NetMail Agent Configuration Options

This section reviews the configuration options for each of the NetMail agents.

For an overview of agent functions, see NetMail Agents.


Address Book Agent

Option Function
Configuration

 

 

IMPORTANT:  You must restart the msgldap executable to effect any changes in the Address Agent configuration. See Loading and Unloading NetMail Agents for more information.

Database Creation

How often (in days) the Address Book Agent recreates the address book index. The default is one day. The maximum setting is 99 days.

To speed up LDAP queries, the Address Book Agent maintains an index of all the information that can be queried for any user in its supported NMAP contexts---specifically, the users' e-mail addresses, first names, last names, and full names.

Although the index contains the user's address book information, the Address Book Agent only uses the index to locate users in the tree. By default, all address book information, including the user's e-mail address, is taken from the User object in eDirectory. This means the address book is always as current as eDirectory.

IMPORTANT:  The Modular Web Agent does not verify that the domain listed in the User object's Internet E-mail Address property is a supported Global or Hosting domain. Therefore, we recommend that you use the Alias Agent to populate this property or manually ensure the domain is valid. For more information, see Configuring the Alias Agent.

If the user's e-mail address is not defined in the User object's Internet E-mail Address property, the Address Book Agent dynamically generates the e-mail address as follows:

  • If the user belongs to a Hosting Domain, the Address Book Agent simply uses the username as the e-mail address.
  • If the user belongs to a Global Domain, the Address Book Agent generates the e-mail address from the username and the user's Internet domain (username@domain).

To identify the user's Internet domain, the Address Book Agent references in the following objects in the designated order:

  1. If the user is associated with a Parent object, the Address Book Agent looks in the Parent object's Global Domains list.
  2. If no Global Domain is configured in the Parent object, the agent looks for the user's Container Domain.
  3. If no Container Domain is configured, the Address Book Agent uses the messaging server's Official Domain.

Port

Specifies the LDAP port assignment. LDAP applications (such as the Modular Web Client Address Book) use this port to access the Address Book Agent for address book lookups.

The Address Book Agent's default LDAP port assignment is 389.

LDIF Export

Configures the Address Book Agent to automatically create an LDIF (LDAP Data Interchange Format) file of all user information, except information or accounts protected by User object privacy settings. You can use this file to distribute address book information to messaging systems such as remote sites that do not have access to the Address Book Agent.

The LDIF file is created as addrbook.ldf in the following directories:

  • sys:\public on NetWare systems
  • \DBF\Shared on Windows systems
  • /usr/lib on Linux systems

The LDIF file is automatically regenerated every time the Address Book Agent updates its user index.

Allow Personal Addressbook Search

Enables an LDAP client to perform a search on the user's personal address book if the LDAP connection is authenticated.

To authenticate the LDAP connection in a client such as Outlook Express, the user must configure My LDAP Server Requires Authentication, then provide his or her eDirectory username and password.

Supported Users

 

Supported Users

The messaging system contexts the Address Book Agent references to generate its user index. Users belonging to supported contexts are available for LDAP queries. Conversely, User objects not included in a supported context are not included in the agent's index and, therefore, are not available for LDAP queries.

Users with an Unlisted Privacy status are not included in the system address book, regardless of whether they are in a supported NMAP context. For more information on defining the user's privacy status, see the Privacy property in the User Objects.

Because NMAP Agents define the messaging system's supported contexts, the Supported Users property corresponds to NMAP Agents. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server that has users in its assigned contexts.

To verify that the Address Book Agent is servicing a particular NMAP Agent's user contexts:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the msgldap executable to effect any changes in the Supported Users configuration. See Loading and Unloading NetMail Agents for more information.

Status

 

 

By default, the Address Book Agent is enabled. To disable the Address Book Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the Address Book Agent at startup. However, to immediately disable the agent, you must manually unload the msgldap executable or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Starting and Stopping NetMail.

After the Address Book Agent is disabled, the messaging server does not launch the msgldap executable again until you select Enabled and restart the messaging server.


Address Book Agent Optional Features

Using a DS editing tool such as NDS Snoop, you can enable additional features in the Address Book Agent by modifying the value of the Novonyx:LDAP Options attribute.

The following table outlines all the options associated with the Novonyx:LDAP Options attribute.

Option Value Description
LDAP_SERVER_ON

1

This option is associated with the Status feature in the administrative interface.

LDIF_EXPORT_ON

2

This option is associated with the Enable Automatic LDIF File Export feature in the administrative interface.

LDAP_REQUIRE_BASEDN

4

This is the optional feature, Require Search Domain.

It requires that a Search Domain is included in the address book configuration. Specify the Search Domain in the LDAP server's URL or in the address book client. See Default LDAP server in Configuring the Mail Module for information on specifying the Search Domain in the LDAP URL.

LDAP_REQUIRE_AUTHENTICATION

8

This is the optional feature, Require Authentication.

It requires a username and password when users connect to the Address Book Agent.

LDAP_USE_USERS_BASEDN

16

This is the optional Derive Search Domain from Authentication feature.

It configures the Address Book Agent to derive the user's Search Domain from the username given during authentication.

The Search Domain is essentially an address book filter. If this option is marked, the user can only view users from his or her domain. For example, if sally@abc.com authenticates with the Address Book Agent, she is only able to view users from abc.com in her address book. If you leave the Context field blank, the Address Book Agent manifests every user in the messaging system.

The Address Book Agent can easily identify the Search Domain for users belonging to Hosting Domains because the domain is included in the username given during authentication. However, if the user belongs to a Global Domain, identifying the Search Domain is a little more complicated. The Address Book Agent looks in the following objects to identify a user's Global Domain:

  1. If the user is associated with a Parent object, the Address Book Agent looks in the Parent object's Global Domains list.
  2. If no Global Domain is configured in the Parent object, the agent looks for the user's Container Domain.
  3. If no Container Domain is configured, the Address Book Agent uses the messaging server's Official Domain.
LDAP_SEARCH_PERSONAL

32

This option is associated with the Allow Personal addressbook search feature in the administrative interface.

The value of the Novonyx:LDAP Options attribute is calculated by adding the values of the enabled features. For example, to enable the LDAP server, require user authentication, and allow users to search their personal address book, you would store 41 (1+8+32) in the Novonyx:LDAP Options attribute.


Alias Agent

Option Function
Configuration

 

 

IMPORTANT:  You must restart the msgalias executable to effect any changes in the Alias Agent's configuration. See Loading and Unloading NetMail Agents for more information.

Database Creation

 

Every _____ Day(s)

How often (in days) the Alias Agent regenerates the alias database. The default is 1 day. The maximum setting is 99 days.

The alias database contains alias tables that store the aliases and their associated usernames.

If any errors are generated in the alias database (such as duplicate aliases), the Alias Agent notes the conflict in the log file and sends an SNMP trap, if SNMP is configured.

Automatic Aliasing

If enabled, the Alias Agent automatically generates aliases for User objects in the following formats:

  • Firstname_Lastname@Domain (Steve_Johnston@novell.com)
  • First Letter+Lastnam@Domain (Sjohnsto@novell.com)

    This alias option is limited to eight characters.

  • Firstname.Lastname@Domain(Steve.Johnston@novell.com)
  • Full.M.Name@Domain (Steve.W.Johnston@novell.com)
  • Full_M_Name@Domain (Steve_W_Johnston@novell.com)

The Fullname formats only work if the users' full names are provided in the Full Name field of their User objects.

Multiple formats can be selected using Shift+click or Ctrl+click.

Automatically generated aliases are local aliases. Consequently, they are only recognized by the current Alias Agent. To ensure that these aliases are recognized throughout the messaging system, you can have only one Alias Agent.

Attribute Population

Automatic Attribute Population

Automatically populate "Internet E-mail Address" attribute

Automatically populates the Internet E-mail Address attribute in the User object with one of the following values:

  • Default e-mail address

    For information on how the default e-mail address is derived, see User E-Mail Addresses.

  • Firstname_Lastname@Domain (Steve_Johnston@novell.com)
  • First Letter+Lastnam@Domain (Sjohnsto@novell.com)

    This alias option is limited to eight characters.

