed.

Junk subtab

Use this subtab to choose how to handle junk mail entering your system and to configure the Strike list option, if you have set up your rules to register Strikes.

Reject unknown domain names

Does a reverse DNS lookup (checks IP addresses against the connecting SMTP server) and rejects any that fail. Internet Services uses your DNS to retrieve a list of domain names associated with any incoming IP addresses.

The incoming IP address in this case is the SMTP mail server that attempts to connect to Internet Services to deliver a message. This may not be the address of the original server. For example, if SMTP server A routes a message to SMTP server B that tries to connect to your system, Internet Services will try to resolve the IP address of SMTP server B.

Coupling this option with the RBL service can provide your site with added security. Internet Services maintains a cache of reverse DNS records, so SMTP servers that send you a lot of mail won't increase your system load.

NNTP crossposting limit

Default 15.

The maximum number of crossposts (single news items posted to multiple newsgroups) that will cause news to be rejected. FirstClass rejects any newsgroup messages with more crosspostings than this limit. For example, if you select 10, a news item crossposted to 10 newsgroups will be accepted, but one crossposted to 11 newsgroups will be rejected. It is generally considered bad netiquette to crosspost to more than two or three newsgroups. Excessive crossposting is often used to distribute junk mail. By specifying a low number, you will probably eliminate a considerable amount of junk mail.

Strike List

Use this section to set a strike counter for SMTP servers who continously deliver spam to your system. Configure the:

• number of strikes against servers before blocking them

• period of time between each strike that must pass with no strikes before the strike counter is reset

• amount of time to block struck out IPs.

Mail Rules subtab

Use this subtab to control how the rules.MailRules document scores Spam. To enable the score fields, you must make a change and close the form. If you don't touch a spam-score field, that field is not enabled. In other words, Internet Services will use the fallback scores configured in the rules.MailRulesfile.

Low spam score

The minimum and maximum score for a message to be flagged as "Low".

Medium spam score

The maximum score for a message to be flagged as "Medium".

High spam score

The maximum score for a message to be flagged as "High". Messages scoring higher than this value are flagged as "Extreme".

Extreme causes NDN

Select this field if you want to automatically reject an "Extreme" message.

SubjectBlock causes NDN

Select this field if you want to automatically reject a message if the subject contains words in the rules.SubjectBlock file.

Crosspost limit

If the message has more recipients than this value, then the Spam score will be increased for that message.

Abuse subtab

Use this subtab to enable and display activity in the Abuse section on the Security tab on the Internet Services Monitor.

Abuse note level

Internet Services will note IP addresses whose abuse score exceeds this amount to identify any further suspicious activity.

Abuse warning level

Internet Services will mark IP addresses whose abuse score exceeds this amount with a yellow light.

Abuse danger level

Internet Services will mark IP addresses whose abuse score exceeds this amount with a red light.

Abuse autoblock level

Internet Services will add IP addresses whose abuse score exceeds this amount to the temporary IP blocklist.

Abuse block time

This is the period of time that IP addresses will remain on the temporary IP blocklist.

Abuse reset interval

Internet Services will reset the abuse score of IP addresses who have not engaged in suspicious activity for this period of time.

Top

Connections tab

Use this tab to reject connections based on filter documents in your Filters folder and also enable the Black Hole option to shut down any server trying to deliver large quantities of spam or launch a Denial of Service (DOS) against your system.

Reject connections based on Filters

Rejects connections based on entries in filter documents located in the Filters folder in the Internet Services folder on the administrator's Desktop (see [Link]Handling spam in the Internet Services Administrator's Guide) .

Connection Black Hole

Use this section to lock down connections attempting to deliver spam to your site or attempting to launch denial of service against your system. You can also specify the amount of time you want to hold these connections.

Note

You must enable "Reject connections based on Filters" to use this option.

Under "Hold connections from", select from where you want to lock down offending connections.

Top

Service tab

Use this tab to set up the basics of your Internet account and the priority level at which the Internet Services executable will run.

Service account

The account to which automatched addresses are linked. If a message has an address containing @, FirstClass sends the message for delivery to the Internet account. This is also the account that Internet Services uses for mail and news routings and for public (nonauthenticated) access through HTTP, FTP, Finger, and LDAP. This name must match the name on the Gateway form, in the Gateways folder, in order for the gateway to connect to the server.

The default name is Internet. Do not change this default unless you reconfigure the Internet account and change the name. Do not change this to the name of a third party gateway.

Internet Services priority

The priority of Internet Services operations on this machine:

• High

Select this if Internet Services is running on a dedicated machine or on a system with multiple CPUs.

• Medium

Select this if the server and Internet Services are running on the same machine.

• Low

Select this to allow other software to run on this machine with little performance impact. Only do this temporarily, because Internet Services' performance will be severely affected.

We recommend against running software other than the server and Internet Services on the same machine.

Internet sessions

The maximum number of incoming Internet protocol connections (for example, Finger, POP3, HTTP) that Internet Services will accept.

Each session uses only one connection, regardless of protocol and has the potential to occupy one server network session. Since Internet Services uses caching, the actual number of sessions used may be less than the number of requests.

Check the Internet Services Monitor to see whether the number of sessions you have set is appropriate, or whether connections are being rejected.

Configure button

Opens the Service Account form. Use this form to view or update the Internet Services gateway settings for a particular account.

Top