The Internet Agent (GWIA) converts GroupWise messages into SMTP format and transfers them to the Internet SMTP hosts where recipients are located. In reverse, it receives SMTP messages from Internet SMTP hosts and converts them into GroupWise format. The GWIA can also provide access for POP3 and IMAP4 clients to access GroupWise mailboxes.
GWIAs List:
Lists all GWIAs in your GroupWise system. Click the name of a GWIA to edit its properties. Click Customize Columns to add columns to the list.
New: Click New to add a new GWIA.
Delete: Select one or more GWIAs, then click Delete to remove them from the list.
Deleting a GWIA object does not remove the GWIA software from the server.
Export:
Click Export to generate a comma-separated values (CSV) file from the list. Use Customize Columns to add and order the columns as needed before you generate the CSV file.
Internet Agentin the GroupWise Administration Guide.
The Internet Agent (GWIA) converts GroupWise messages into SMTP format and transfers them to the Internet SMTP hosts where recipients are located. In reverse, it receives SMTP messages from Internet SMTP hosts and converts them into GroupWise format. The GWIA can also provide access for POP3 and IMAP4 clients to access GroupWise mailboxes.
Use this option to create a GWIA object. The GWIA software is automatically installed when you set up a new GroupWise server.
Name: Specify the name for the GWIA object. Do not use invalid characters. You cannot change the name after the GWIA object has been created.
Hostname/DNS "A record" Name: Specify the fully qualified Internet hostname of the server where the GWIA runs, such as gwia.example.com, or the name of the "A record" in your DNS table that associates the hostname with the server's IP address.
This setting corresponds with the --hn switch.
Domain: Displays the name of the domain to which you are connected.
Time Zone: Select the time zone where the domain is physically located. The time zone enables GroupWise to adjust appointment times according to local time.
Language: Select the language whose sorting rules will be used when displaying the GroupWise Address Book for users in this domain.
Platform: Select the platform where the GWIA runs.
Creating a New GWIA in the GroupWise Admin Consolein the GroupWise Administration Guide.
The GWIA General tab provides basic information about the GWIA and enables you to start and stop it in your web browser.
Description: (Optional) Provide additional helpful information about the GWIA.
Subdirectory: Displays the name of the GWIA home folder on the domain server.
Time Zone: Select the time zone where the domain is physically located. The time zone enables GroupWise to adjust appointment times according to local time.
Platform: Select the platform where the GWIA runs.
Gateway Alias Type: If you are using a legacy gateway, specify the gateway alias type for the legacy gateway.
Many non-GroupWise email systems do not use the same address syntax as GroupWise. Or in some cases, they might not support the same address characters or address length. A gateway alias is an alternate address that conforms to the format requirements of a non-GroupWise email system that a legacy GroupWise gateway connects to.
SNMP Community "Get" String: Specify the "Get" community string for the server where this GWIA runs. Community strings are case sensitive. If access to GWIA information is unrestricted, the "Get" community string is typically PUBLIC. When properly configured, the GWIA sends SNMP traps to network management consoles for display along with other SNMP monitored programs.
Start Agent / Stop Agent: Lets you manage the GWIA from the Admin console.
Launch GWIA Console: Opens the GWIA console in a new browser window.
Using the GWIA Console
Using an SNMP Management Console
The GWIA Agent Settings tab lists the network address and ports for the GWIA, along with some miscellaneous settings.
Message Transfer: The GWIA uses Message Transfer Protocol (GWMTP) to communicate with the MTA.
Message Transfer Port: Specify the port number on which the GWIA listens for messages from the MTA for the domain. The default is 7102.
Message Transfer SSL: Select from the following options to configure the GWIA’s use of secure connections to the MTA. In order to use an SSL connection, the MTA must also be enabled to use SSL.
Disabled: The GWIA does not support SSL connections.
Enabled: The GWIA uses SSL if both the GWIA and the MTA can handle SSL. If either side cannot handle SSL, the MTP connection is still accepted.
Required: The GWIA accepts only SSL connections. Non-SSL connections are refused.
IMPORTANT:To prevent closed links between agents, select Enabled when you are initially configuring agents for SSL. Select Required for tighter security only after all agents are successfully using SSL.
Securing Internet Access with TLS Connections to the GWIAin the GroupWise Administration Guide.
HTTP: The GWIA uses HTTP protocol to communicate with the GWIA console.
HTTP Port: Specify the port number on which this GWIA listens for requests for status information from the GWIA console. The default is 9850.
HTTP SSL: Select from the following options to configure the GWIA’s use of secure connections to the GWIA console. In order to use an SSL connection, the web browser must also be enabled to use SSL.