Automatically populate "Internet E-mail Address" attribute continued

  • Firstname.Lastname@Domain(Steve.Johnston@novell.com)
  • Full.M.Name@Domain (Steve.W.Johnston@novell.com)
  • Full_M_Name@Domain (Steve_W_Johnston@novell.com)

The Fullname formats only work if the users' full names are typed in the Full Name field of their User objects.

Aliases

 

Local Alias

Aliases that are only recognized by the current Alias Agent. They are stored in the local Alias Agent's alias table.

Local aliases are ideal when you are maintaining identical aliases, such as Admin or Webmaster, in a single messaging system.

For more information, see Creating Aliases.

Global Aliases

Aliases that are recognized by every Alias Agent running on a distributed messaging server. Global aliases are stored in a shared alias table in the Internet Services container. The shared alias table includes entries from every Alias Agent running on a distributed messaging server.

Other than the fact that global aliases are recognized throughout the messaging system, there is no difference between local and global aliases. Global aliases are defined in exactly the same manner as local aliases and the same rules apply.

The preferred way to manage Global Aliases is to define eDirectory Alias objects. This is because eDirectory Alias objects provide all the functionality of Global Aliases, but they do not require an Alias Agent.

You cannot create Alias objects in WebAdmin; therefore, you must use another administrative tool, such as iManager, to create Alias objects.

For more information, see Creating Aliases.

Queue Server

 

Queue Server

By default, the Alias Agent's monitored queues and supported user contexts are defined by the Monitored Queues property. The Queue Server property overrides the Monitored Queues property and allows you to selectively define which message queues you want the Alias Agent to monitor.

IMPORTANT:  You should only define this property if you want to restrict which message queues the Alias Agent monitors. Otherwise, you do not need to configure this property.

The Queue Server property defines the message queues monitored by the Alias Agent. Messages passing through the specified NMAP Agents' message queues are scanned by the Alias Agent. If a message recipient matches any of the Alias Agent's defined aliases, it replaces the alias with the corresponding e-mail address.

A single Alias Agent can monitor multiple message queues; however, you should not configure multiple Alias Agents to monitor the same queue. Doing so produces inconsistent results such as duplicate messages. Only one Alias Agent should monitor each message queue.

Because NMAP Agents manage the message queues, the Queue Server property corresponds to NMAP Agents.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must ensure that the Alias Agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that an Alias Agent is registered to a particular message queue:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the msgalias executable to effect any changes in the Monitored Queues configuration. See Loading and Unloading NetMail Agents for more information.

Monitored Queues

 

Monitored Queues

By default, this property defines the Alias Agent's monitored queues and its supported user contexts.

Monitored Queues are the message queues monitored by the Alias Agent. Messages passing through the specified NMAP Agents' message queues are scanned by the Alias Agent. If a message recipient matches any of the Alias Agent's defined aliases, it replaces the alias with the corresponding e-mail address.

The supported user contexts represent the users serviced by the Alias Agent. The Alias Agent can automatically generate aliases for supported users. It can also populate the Internet E-mail Address attribute in the users' associated User objects.

Because NMAP Agents manage both the message queue and the messaging system's user contexts, the Monitored Servers property corresponds to NMAP Agents.On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server that has users in its assigned contexts.

A single Alias Agent can service multiple NMAP Agents; however, you should not configure multiple Alias Agents to service the same NMAP Agent. Doing so produces inconsistent results such as duplicate messages. Only one Alias Agent should service each NMAP Agent.

To verify that the Alias Agent is servicing a particular NMAP Agent:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the msgalias executable to effect any changes in the Supported Users configuration. See Loading and Unloading NetMail Agents for more information.

Status

 

 

By default, the Alias Agent is enabled. To disable the Alias Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the Alias Agent at startup. However, to immediately disable the agent, you must manually unload the msgalias executable or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Loading and Unloading NetMail Agents on Linux.

After the Alias Agent is disabled, the messaging server does not launch the msgalias executable again until you select Enabled and restart the messaging server.


AntiSpam Agent

Option Function
Blocked Sites

 

Configuration

IMPORTANT:  You must restart the antispam executable to effect any changes in the AntiSpam Agent's configuration. See Loading and Unloading NetMail Agents for more information.

Send Back

Returns blocked messages to their senders with the message "Mail from user_or_domain is blocked from this site."

CC Postmaster

Copies the postmaster on blocked messages that are returned to their senders. This option works in conjunction with Send Back.

Blocked Sites

A blackout list of domains and e-mail addresses. Messages from these domains and e-mail addresses are removed from the designated message queues.

For more information, see Adding Domains or E-Mail Addresses to the Blocked Sites List.

Monitored Queues

 

Monitored Queue

The message queue monitored by the AntiSpam Agent. Messages passing through the specified message queue are scanned by the AntiSpam Agent. If a message is sent from a domain or e-mail address in the agent's blackout list, the AntiSpam Agent deletes the message from the queue. The AntiSpam can also be configured to return the blocked message to its sender with the message "Mail from user_or_domain is blocked from this site."

A single AntiSpam Agent can monitor multiple message queues; however, you should not configure multiple AntiSpam Agents to monitor the same queue. Doing so produces inconsistent results such as duplicate messages. Only one AntiSpam Agent should monitor each message queue.

Because NMAP Agents manage the message queues, the Monitored Queues property corresponds to NMAP Agents. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must ensure that the AntiSpam Agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that an AntiSpam Agent is registered to a particular message queue:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the antispam executable to effect any changes in the Monitored Queues configuration. See Loading and Unloading NetMail Agents for more information.

Status

 

Status

By default, the AntiSpam Agent is enabled. To disable the AntiSpam Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the AntiSpam Agent at startup. However, to immediately disable the agent, you must manually unload the antispam executable or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Starting and Stopping NetMail on Linux.

After the AntiSpam Agent is disabled, the messaging server does not launch the antispam executable again until you select Enabled and restart the messaging server.


AntiVirus Agent

Option Function
Configuration

 

 

IMPORTANT:  You must restart the avirus executable to effect any changes in the AntiVirus Agent configuration. See Loading and Unloading NetMail Agents for more information.

Engine

IMPORTANT:  For NetMail 3.5 to use the designated antivirus engine, the antivirus engine's executable must be located in the following directories:

  • /usr/lib/ (Linux)
  • sys:\system\ (NetWare)
  • \windows_directory\system32\ (Windows)

CA InoculateIT

The AntiVirus Agent supports any Computer Associates InoculateIT-compliant virus engine.

If properly configured, the NetMail AntiVirus Agent accesses the bare engine and performs all required scanning. Consequently, unless you also use the server for file and print services, we recommend that you do not run the full scanning engine. Allowing the AntiVirus Agent to perform all required scanning improves system performance because the agent does not scan the temporary and permanent files written by NetMail.

If you need to run the full scanning product, you must load InoculateIT in the autoexec.ncf file or startup script before loading NetMail; InoculateIT cannot start if its engine (avengine) is already loaded. In this configuration, you must also ensure that you never unload InoculateIT without first unloading the NetMail AntiVirus Agent.

McAfee

The AntiVirus Agent supports any McAfee NetShield-compliant virus engine.

If properly configured, the NetMail AntiVirus Agent accesses the bare engine and performs all required scanning. Consequently, unless you also use the server for file and print services, we recommend that you do not run the full scanning engine. Allowing the AntiVirus Agent to perform all required scanning improves system performance because the agent does not scan the temporary and permanent files written by NetMail.

Command Software

The AntiVirus Agent supports any Command AntiVirus* compliant virus engine.

Symantec AntiVirus Scan Engine

The AntiVirus Agent supports the Symantec AntiVirus Scan Engine.

When you select Symantec AntiVirus Scan Engine, the configuration options change to Host and Port. These options are explained below.

Pattern-file path:

The path to the virus engine's pattern files.

IMPORTANT:  Do not include the filenames.

Pattern files are virus definition files that you download periodically from the Computer Associates, McAfee, or Command Software Web sites to keep your virus protection up to date.

This field is specific to the CA InoculateIT, McAfee, and Command Software virus engines.

Host

The hostname or IP address of the server running the Symantec AntiVirus Scan Engine.

This field is specific to Symantec AntiVirus Scan Engine.

Port

The port at which the AntiVirus Agent can connect to the Symantec AntiVirus Scan Engine.

This field is specific to the Symantec AntiVirus Scan Engine.

Behavior

 

Scan

The scanning options determine which messages are scanned for viruses.

All messages

Scans all messages that pass through the AntiVirus Agent's monitored queues.

Messages for Local Recipients

Only scans messages addressed to users for whom virus scanning is enabled. You can enable virus scanning at the Parent or User objects.

Return to sender if infected

Returns the message to the sender with a notice indicating which virus the message contained.

Notify intended recipient if infected

Sends a virus alert to the message recipients. The alert indicates who tried to send the message and which virus the message contained.

Monitored Queues

 

Monitored Queue

The message queue monitored by the AntiVirus Agent. Messages passing through the specified message queue are scanned by the AntiVirus Agent. If a message contains a virus, the AntiVirus Agent deletes the message from the queue. The AntiVirus Agent can also be configured to return the message to the sender with a notice indicating which virus the message contained. It can also send a virus alert to the message recipients indicating who tried to send the message and which virus the message contained.

A single AntiVirus Agent can monitor multiple message queues; however, you should not configure multiple AntiVirus Agents to monitor the same queue. Doing so produces inconsistent results such as duplicate messages. Only one AntiVirus Agent should monitor each message queue.

Because NMAP Agents manage the message queues, the Monitored Queues property corresponds to NMAP Agents. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must ensure that the AntiVirus Agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that an AntiVirus Agent is registered to a particular message queue:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the avirus executable to effect any changes in the Monitored Queues configuration. See Loading and Unloading NetMail Agents for more information.

Status

 

 

By default, the AntiVirus Agent is enabled. To disable the AntiVirus Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the AntiVirus Agent at startup. However, to immediately disable the agent, you must manually unload the avirus executable or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Starting and Stopping NetMail.

After the AntiVirus Agent is disabled, the messaging server does not launch the avirus executable again until you select Enabled and restart the messaging server.

NOTE:  When you initially unload the avirus executable, the messaging system is not left unprotected. Because of the design of the message queue, NMAP temporarily pauses message processing while it tries to connect to the AntiVirus Agent. It attempts a connection several times before it continues message processing without the agent. This timeout period (approximately 30 seconds) provides enough time to reload the AntiVirus Agent after updating pattern files or engine code.

If you are using the InoculateIT engine without running the full scanning product, you only need to update the pattern file and/or the engine NLM.TM NetMail automatically detects any such update, pauses the queue, reloads the engine and the new pattern files, and then resumes message processing.


AutoReply Agent

Option Function
Monitored Queues

 

Monitored Queues

The message queue monitored by the AutoReply Agent. Messages passing through the specified message queue are scanned by the AutoReply Agent. If a message is addressed to a user with an enabled autoreply message, the AutoReply Agent generates the autoreply message and drops it in the current message queue.

A single AutoReply Agent can monitor multiple message queues; however, you should not configure multiple AutoReply Agents to monitor the same queue. Doing so produces inconsistent results such as duplicate messages. Only one AutoReply Agent should monitor each message queue.

Because NMAP Agents manage the message queues, the Monitored Queues property corresponds to NMAP Agents. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must ensure that the AutoReply Agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that an AutoReply Agent is registered to a particular message queue:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the forward executable to effect any changes in the Monitored Queues configuration. See Loading and Unloading NetMail Agents for more information.

Status

 

 

By default, the AutoReply Agent is enabled. To disable the AutoReply Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the AutoReply Agent at startup. However, to immediately disable the agent, you must manually unload the forward executable or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Starting and Stopping NetMail.

After the AutoReply Agent is disabled, the messaging server does not launch the forward executable again until you select Enabled and restart the messaging server.


Calendar Agent

Option Function
Monitored Queues

 

Monitored Queues

The message queue monitored by the Calendar Agent. The Calendar Agent scans the specified message queues for iCal status messages. The Calendar Agent processes all Accept, Delegate, and Decline responses and automatically updates the event's status information in the event organizer's calendar.

Only the user who schedules the event can view who has accepted, delegated, or declined a calendar event. Attendees see only their own status; every other attendee is viewed as pending.

A single Calendar Agent can monitor multiple message queues; however, you should not configure multiple Calendar Agents to monitor the same queue. Doing so produces inconsistent results such as duplicate messages. Only one Calendar Agent should monitor each message queue.

Because NMAP Agents manage the message queues, the Monitored Queues property corresponds to NMAP Agents. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must ensure that the Calendar Agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that an Calendar Agent is registered to a particular message queue:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the calagent executable to effect any changes in the Monitored Queues configuration. See Loading and Unloading NetMail Agents for more information.

Status

 

 

By default, the Calendar Agent is enabled. To disable the Calendar Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the Calendar Agent at startup. However, to immediately disable the agent, you must manually unload the calagent executable or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Starting and Stopping NetMail.

After the Calendar Agent is disabled, the messaging server does not launch the calagent executable again until you select Enabled and restart the messaging server.


CAP Agent

Option Function
Status

 

Agent Status

By default, the CAP Agent is enabled. To disable the CAP Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the CAP Agent at startup. However, to immediately disable the agent, you must manually unload the capd executable or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Loading and Unloading NetMail Agents.

After the CAP Agent is disabled, the messaging server does not launch the capd executable again until you select Enabled and restart the messaging server.


Connection Manager

Option Function
Configuration

 

Expiration Timeout

The amount of time (in minutes) that an IP address is stored by the Connection Manager Agent. You can designate any value between 5 and 1440 minutes.

IMPORTANT:  You must restart the gkeeper executable to effect any changes in this property. See Loading and Unloading NetMail Agents for more information.

Status

 

 

By default, the Connection Manager Agent is enabled. To disable the Connection Manager Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the Connection Manager Agent at startup. However, to immediately disable the agent, you must manually unload the gkeeper executable or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Loading and Unloading NetMail Agents.

After the Connection Manager Agent is disabled, the messaging server does not launch the gkeeper executable again until you select Enabled and restart the messaging server.


IMAP Agent

Option Function

Status

By default, the IMAP Agent is enabled. To disable the IMAP Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the IMAP Agent at startup. However, to immediately disable the agent, you must manually unload the imapd executable or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Loading and Unloading NetMail Agents.

After the IMAP Agent is disabled, the messaging server does not launch the imapd executable again until you select Enabled and restart the messaging server.


List Agent

Option Function
Schedule

 

Configuration

IMPORTANT:  You must restart the imslist executable to effect any changes in the List Agent configuration. See Loading and Unloading NetMail Agents for more information.

Digest Creation Time

The time each day when the List Agent compiles and distributes Mailing List digests. Specify the time using the 24-hour clock.

A digest is a compilation of the messages broadcast over a mailing list in a 24-hour period. The List Agent generates digests only for Mailing List objects that have the Generate Digest option selected in the mailing list configuration menu.

Monitored Queues

 

 

The message queue monitored by the List Agent. Messages passing through the specified message queue are scanned by the List Agent. If a message is addressed to a mailing list, the List Agent either posts the message or forwards it to the list moderator. See Configuring an NDS Mailing List or the Posting Accepted From property in Configuring a Mailing List for more information.

A single List Agent can monitor multiple message queues; however, you should not configure multiple List Agents to monitor the same queue. Doing so produces inconsistent results such as duplicate messages. Only one List Agent should monitor each message queue.

Because NMAP Agents manage the message queues, the Monitored Queues property corresponds to NMAP Agents. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must ensure that the List Agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that an List Agent is registered to a particular message queue:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the imslist executable to effect any changes in the Monitored Queues configuration. See Loading and Unloading NetMail Agents for more information.

Status

 

 

By default, the List Agent is enabled. To disable the List Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the List Agent at startup. However, to immediately disable the agent, you must manually unload the imslist executable or restart the messaging server. For more information about manually unloading NetMail agents or restarting the messaging server, see Starting and Stopping NetMail.

After the List Agent is disabled, the messaging server does not launch the imslist executable again until you select Enabled and restart the messaging server.