Disabled: The GWIA does not support SSL connections.
Enabled: If the GWIA is configured with a valid SSL certificate, the GWIA console uses SSL. If a valid SSL certificate is not available, the GWIA still provides the GWIA console, but without a secure SSL connection.
Required: The GWIA does not support the GWIA console unless a valid SSL certificate has been provided.
IMPORTANT:To prevent closed links between agents, select Enabled when you are initially configuring agents for SSL. Select Required for tighter security only after all agents are successfully using SSL.
Using the GWIA Console
Securing Internet Access with TLS Connections to the GWIA
SMTP: The GWIA uses SMTP protocol to send and receive messages over the Internet.
SMTP Port: Specify the port number on which the GWIA listens for inbound messages from other SMTP hosts. The default is 25.
SMTP SSL: Select from the following options to configure the GWIA’s use of a secure connection to other SMTP hosts. In order to use an SSL connection, the other SMTP host must also be enabled to use SSL or TLS (Transport Layer Security):
Disabled: The GWIA does not support SSL connections.
Enabled: The GWIA uses SSL if both the GWIA and the other SMTP host can handle SSL. If either side cannot handle SSL, the SMTP connection is still accepted.
Required: The GWIA accepts only SSL connections. Non-SSL connections are refused.
IMPORTANT:To prevent closed links between agents, select Enabled when you are initially configuring agents for SSL. Select Required for tighter security only after all agents are successfully using SSL.
Configuring SMTP/MIME Services
Securing Internet Access with TLS Connections to the GWIA
POP: The GWIA uses POP protocol to communicate with POP email clients such as Gmail and Hotmail.
POP Port: Specify the port number on which the GWIA listens for requests from POP clients that are not using secure SSL connections. The default is 110.
POP SSL: Select from the following options to configure the GWIA’s use of secure connections to POP clients. In order to use an SSL connection, the POP clients must also be enabled for SSL.
Disabled: The GWIA does not support SSL connections. It only listens for non-SSL connections on port 110.
Enabled: The GWIA uses SSL if both the GWIA and the POP client can handle SSL. If either side cannot handle SSL, the POP connection is still accepted. The GWIA accepts SSL connections on port 995 and non-SSL connections on port 110.
Required: The GWIA accepts only SSL connections on port 995 and port 110. Non-SSL connections are refused.
POP SSL Port: Specify the port number on which the GWIA listens for requests from POP clients that are using secure SSL connections. The default is 995.
Configuring POP3/IMAP4 Services
Securing Internet Access with TLS Connections to the GWIA
IMAP: The GWIA uses IMAP protocol to communicate with IMAP email clients such as Microsoft Outlook and Evolution.
IMAP Port: Specify the port number on which the GWIA listens for requests from IMAP clients that are not using secure SSL connections. The default is 143.
IMAP SSL: Select from the following options to configure the GWIA’s use of secure connections to IMAP clients. In order to use an SSL connection, the IMAP clients must also be enabled for SSL.
Disabled: The GWIA does not support SSL connections. It only listens for non-SSL connections on port 143.
Enabled: The GWIA uses SSL if both the GWIA and the IMAP client can handle SSL. If either side cannot handle SSL, the IMAP connection is still accepted. The GWIA accepts SSL connections on port 993 and non-SSL connections on port 110.
Required: The GWIA accepts only SSL connections on port 993 and port 143. Non-SSL connections are refused.
IMAP SSL Port: Specify the port number on which the GWIA listens for requests from IMAP clients that are using secure SSL connections. The default for SSL is 993.
Configuring POP3/IMAP4 Services
Securing Internet Access with TLS Connections to the GWIA
IMPORTANT:All port numbers must be unique on the server. Use the default port number unless it is already in use on the server.
Host Name: Specify the DNS hostname or IP address of the server where the GWIA runs.
If your network uses IPV6, you must specify the DNS hostname.
Bind Exclusively to Host Name: Binds this GWIA to the specified host name or IP address when the server where it runs uses multiple IP addresses. Without an exclusive bind, the GWIA binds to all IP addresses available on the server.
Binding the GWIA to a Host Namein the GroupWise Administration Guide.
The GWIA uses HTTP protocol to communicate with the GWIA console.
HTTP User Name: To limit access to the GWIA console, provide a unique user name.
Unless you are using SSL, do not use a user name that is synchronized from an LDAP directory (such as NetIQ eDirectory or Microsoft Active Directory). This is because the information passes over the non-secure connection between your web browser and the GWIA. If you are using SSL, the user name is encrypted and therefore secure.
HTTP Password / Confirm Password: Specify the password for the HTTP user name.