Modular Web Agent

Option Function
Configuration

 

 

IMPORTANT:  You must restart the modwebd executable to effect any changes in the Modular Web Agent's configuration. See Starting and Stopping NetMail for more information.

Identifier

The name of your company. This appears in the title bar of each client window.

Default Language

The default language for the Modular Web Agent and its submodules. The language defined in the Parent object or the User Options menu overrides this default setting.

Default Timezone

The default time zone for the Modular Web Agent and its submodules. The time zone defined in the Parent object, User object, or the User Options menu overrides this default setting.

Ports

 

Port

The port the Modular Web Agent uses for HTTP connections. The default HTTP port assignment is port 80.

Use the default port number unless that port number is already in use by another program on the server.

IMPORTANT:   The NetWare Management Portal also uses the default HTTP port assignment of 80. If you are running the NetWare Management Portal NLMTM on your messaging server (httpstk.nlm), users are not able to reach the Modular Web Agent. For users to reach the Modular Web Agent, you must unload httpstk.nlm from your Modular Web Agent server, change the NetWare Management Portal's port assignment, or change the Modular Web Agent's port assignment. Otherwise, when users type the Modular Web Agent server's IP address or hostname, they launch the NetWare Management Portal.

SSL Port

The port the Modular Web Agent uses for secure HTTP (HTTPS) connections. The default HTTPS port assignment is port 443.

Use the default port number unless that port number is already in use by another program on the server.

Template

NetMail templates allow you to control the mail client interface. NetMail 3.5 ships with two client templates---WebAccess and Webmail.

The WebAccess interface provides standard mail client functionality including calendaring, scheduling, busy search, assigning tasks, writing notes, and advanced rules. Administrators can also give users access to self-administration features like changing passwords and configuring vacation messages. Furthermore, administrators can use the WebAccess interface to delegate NetMail administrative functions such as adding, modifying, and deleting user accounts. For more information on delegating NetMail administration, see Task-Oriented Management.

Webmail is patterned after the NIMS 2.5 mail client interface. It provides all the features of the WebAccess template with the exception of advanced rules and adding, modifying, or deleting user accounts.

For more information on templates, see Templates.

Default Template

The template NetMail uses if no template is defined in the User and Parent objects.

Select the default template from the Available Templates list.

Available Templates

The list of available templates.

To add templates to the list:

  1. Click the browse button Browse button.
  2. In the Contents window, click the Template objects you want to add. The objects are added to Selected Objects list.
  3. When finished, click Save.

IMPORTANT:  To add a template to the list of available templates, you must first create the template object in the Template container.

Status

 

 

By default, the Modular Web Agent and its plug-in modules are enabled. To disable the Modular Web Agent and its plug-ins:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the Modular Web Agent and its plug-in modules at startup. However, to immediately disable the agent and its plug-in modules, you must manually unload modwebd or restart the messaging server. For more information about manually unloading NetMail agents or restarting the messaging server, see Starting and Stopping NetMail.

After the Modular Web Agent is disabled, the messaging server does not launch modwebd again until you select Enabled and restart the messaging server.


ModWeb Calendar Module

Option Function
Queue Server

 

Queue Server

The message queue to which the ModWeb Calendar Module delivers appointments, notes, and tasks that need to be processed. Because NMAP Agents manage the message queue, the Queue Server property corresponds to an NMAP Agent.

Each ModWeb Calendar Module can only have one queue server. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must design your system so that each queue agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that the ModWeb Calendar Module is registered to a particular queue server:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the modwebd executable to effect any changes in the ModWeb Calendar Module's configuration. See Loading and Unloading NetMail Agents for more information.


ModWeb Mail Module

Option Function
Options

 

 

IMPORTANT:  You must restart the modwebd executable to effect any changes in the ModWeb Mail Module's configuration. See Loading and Unloading NetMail Agents for more information.

Limits

 

Maximum number of recipients per e-mail

Limits the number of recipients for messages sent by users in the current messaging system.

The ModWeb Mail Module does not restrict the number of recipients for inbound messages that the Modular Web Agent downloads from the user's mailbox.

Message Size Limit

The maximum message size users within the current messaging system can send.

The ModWeb Mail Module does not restrict the size of inbound messages the Modular Web Agent downloads from the user's mailbox.

Addressbook

The Addressbook options allow you to control which address books users can access in WebAccess and Webmail.

To sort the ModWeb address books, see Configuring the Mail Module.

Personal

If enabled, this option allows WebAccess and Webmail users to create personal address books.

A user's personal address book is stored in his or her eDirectory User object. Consequently, users can access their personal address book from any location as long as they are logged in to the network.

System-Wide

If enabled, this option gives users access to a system-wide address book in WebAccess and Webmail.

ldap://user:password@hostname:port/?basedn

  • The user:password variable is the user's name and password.
  • Hostname identifies the LDAP server's host name or IP address. If you type the IP address of a server running the Address Book Agent, users can access address book information from eDirectory.

  • Port specifies the LDAP port assignment. If the LDAP server uses the default LDAP port (port 389), you do not need to specify a port.
  • Basedn identifies the address book context. This is required if the Require DN attribute is added to the Address Book Agent. It is ignored if the Derive DN from Authentication is added to the Address Book Agent. See Address Book Agent Optional Features for more information.

If you are using the Address Book Agent to provide a system-wide address book, the only required parameters are hostname:port.

Users with the Privacy attribute set to Limited or None in their eDirectory User object are visible to other NetMail users in the System-Wide Addressbook. Users with an listed privacy setting are not visible in the System-Wide Addressbook.

For information on providing domain-specific address books, see Managing Multiple Address Books.

Default LDAP Server

If enabled, this option allows users to use the designated LDAP server as a public address book in WebAccess and Webmail.

To define a default Public LDAP Server, type the host name or IP address of any public LDAP server in the LDAP URL field. You can use the same LDAP parameters discussed under System-Wide LDAP Server.

Users can designate a different public address book in WebAccess or Webmail if an LDAP server is not configured in the user's associated Parent object, or if the User object is configured to take precedence over the Parent object.

Queue Server

 

Queue Server

The message queue to which the ModWeb Mail Module delivers messages that need to be processed. Because NMAP Agents manage the message queue, the Queue Server property corresponds to an NMAP Agent.

Each ModWeb Mail Module can only have one queue server. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must design your system so that each queue agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that the ModWeb Mail Module is registered to a particular queue server:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the modwebd executable to effect any changes in the ModWeb Mail Module's configuration. See Loading and Unloading NetMail Agents for more information.


ModWeb Preferences Module

Option Function
Options

 

 

IMPORTANT:  You must restart the modwebd executable to effect any changes in the Preference Module's configuration. See Loading and Unloading NetMail Agents for more information.

Password Settings

 

Allow Change

If Yes, this option enables users to change their login password from the Modular Web Agent templates.

Because NetMail is completely integrated with eDirectory, the user's ModWeb password is the same as the user's NetWare login password. Therefore, this option actually gives your users rights to their NetWare login password through Modular Web Agent, regardless of whether they have rights to the actual password property in their eDirectory User object.

Require SSL

If Yes, this option requires Modular Web Agent users to make an SSL connection to the server running the ModWeb Preferences Module before they can change their passwords.

You must have a server certificate installed on the current messaging server before you can enable this option. For information on setting up your server certificate, see Setting Up TLS and SSL.

Disable Options

Disables user configuration options in the WebAccess and Webmail templates. If Yes, these options do not appear in the User Options menu.

Timeout

The amount of idle time before the user is automatically logged out of the Modular Web client.

Colors

Template color definition options. This option is specific to the Webmail template.

Privacy

The user's level of privacy within the messaging system. The privacy level controls what the Address Book Agent reveals about the user.

Signature

Custom text automatically inserted at the end of each message.


ModWeb Task Management Module

Option Function

 

The Task Management Module has no configurable options. However, you must run it on the messaging server to enable TOM administration. See Task-Oriented Management for more information on configuring TOM administration.


NMAP Agent

Option Function
Parameters

 

 

IMPORTANT:  You must restart the nmapd executable to effect any changes in these properties. See Loading and Unloading NetMail Agents for more information.

Message Store

The drive or volume and, optionally, the directory where users' mailboxes are located. On a NetWare server, the message store's default location is sys:\novonyx\mail. On a Windows server, the default message store directory is drive:\program files\novell\netmail\mail. On a Linux server, the default location is the /var/opt/novell/netmail directory.

For detailed information about the message store directory structure, see Message Store Directory Structure.

IMPORTANT:  Because NetWare requires free space on the sys: volume, weigh the potential disk space requirements of your messaging system before creating the mail directories on the sys: volume of a NetWare server.

If you need to move the message store,

  1. Stop the NMAP Agent.
  2. Move the existing message store directory to its new location.
  3. Change the location specified in the NMAP Agent's Message Store field.
  4. Restart the NMAP Agent. See Loading and Unloading NetMail Agents.

IMPORTANT:  It is best to change the location of the message store before you put your NetMail system into production.

In addition to the primary message store on the messaging server, you can define message store directories for Container and Parent objects. For more information, see Creating Separate Message Stores for Each Domain.

Spool Directory

The drive or volume and, optionally, the directory where the message queue is located.

For detailed information about the Spool directory structure and how the message queue works, see Message Processing.

SCMS Directory

The drive or volume and, optionally, the directory where the Single Copy Message Store (SCMS) is located.

For detailed information about the SCMS directory structure and how it works, see Single Copy Message Store.

Minimum Space

The minimum amount of free space you want to maintain on the drive or volume hosting the message queue. The default is 2048 KB.

If the server reaches the Minimum Space quota, the messaging server bounces all incoming messages, stops system logging, and sends an SNMP trap.

On NetWare, if your mail directories are on the sys: volume, you can use this option to maintain the free space required by NetWare.

Queue Parameters

 

Retry Interval

The number of minutes the NMAP Agent waits before trying to resend any e-mail message. The default is 30 minutes.

NetMail never queues messages unless there is a problem. Under normal conditions, the NMAP Agent immediately tries to send messages after they are processed in the queue.

If, for some reason, the message is not sent, it remains in the queue for the number of minutes specified in the Retry Interval before NMAP tries to resend the message. For example, if you send a message to a company whose mail server is down, the messaging server keeps trying to send the message at the designated intervals.

Changes to this property are effective within 5 minutes.

Retry Timeout

The number of days the NMAP Agent keeps trying to send any e-mail message before removing the message from the queue. The default is five days.

The NMAP Agent attempts to bounce undeliverable messages before removing them.

IMPORTANT:  You must restart the nmapd executable to effect any changes in this property. See Loading and Unloading NetMail Agents for more information.

Options

 

Bounced Message Control

A spam control feature that sets a threshold for the number of bounced messages NMAP can process within a set number of seconds. If the number of bounced messages exceeds the defined threshold, the messages are deleted from the message queue.

It is a common practice for spammers to falsify the From: field in their message so the resulting bounced messages go to a mail server other than their own. Unfortunately, the server that actually owns the domain specified in the From: field is inundated with thousands of bounced messages in a short period of time.

The Bounced Message Control feature enables you to keep your NetMail system from wasting system resources during such attacks.

Changes to this property are effective within 5 minutes.

CC Postmaster

Enable this option to send the postmaster a copy of bounced messages.

Limit Bounces To

Enable this option to turn on Bounced Message Control.

  • Entries: The number of bounced messages NMAP can process during the Interval time frame.

  • Interval: The time frame threshold (in seconds).

If the number of bounced message exceeds the Entries threshold within the Interval time frame, NMAP deletes the messages.

Forward Local Undeliverable Messages

The host name or IP address of a server designated to receive messages that are addressed to the messaging system's domain but are undeliverable within the local NetMail system. If you specify an IP address rather than a host name, you must enclose the IP address in square brackets [ ] to form a valid e-mail address.

Changes to this property are effective within 5 minutes.

When the NMAP Agent determines that a message recipient is within its Internet domain but cannot find the user in eDirectory, the NMAP Agent modifies the domain portion of the address with the value placed in this field and re-queues the message.

WAN environments commonly use this feature with standalone messaging servers in remote offices. For detailed information on this configuration, see Multiple Messaging Server WAN.

This option also enables NetMail to share a domain name with another e-mail system such as Novell GroupWise, Lotus Notes, or Microsoft Exchange. When this option is configured, the NMAP Agent forwards messages that belong to the domain but are not addressed to users within the NetMail messaging system. For more information on domain sharing, see Domain Sharing.

Remote Queue Restrictions

This option regulates when remote messages are passed to the SMTP Agent for delivery across the Internet. If the option is enabled, NMAP holds remote messages in queue 7 until the designated time frames. Only then does it notify the SMTP Agent to pick up the messages.

This feature is for countries where users must pay a per use line fee. Using this option, you can restrict remote message delivery to non-peak hours.

IMPORTANT:  You must restart the nmapd executable to effect any changes in this property. See Loading and Unloading NetMail Agents for more information.

Weekdays

In the Weekdays field, specify a time span (using the 24-hour clock) when you do not want the NMAP Agent to process outgoing messages Monday through Friday.

Weekends

In the Weekends field, specify a time span (using the 24-hour clock) when you do not want the NMAP Agent to process outgoing messages Saturday through Sunday.

Context

 

Managed Contexts

The eDirectory contexts serviced by the current NMAP Agent. The original context is defined when creating the NMAP Agent. You can add other user contexts from the Context page. Because NMAP contexts are not inherited, add every container or sub-container serviced by an NMAP Agent to that agent's context list.

Messaging services are automatically provided to every user in the NMAP Agent's assigned contexts. User mailboxes are created in the local message store directory the first time users log in or receive messages.

IMPORTANT:  Do not add the same context to multiple NMAP Agents.This produces unpredictable behavior in NetMail systems.

On standard versions of NetMail, the context list is updated in memory and changes are effective within 5 minutes.

The Messaging Server's Context List

NMAP contexts are tracked by the messaging server. When it starts, the messaging server generates a list of NMAP contexts and holds it in server memory. In distributed environments, the context list includes the assigned contexts for every NMAP Agent in the Internet Services container. On standalone messaging servers, this list only includes the local NMAP Agent's assigned contexts.

NetMail agents reference the messaging server's context list in providing user-related services. If a user is not included in the list, the agent's services are denied. For example, users cannot establish a POP or IMAP connection to the messaging system unless they are in the context list.

System Requirements

eDirectory requires a minimum of 6 KB per User object replicated on the server. Therefore, in addition to the standard NetMail disk space requirements, you must calculate at least an additional 6 KB for every eDirectory User object in the NMAP Agent's context.

Additionally, the NMAP Agent requires local access to all User objects within its assigned contexts.

Quota

 

Quota Parameters

The system administrator can define mailbox quotas for specific users or for all users serviced by the current NMAP Agent. Messages, folders, and calendar items count against the mailbox quota.

IMPORTANT:  You must restart the nmapd executable to effect any changes in these properties. See Loading and Unloading NetMail Agents for more information.

Per User Quota

Enable this option to require individual user quotas. User quotas are set in the NetMail Configuration page of the User object. For further information on User object configuration, see User Objects.

System-Wide Mailbox Quotas

To set the same quota for all mailboxes on the current messaging server, enable this option and type the maximum mailbox size in the Kbyte field.

If you enable both Per User and System-Wide Mailbox Quotas, you can set quotas at both levels. While the system-wide quota serves as the default quota for all users in the NMAP Agent's assigned contexts, quotas defined in the User object take precedence. For example, you can set a default, system-wide mailbox quota but still allocate more disk space to specific users such as the messaging server postmaster, system administrators, or VIPs using User object mailbox quotas.

NOTE:  You can also define mailbox quotas at the Parent object level. For more information on Parent object mailbox quotas, see the Per User Mailbox Quota property in Configuring Parent Objects.

Quota Return Message

An optional message that is returned to the sender when the recipient has exceeded his or her mailbox quota. The message notifies the sender that the recipient has exceeded the allotted mailbox quota and cannot receive additional messages.

NOTE:  When users are within 10% of their mailbox quota, they receive a system message notifying them that their mailbox is almost full. The message advises them to delete some of the messages and warns that when their mailbox is full, all inbound messages are returned to the sender.