Using the GWIA Consolein the GroupWise Administration Guide.
GWIA log files can be viewed in the GWIA server console and the GWIA console.
Log File Path: Specify the folder where you want this GWIA to store its log files, if you want to change from its default location:
Linux: /var/log/novell/groupwise/domain.gwia
Windows: domain\wpgate\gwia\000.prc
Logging Level: Select the amount of data displayed on the GWIA server console and written to the GWIA log file:
Off: Turns off logging to disk and sets the logging level for the GWIA to its default. Logging information is still displayed on the GWIA server console.
Normal (Default): Displays only the essential information suitable for a smoothly running GWIA.
Verbose: Displays the essential information, plus additional information such as message routing details and message processing information.
Diagnostic: Provides a detailed trace of GWIA messages, errors, and operations and can be useful for troubleshooting.
Max Log File Age: Specify the number of days you want GWIA log files to remain on disk before being automatically deleted. The default log file age is 30 days. The valid range is from 1 to 350 days.
Max Log Disk Space: Specify the maximum amount of disk space for all GWIA log files. When the specified disk space is full, the GWIA overwrites existing GWIA log files, starting with the oldest. The default is 100 MB of disk space for all GWIA log files.
Using GWIA Log Filesin the GroupWise Administration Guide.
The SSL Settings tab configures the Secure Socket Layer (SSL) protocol settings for the GWIA. The GWIA can use SSL to secure various types of connections, as configured on the Agent Settings tab.
For a secure GroupWise system, you should configure the server and agents to use TLS.
SSL Certificate File or SSL Key File: (Optional) If you need to generate a new GroupWise signed certificate and key for the GWIA to use:
Generate Certificate: Click Generate Certificate to generate a new self-signed certificate for the server, and then click Save.
NOTE:If you are replacing existing certificate and key files, delete the entries in both the SSL Certificate File and SSL Key File fields before generating the new certificates.
The GroupWise Admin Service generates a certificate signing request (CSR) and a private key file, and then sends them to the GroupWise certificate authority (CA) on the primary domain. The CA issues the requested certificate, which is then returned to the local server.
Set Password: Click Set Password to specify the password for the key file.
To clear an existing password from the key file, click Set Password, select Clear Password, and then click Save.
To clear an existing password from the certificate, click Generate Certificate, select Clear Password, and then click Save.
Securing Internet Access with TLS Connections to the GWIA
Configuring Server Certificates and TLS
You can adjust how frequently the GWIA performs tasks associated with its routine message processing functions.
Send/Receive Cycle: Specify the number of seconds you want to split between cycles for sending and receiving messages. The default is 120 seconds (2 minutes).
For example, if you specify a value of 100, the GWIA spends approximately 50 seconds sending messages and 50 seconds receiving messages. The process is then repeated. If the time limit is reached and a message is being processed, the GWIA finishes the processing.
Minimum Run: The default value of 0 (zero) meaning unlimited is typically appropriate, so that the GWIA stays constantly connected to the Internet.
Idle Sleep Duration: Specify a duration in seconds that you want the GWIA to sleep when it has no files to send, receive, or convert. The default is 10 seconds.
When the duration is past, the GWIA wakes up briefly to check for messages. If there are no messages, it sleeps again to save CPU cycles and to free the server for multitasking.
Snapshot Interval: Specify the time interval in seconds for which you want the GWIA to compile its performance statistics. The default is 600 seconds (10 minutes).
This field is a sliding interval that is used in the GWIA server console. The display changes every 60 seconds to show only the previous x seconds of activity.
Accounting: Keeps accounting records for every message the GWIA sends or receives.
The GWIA records this information in an ASCII text file called acct, which is placed in the 000.prc subfolder and updated daily at midnight or when the GWIA stops.
Accounting information for the previous day's activity is sent daily to the user designated as the GWIA accountant. If no user is designated, the accounting file is deleted.
Convert Status to Messages: Converts item status information (normally accessible to users from the Properties page of the sent item) into a mail message and places it in the sender's mailbox.
Outbound Status Level: Select one of the five outbound status levels. By default, only the Undelivered status is returned to the sending email system.
Enable Recovery: Allows the GWIA to try to restart itself or reestablish the connection to the Internet when either fails.
Retry Count: Specify the number of times you want the GWIA to try to recover a connection if the connection fails. The default is 10 times.
Retry Interval: Specify the number of seconds you want the GWIA to wait between attempts to recover its connection if the connection fails. The default is 60 seconds.
Failed Recovery Wait: Specify the number of seconds you want the GWIA to wait between a failed recovery and a retry. The default is 3600 seconds (1 hour).