SCMS

 

 

The Single Copy Message Store (SCMS) feature allows NMAP to store e-mail messages sent to multiple recipients in a shared location on the messaging server. By default, messages sent to five or more users and exceeding 5 KB are stored in the shared message directory. To store a message in the SCMS directory, it must exceed both thresholds.

When a message exceeds the specified thresholds, NMAP places a single copy of the message and its attachments in the shared message directory. A pointer is placed in the recipients' mailboxes, directing NMAP to the complete message in the Single-Copy Message Store (SCMS) directory. When the last user downloads or deletes the message, it is deleted from the shared directory.

The SCMS feature conserves server disk space. Without SCMS, long messages and large attachments are sent to every recipient's mailbox, rapidly consuming large amounts of server disk space.

Changes to this property are effective within 5 minutes.

For more information on the SCMS directory, see Single Copy Message Store Directory Structure .

Recipients

The SCMS threshold for a message's number of recipients. If the number of message recipients is equal to or more than the designated number of recipients and it exceeds the Minimum Message Size threshold, it is stored in the SCMS directory.

Message Size

The SCMS threshold for a message's minimum size, in kilobytes. If a message is larger than the designated message size and it exceeds the Minimum Number of Recipients threshold, it is stored in the SCMS directory.

Trusted Hosts

 

Trusted Hosts

When NetMail agents need to access the message store or message queue, they create an IP connection to the associated NMAP Server and request the information they need. By default, the NMAP Agent requires all agents running on other servers (including other NMAP Agents) to authenticate with the server before it carries out their requests.

NetMail agent authentication does not use clear-text passwords.

By designating a messaging server as a trusted host, agents running on that server are not required to authenticate with the NMAP server. Rather, they are given open access to the NMAP Agent and its accompanying message queues and mail directories.

WARNING:  Because trusted hosts have complete access to all mailboxes and queued messages, you must secure the server consoles of all messaging servers with trusted host status. Do not grant trusted host status to Linux machines unless login access to the trusted host machines is restricted to the system administrator.

Because of the inherent security risks associated with this option, we recommend that you grant trusted host status only for testing purposes or to messaging servers running third party agents.

Changes to this property are effective within 5 minutes.

IP Addresses

The IP address of messaging servers hosting NetMail agents that need open access to the NMAP Agent.

Enter one IP address per line.

On NetWare, 127.0.0.0 and localhost are automatically trusted hosts; therefore, you do not need to add them to the list.

Clients

 

 

This page lists all the NetMail agents configured to monitor the current NMAP Agent's message queue, regardless of whether they reside on the current messaging server or on a remote messaging server.

NOTE:  NetMail Agents that monitor the message queue include the SMTP, Proxy, Modular Web, AntiVirus, AntiSpam, List, Alias, AutoReply, Rule, Calendar, and Plupack Agents.

The Clients page does not necessarily reflect those agents currently registered with the NMAP Agent. Although an agent is configured to monitor the NMAP Agent's message queue, it might not have actually loaded or it might not have registered with the NMAP Agent. Therefore, this page should not be used to troubleshoot the message queue.

To view which agents are currently registered with the NMAP Agent:

  1. Telnet to the messaging server running the NMAP Agent at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

This is an informational page; you cannot add agents to or delete agents from the list.

Status

 

 

By default, the NMAP Agent is enabled. To disable the NMAP Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the NMAP Agent at startup. However, to immediately disable the agent, you must manually unload nmapd or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Loading and Unloading NetMail Agents.

After the NMAP Agent is disabled, the messaging server does not launch nmapd again until you select Enabled and restart the messaging server.


Pluspack Agent

Option Function
Signatures

 

Text Signature

If enabled, appends the plain text signature to every outbound, remote message passing through the Pluspack Agent's monitored queues.

HTML Signature

If enabled, appends the HTML signature to every outbound, remote message passing through the Pluspack Agent's monitored queues.

Message Copy

 

Copy Outbound Messages

If enabled, copies every outbound, remote message passing through the Pluspack Agent's monitored queues.

Copy to User

The user account to which the copies of remote messages are sent.

Folder

The specific folder in the designated user's mailbox to which the copies of remote message are sent. If this field is left blank, the messages are placed in the user's Inbox.

Remote Sending

 

OutBound Sending Restrictions

The Remote Sending options in the Pluspack Agent can be enabled or disabled.

Allow Sending if Member of NDS Group

If this option is selected, only the members of the designated eDirectory Group are allowed to send messages outside the current messaging system.

You can select only one eDirectory Group.

Refuse Sending if Member of NDS Group

If this option is selected, the members of the designated eDirectory Group are not allowed to send messages outside the current messaging system.

Group

The eDirectory Group object used to include or exclude users for remote sending.

Refuse if sender did not authenticate

If Allow Sending if Member of NDS Group is selected, this option requires the members of the Group to authenticate their connection before they are allowed to send messages outside the current messaging system.

Users can authenticate their connection using SMTP authentication or the SMTP-after-POP option.

WARNING:  If you are using a Proxy Server, we recommend that you use ESMTP authentication rather than SMTP-after-POP because the same IP address might be assigned to multiple users. For more information on SMTP authentication, see the Allow Remote Sending for Authenticated Users Only feature in the SMTP Agent.

Return status to sender if refused

If a user's remote message is refused, this option returns a status message to the sender indicating that he or she is not allowed to send remote messages.

Monitored Queues

 

Monitored Queues

The message queue monitored by the Pluspack Agent. Messages passing through the specified message queue are scanned by the Pluspack Agent. All messages addressed to remote recipients are processed by the Pluspack Agent.

A single Pluspack Agent can monitor multiple message queues; however, you should not configure multiple Pluspack Agents to monitor the same queue. Doing so produces inconsistent results such as duplicate messages. Only one Pluspack Agent should monitor each message queue.

Because NMAP Agents manage the message queues, the Monitored Queues property corresponds to NMAP Agents. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must ensure that the Pluspack Agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that a Pluspack Agent is registered to a particular message queue:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the pluspackd executable to effect any changes in the Monitored Queues configuration. See Loading and Unloading NetMail Agents for more information.


POP Agent

Option Function
Status

 

Agent Status

By default, the POP Agent is enabled. To disable the POP Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the POP Agent at startup. However, to immediately disable the agent, you must manually unload pop3d or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Loading and Unloading NetMail Agents.

After the POP Agent is disabled, the messaging server does not launch pop3d again until you select Enabled and restart the messaging server.


Proxy Agent

Option Function
Configuration

 

 

IMPORTANT:  You must restart the mailprox executable to effect any changes in the Proxy Agent's configuration. See Loading and Unloading NetMail Agents for more information.

Run interval

The number of hours that elapse between each message retrieval cycle.

Simultaneous Threads

The number of threads you want to use to simultaneously retrieve messages. The more threads, the faster the message retrieval, but additional threads consume additional server memory.

Queue Server

 

Queue Server

The message queue to which the Proxy Agent delivers messages that need to be processed. Because NMAP Agents manage the message queue, the Queue Server property corresponds to an NMAP Agent.

Each Proxy Agent can only have one queue server. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must design your system so that each queue agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that a Proxy Agent is registered to a particular queue server:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the mailprox executable to effect any changes in the Queue Server configuration. See Loading and Unloading NetMail Agents for more information.

Supported Users

 

Supported Users

The users serviced by the Proxy Agent. Users belonging to supported contexts can proxy other mail accounts. (The Proxy Agent must be enabled on the users' associated User or Parent object.)

A single Proxy Agent can service multiple user contexts; however, you should not configure multiple Proxy Agents to service the same context. Doing so produces inconsistent results such as duplicate messages. Only one Proxy Agent should service each user context.

Because NMAP Agents manage the messaging system's user contexts, the Supported Users property corresponds to NMAP Agents.On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server that has users in its assigned contexts.

To verify that the Proxy Agent is servicing a particular NMAP Agent's user contexts:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the mailprox executable to effect any changes in the Supported Users configuration. See Loading and Unloading NetMail Agents for more information.

Status

 

 

By default, the Proxy Agent is enabled. To disable the Proxy Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the Proxy Agent at startup. However, to immediately disable the agent, you must manually unload mailprox or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Loading and Unloading NetMail Agents.

After the Proxy Agent is disabled, the messaging server does not launch mailprox again until you select Enabled and restart the messaging server.


Rule Agent

Option Function
Monitored Queues

 

Monitored Queue

The message queue monitored by the Rule Agent. Messages passing through the specified message queue are scanned by the Rule Agent. If a message matches the conditions of a rule, the Rule Agent executes the rule action.

A single Rule Agent can monitor multiple message queues; however, you should not configure multiple Rule Agents to monitor the same queue. Doing so produces inconsistent results such as duplicate messages. Only one Rule Agent should monitor each message queue.

Because NMAP Agents manage the message queues, the Monitored Queues property corresponds to NMAP Agents. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must ensure that the Rule Agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that a Rule Agent is registered to a particular message queue:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the rulesrv executable to effect any changes in the Monitored Queues configuration. See Loading and Unloading NetMail Agents for more information.

Status

 

 

By default, the Rule Agent is enabled. To disable the Rule Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the Rule Agent at startup. However, to immediately disable the agent, you must manually unload the rulesrv executable or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Starting and Stopping NetMail.

After the Rule Agent is disabled, the messaging server does not launch the rulesrv executable again until you select Enabled and restart the messaging server.


SMTP Agent

Option Function
Identification

 

Domains

You must add all the domain and host names that your NetMail system is planning to accept messages in either the Global or Hosting Domains list.

In listing the domains that belong to your messaging system, consider the following important points:

  • Do not list a domain as both a Global Domain and a Hosting Domain.
  • Failure to add all domain and host names that resolve to the server's IP address creates message loops that quickly consume all your server resources. The problem is that messages addressed to domains not included in the SMTP Agent's domain lists still resolve to the SMTP server's IP address. However, because they aren't listed in the domain lists, the SMTP Agent cannot accept them. Therefore, the SMTP server ends up relaying these messages to itself in an endless loop. (NetMail only prevents such loops for domains that resolve to loopback or the server's default IP address.)

Global Domains

A listing of the messaging system's native domains.

When the SMTP Agent receives a message, it looks at the domain portion of the recipient's e-mail address (everything after the @ symbol). If the addressed domain matches a domain in the Global Domains list, the SMTP Agent removes the domain portion of the address and drops the message in the message queue.

Because the SMTP Agent removes Global Domains from the recipient's e-mail address, ensure that the user portion of the e-mail address (everything before the @ symbol) is unique.

You can address unique usernames at any global domain. For example, messages addressed to Bob@Novell.com and Bob@Novell.edu are delivered to the same mailbox if Novell.com and Novell.edu are listed as Global Domains and an eDirectory object named Bob exists in an NMAP Agent context. For more information on NMAP Agent contexts, see the Context property in Configuring the NMAP Agent .

IMPORTANT:  In NetMail 3.5, you do not need to restart the SMTP Agent after adding domains to the Global Domains list. New domains are recognized by the SMTP Agent within 5 minutes.

Other

 

 

Message Size Limit

The maximum message size the SMTP Agent can accept. Because the SMTP Agent handles all Internet traffic, this property limits both incoming and outgoing Internet messages.

You can enter any amount between None (no limit) and 40 MB.

This does not apply to messages sent using WebAccess or Webmail. While POP and IMAP clients must use the SMTP Agent to put their outbound messages in the NMAP Agent's message queue, the Modular Web Agent can directly communicate with the NMAP Agent. Therefore, it drops its own messages in the message queue, circumventing the SMTP Agent's message limit.

Changes to this property are implemented within 5 minutes.

Parent Object

The Parent object associated with the SMTP Agent. The SMTP Agent recognizes all Global and Hosting Domains listed in its associated Parent objects. See Supporting Multiple Internet Domains for more information.

Changes to this property are implemented within 5 minutes.

Options
Flags

A series of standard SMTP commands that you can enable on the current SMTP Agent. Select the commands you want the SMTP Agent to accept.

Changes to the STMP flags are implemented within 5 minutes.

Allow VRFY Command

The VRFY command allows external clients to verify that a user exists in your messaging system. If enabled, VRFY can pose a security risk because it allows external users to anonymously request verification of usernames. For example, if spammers want to find out the usernames in your company, they could query the system with a series of usernames until the system verified a valid username.

When verifying that a user exists in the messaging system, the SMTP Agent references the context list maintained by the messaging server. If the user is not listed in the context list, the SMTP Agent returns a "User Not Found" message. See the Context property in Configuring the NMAP Agent . for more information on the NMAP Agent's context list.

Allow EXPN Command

The EXPN command expands a group name upon request and lists all the user names in that group. This command is also considered a security risk because it allows spammers to anonymously request group membership lists. For example, if a spammer makes a request to expand a system-wide group such as Everyone, the SMTP Agent returns the complete membership list, which is, essentially, every username in your organization.

Verify Addresses on Recipient

By default, the SMTP Agent accepts all incoming messages and places them in a queue where their addresses are verified, as resources are available. This process facilitates rapid message processing. However, if you want the SMTP Agent to perform address verification before accepting messages into your NetMail system, select Verify Addresses on Receipt.

IMPORTANT:  NetMail Aliasing does not work if Verify Addresses on Recipient is selected. When this option is enabled, the SMTP Agent intercepts messages before they are processed in the message queue; consequently, messages addressed to NetMail aliases are deleted before the Alias Agent can process them. For more information on the Alias Agent, see Managing User Aliases.

Send ETRN

The SEND ETRN command requests a remote server to send any messages it has queued for your messaging system. This option is primarily for organizations with dial-up Internet connections.

For more information, see Servicing ETRN Domains.

Accept ETRN

The ACCEPT ETRN command allows a remote server to request queued messages. If enabled, the SMTP Agent responds to this request by sending any messages it has queued for that system. ACCEPT ETRN is the only SMTP flag that is selected by default.

For more information, see Servicing ETRN Domains.

Mail Relay Host

A mail relay host is a relay point for remote messages. It is often used to transfer outbound messages through a firewall. ETRN Domains also use Mail Relay Hosts to transfer messages to their relay service. See Servicing ETRN Domains for more information.

IMPORTANT:  You must restart the smtpd executable to effect any changes in the Mail Relay Host configuration. See Loading and Unloading NetMail Agents for more information.

Forwarder

To funnel all remote messages through another SMTP Agent rather than having the current SMTP Agent access the Internet, enter the host name or IP address of the SMTP server that you plan to use as the mail relay host. All remote messages going through this SMTP Agent are then forwarded to the SMTP Agent at the designated address.

UBE Blocking

 

 

This page provides options that block incoming messages from specified sites. These options are designed to protect your messaging system from unsolicited bulk e-mail (UBE) or spam.

Changes to these properties are implemented within 5 minutes.

Flags

 

 

Block Hosts in Blocked List

Restricts access to your messaging system. If selected, the SMTP Agent refuses connections from any mail host with an IP address designated in the Blocked Hosts list.

Deny Hosts Not in DNS

Provides reverse DNS lookups. When receiving messages from external systems, the SMTP Agent verifies that the host's IP address and domain correspond to its DNS record. If they don't match, the SMTP Agent drops the connection.

You must configure your DNS server to support reverse DNS lookups for this option to function.

Override with Authentication

This option provides an exception to the Deny Hosts Not in DNS option. If enabled, hosts that are not listed in DNS are given the opportunity to authenticate with the SMTP Agent before their connection is dropped.

RBL Check

Enables the SMTP Agent to do lookups on the Realtime Blackhole List (RBL). RBL maintains a list of confirmed spammers and open relays. If the mail host matches an entry on the RBL, the connection is refused.

RBL Servers

To add an RBL site, type the IP address or host name of the RBL list server in the RBL Servers field, then click Save. Enter one RBL server per line.

The RBL entry can include a trailing semicolon ( ; ) and subsequent text. The text following the semicolon is displayed as part of the protocol reply informing the sender he is blocked.