Correlation Enabled: Keeps track of incoming status messages from external email systems.
Message correlation is a record in the database that allows text-format status messages from an external email system to be converted into status messages that are meaningful to the GroupWise system.
Correlation Age: Specify the number of days you want the correlation record to remain in the GroupWise system database.
A GWIA administrator is any GroupWise user you assign to receive information and error messages from the GWIA. The GWIA administrator must either be a GroupWise user or a GroupWise group.
Administrator List: Lists the administrators that have been defined for this GWIA.
Add: Click Add, then select one or more users or groups to act as GWIA administrators.
Remove: Select a user or group, then click Remove to remove it from the list.
Administrator Role: Select a GWIA administrator user or group, then select the type of activity the administrator performs:
Operator: Receives messages when certain GWIA errors occur.
Accountant: Receives the accounting files that are generated if you select Accounting on the Optional Settings tab.
Postmaster: Receives messages addressed to the postmaster user ID in your GroupWise system.
Foreign Operator: Used by some legacy gateways.
Assigning Users to Receive GWIA Warning and Error Messages
Selecting an Accountant
Many non-GroupWise email systems do not use the same address syntax as GroupWise. Or in some cases, they might not support the same address characters or address length. A gateway alias is an alternate address that conforms to the format requirements of a non-GroupWise email system that a legacy GroupWise gateway connects to.
Gateway Aliases List: Lists the gateway aliases that have been defined for this GWIA.
Gateway aliases can be added on User objects and Post Office objects.
SMTP and MIME are standard protocols for sending and receiving email messages over the Internet. SMTP (Simple Mail Transfer Protocol) is the message transmission protocol. MIME (Multipurpose Internet Mail Extension) is the message format protocol.
Enable SMTP Service: Allows Internet messaging. The SMTP service is enabled by default.
Number of SMTP Send Threads: Select the number of threads you want used by the GWIA to send messages. The default is 8 threads. This setting corresponds with the --sd switch.
Number of SMTP Receive Threads: Select the number of threads you want used by the GWIA to receive messages. The default is 16 threads. This setting corresponds with the --rd switch.
Scan Cycle for Send Directory: Specify how often the GWIA polls for outgoing messages. The default is 10 seconds. This setting corresponds with the --p switch.
Maximum Number of Hours To Retry a Deferred Message: Specify the number of hours after which the GWIA stops trying to send deferred messages. The default is 96 hours (4 days). This setting corresponds with the --maxdeferhours switch.
A deferred message is any message that could not be sent because of a temporary problem (host down, MX record not found, and so on).
Hostname/DNS "A record" Name: Specify the fully qualified Internet hostname of the server where the GWIA runs, such as gwia.example.com, or the name of the "A record" in your DNS table that associates the hostname with the server's IP address.
This setting corresponds with the --hn switch.
If the Reject If PTR Record Does Not Match Sender’s Greeting setting (SMTP/MIME tab > Security Settings page) is selected, you are required to fill in the Hostname/DNS "A Record" Name setting. When a TCP/IP communication begins, the two servers involved exchange greetings. Part of the greeting requires the recipient server to identify itself. The other part of the greeting requires the sending server to identify itself with the SMTP HELO command. The GWIA verifies the authenticity of the greetings. If the greeting string does not match the actual Hostname/DNS "A Record" Name setting, the GWIA either passes a warning and continues the communication or terminates the connection.
Relay Host for Outbound Messages: If you want to use a relay host (or a smart host) to route all outbound Internet email, specify the IP address or DNS hostname and port of the relay host. To specify the port, use a colon followed by the port number. If no port is specified, the GWIA will default to port 25. This setting corresponds with the --mh switch.
The relay host can be part of your network or can reside at the Internet service provider's site. You can list multiple relay hosts by using a space to separate each hostname in the list. For example:
<host1 address>:<port> <host2 address>:<port>
Intervals to Retry a Deferred Message: Specify in a comma-delimited list the number of minutes after which the Internet Agent retries sending deferred messages. The default is 20, 20, 20, 60. This setting corresponds with the --msgdeferinterval switch.
The GWIA interprets this list as follows: It retries 20 minutes after the initial send, 20 minutes after the first retry, 20 minutes after the second retry, and 60 minutes (1 hour) after the third retry. Thereafter, it retries every hour until the number of hours specified in the Maximum Number of Hours to Retry a Deferred Message field is reached. You can provide additional retry intervals as needed. It is the last retry interval that repeats until the maximum number of hours is reached.
Kill Threads on Exit or Restart: Causes the GWIA to stop immediately, without allowing its send/receive threads to perform their normal shutdown procedures. This setting corresponds with the --killthreads switch.