The following configuration entry references bl.spamcop.net as the RBL Host and then adds a message directing the sender to the SpamCop Web site:

bl.spamcop.net;You have been blackholed by spamcop.net. Please see http://spamcop.net to get removed

If the character sequence %d.%d.%d.%d is provided as part of the text, it is replaced by the IP address of the blocked system. Use this feature to generate responses containing URLs that point directly to the RBL system's look-up page.

For example, in this configuration entry,

bl.spamcop.net;Please see http://spamcop.net/w3m?action=checkblock&ip=%d.%d.%d.%d

http://spamcop.net/w3m?action=checkblock&ip is the URL format for SpamCop's lookup page and %d.%d.%d.%d generates the IP address of the blocked host. The resulting protocol reply includes a URL that takes the blocked sender directly to SpamCop's lookup page and tests his or her IP address.

IMPORTANT:  If a percent sign ( % ) is provided as part of the SMTP message text, type it as %%. Using a single percent sign without the letter "d" might crash the SMTP Agent.

Blocked Hosts

A list of blocked IP address ranges. If Block Hosts in "Blocked" List is selected, the SMTP Agent refuses connections from any host within the designated IP address range.

Listing ranges of registered IP addresses blocks specific external hosts from sending mail to or relaying mail through your messaging system. For example, you can choose to list the IP addresses registered to public mail systems such as Hotmail,* Yahoo!,* and Juno* because spammers frequently use these systems to relay spam.

Use this option to block internal hosts. By listing ranges of internal IP addresses, you can block specific workstations from sending any messages over the Internet.

To add a blocked host, type a range of disallowed IP addresses in the Blocked Hosts field, then click Save. Enter one blocked host per line.For example:

251.70.2.53-251.70.2.60

UBE Relaying

 

 

This page provides options that prevent spammers from using your messaging system to relay unsolicited bulk e-mail (UBE) or spam.

Changes to these properties are implemented within 5 minutes.

Flags

 

Do SMTP-after-POP

Prohibits users from sending remote messages through the SMTP Agent until they have first authenticated with the messaging system via their POP3 or IMAP4 client. This works for most Internet e-mail clients because these clients always check for e-mail (log in) just before sending messages.

This feature also includes the username of the person who authenticated with the messaging system in the message header. This helps track spammers who authenticate with a valid username but fake the message header to mask their identity.

SMTP-after-POP requires that you run the Connection Manager Agent and that you configure the Connection Manager options on the messaging server running the SMTP Agent.

See SMTP-after-POP for detailed instructions on configuring SMTP-after-POP authentication.

WARNING:  If you are using a Proxy Server, we recommend that you use ESMTP authentication rather than SMTP-after-POP because the same IP address might be assigned to multiple users. For more information on ESMTP authentication, see the Allow Remote Sending for Authenticated Users Only feature in the SMTP Agent.

Allow Remote Sending for Authenticated Users Only

Enables Extended SMTP (ESMTP) authentication. If selected, the e-mail client must authenticate through the ESMTP protocol before the SMTP Agent relays its messages to remote recipients. Netscape Communicator and Outlook Express support ESMTP authentication.

If both SMTP-after-POP and ESMTP authentication are enabled, they function as an either/or option. If a mail client does not authenticate via POP or IMAP when downloading mail, it must authenticate via ESMTP before it can send remote messages.

Require Sender to Be in "Allowed" List

Restricts access to your NetMail system by selectively allowing access. If enabled, only mail hosts with an IP address designated in the Allowed Hosts list can relay remote messages through the current SMTP server.

If SMTP-after-POP, ESMTP authentication, and Require Sender to Be in "Allowed" List are all enabled, they function as an either/or option. If an e-mail client does not authenticate using of POP or IMAP when downloading mail, it must authenticate using ESMTP or the Allowed Hosts list must include it before it can send remote messages.

Maximum Number of Recipients per E-Mail

Restricts the number of users who can receive the same message. This option affects both inbound and outbound Internet messages.

If a message exceeds the threshold, the SMTP Agent begins at the top of the recipient list and sends the message to the number of recipients designated in this field.

You can also configure the ModWeb Mail Module to restrict the number of recipients per message sent by users in the Modular Web client. For information on the ModWeb Mail Module, see Configuring the Mail Module.

Relaying

 

Allowed Hosts

A list of allowed IP address ranges. When the Require Sender to Be in "Allowed" List option is selected, only hosts that fall within the designated IP address ranges are allowed to send messages to remote recipients via the current SMTP Agent.

If an ISP or corporation has its own Web server, listing the organization's range of registered IP addresses prevents external hosts, such as spammers, from relaying messages through the company's messaging system.

In addition to preventing external hosts from relaying messages through your messaging system, you can use the Allowed Hosts list to prevent internal hosts from relaying remote messages. To restrict which workstations outside your organization that you allow to send remote messages, designate ranges of internal IP addresses.

If a workstation's IP address is not in an Allowed Hosts range, you can still use the workstation to send messages to users within the local messaging system.

To add an allowed host, type a range of allowed IP addresses in the Allowed Hosts field, then click Save. Enter one allowed host per line.

For example:

251.70.2.53-251.70.2.60

Relayed Domains (ETRN)

ETRN Domains are messaging systems that use a hosting service, such as an ISP or ASP, to send and receive messages over the Internet. These systems have their own messaging servers, agents, and mail directories; however, all their messaging services are local. Consequently, they must use a hosting service to send and receive remote messages. In most instances, ETRN Domains have non-persistent dial-up connections to their ISP or ASP.

For more information, see Servicing ETRN Domains.

To add an ETRN domain, enter the IP address or host name of the ETRN domain's SMTP server, then click Save. Enter one ETRN domain per line.

IMPORTANT:  To support these domains, you must click the Accept ETRN option in the Options page.

Domain Routing

 

Domain Routing

Domain Routing allows messages addressed to a specified domain to be sent directly to a defined IP address without first going through the DNS server.

To add a domain to the Domain Routing list, type the domain name, a space, and then the IP address to which messages should be sent. Enter only one domain per line. For example:

testdomain1.com = 130.45.45.109
testdomain2,com = 140.42.42.111

To remove a domain from the Domain Routing list, select the domain and press Delete.

IMPORTANT:  You must restart the smtpd executable to effect any changes in the Domain Routing configuration. See Loading and Unloading NetMail Agents for more information.

Queue Server

 

 

The message queue to which the SMTP Agent delivers messages that need to be processed. Because NMAP Agents manage the message queue, the Queue Server property corresponds to an NMAP Agent.

Each SMTP Agent can only have one queue server. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must design your system so that each queue agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that an SMTP Agent is registered to a particular queue server:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

IMPORTANT:  You must restart the smtpd executable to effect any changes in the Queue Server configuration. See Loading and Unloading NetMail Agents for more information.

Monitored Queues

 

 

A monitored queue is the message queue from which the SMTP Agent picks up messages for remote delivery.

A single SMTP Agent can monitor multiple message queues; however, you should not configure multiple SMTP Agents to monitor the same queue. Doing so produces inconsistent results such as duplicate messages. Only one SMTP Agent should monitor each message queue.

Because NMAP Agents manage the message queues, the Monitored Queues property corresponds to NMAP Agents. On a standalone messaging server, WebAdmin automatically selects the NMAP Agent on the current server. In distributed messaging systems, you can select any NMAP Agent on a distributed messaging server.

IMPORTANT:  If you have a distributed messaging system with multiple NMAP Agents, you must design your system so that each queue agent only processes messages one time as they go from the queue server to the message store. For more information, see Agent Distribution in Distributed Environments.

To verify that an SMTP Agent is registered to a particular message queue:

  1. Telnet to the queue server at port 689. (You must be a trusted host.)
  2. Enter the config command to see a list of currently registered agents.

Changes to this property are implemented within 5 minutes.

Status

 

 

By default, the SMTP Agent is enabled. To disable the SMTP Agent:

  1. Select Disabled.
  2. Click Save.

Disabling the agent prevents the messaging server from launching the SMTP Agent at startup. However, to immediately disable the agent, you must manually unload the smtpd executable or restart the messaging server. For more information on manually unloading NetMail agents or restarting the messaging server, see Starting and Stopping NetMail.

After the SMTP Agent is disabled, the messaging server does not launch the smtpd executable again until you select Enabled and restart the messaging server.