Enable iCal Service: Converts outbound GroupWise Calendar items into MIME text/calendar iCal objects and converts incoming MIME text/calendar messages into GroupWise Calendar items. This setting corresponds with the --imip switch.
Use 7-Bit Encoding for All Outbound Messages: By default, the GWIA uses 8-bit MIME encoding for any outbound messages that are HTML-formatted or that contain 8-bit characters. If, after connecting with the receiving SMTP host, the GWIA discovers that the receiving SMTP host cannot handle 8-bit MIME encoded messages, the GWIA converts the messages to 7-bit encoding.
With this option selected, the GWIA automatically uses 7-bit encoding and does not attempt to use 8-bit MIME encoding. Use this option if you are using a relay host that does not support 8-bit MIME encoding.
Return Notification to Sender When a Message Is Delayed after xx minutes: Provides email notification when a message is delayed and cannot be sent out across the Internet after the specified amount of time. This provides more noticeable notification to users than manually checking the Properties page of the sent item to see whether it has been sent.
Do Not Publish GroupWise Information on Initial SMTP Connection: Suppresses the GroupWise version and copyright date information that the GWIA typically responds with when contacted by another SMTP host or a telnet session. This setting corresponds with the --nosmtpversion switch.
Configuring SMTP/MIME Servicesin the GroupWise Administration Guide.
The GWIA can handle email addresses in a variety of ways.
GroupWise supports both Internet-style addressing (user_name@domain_name) and GroupWise proprietary addressing (user_name.post_office.domain). By default, the GWIA uses Internet-style addressing.
Ignore GroupWise Internet Addressing: Turns off Internet-style addressing. This setting corresponds with the Internet Agent's --dia switch.
The GWIA supports user and post office aliases in either mode.
These options apply to messages received from the Internet.
Expand Groups on Incoming Messages: Turns on group expansion. This setting corresponds with the --group switch.
By default, the GWIA does not expand groups, which means that recipients listed in groups do not receive incoming Internet messages that are addressed to groups unless this option is selected.
Do Not Replace Underscore with Spaces: Stops the GWIA from converting user names in email addresses from the format Firstname_Lastname into the format Firstname Lastname by replacing the underscore (_) with a space. This setting corresponds with the Internet Agent's --dontreplaceunderscore switch.
By default, this conversion takes place automatically, even though Firstname_Lastname is not an address format that is included in the Allowed Address Formats list (System > Internet Addressing > Address Formats tab).
These options apply to messages sent to the Internet.
Retain Groups on Outgoing Messages: When constructing the MIME for outgoing messages, discard all users that expanded out of system distribution lists. Instead include a reference to the distribution list. This results in a smaller MIME and Reply to All list for the recipient. This setting corresponds with the GWIA’s‑‑keepsendgroups switch.
NOTE:If you select Retain Groups on Outgoing Messages, Reply to All might not work unless you also turn on inbound group expansion by using the --group switch.
Use GroupWise User Address As Mail From: for Rule Generated Messages: Uses the original sender’s email address in the Mail From field instead of having auto-forwards come from Postmaster and auto-replies come from Mailer-Daemon. This setting corresponds with the --realmailfrom switch.
Display Fullname as Lastname,Firstname: Formats the user's full name with the last name first, regardless of the preferred address format that would otherwise be in effect (System > Internet Addressing > Address Format tab). This setting corresponds with the --displaylastfirst switch.
Do Not Include the Fullname in the MIME Header: Uses the user's email address in the From field of the message's MIME header and does not include the user's display name. This setting corresponds with the --notfamiliar switch.
Configuring How the GWIA Handles Email Addressesin the GroupWise Administration Guide.
The Extended SMTP (ESMTP) settings for the GWIA might or might not be supported by another SMTP email system.
Enable Delivery Status Notification (DSN): Allows the GWIA to request status notifications for outgoing messages and to supply status notifications for incoming messages. This requires the external email system to also support Delivery Status Notification. Currently, notification consists of two delivery statuses: Successful or Unsuccessful.
DSN Hold Age: Select the number of days that you want the GWIA to retain information about external senders so that status updates can be delivered to them.
For example, the default hold age causes the sender information to be retained for 4 days. If the GWIA does not receive delivery status notification from the GroupWise recipient's POA within that time period, it deletes the sender information and the sender does not receive any delivery status notification.
Require SSL for authentication: When enabled, this option requires an SMTP sender to negotiate a secure connection before GWIA would advertise that AUTH is supported.
Force inbound authentication: Ensures that the Internet Agent accepts messages only from remote SMTP hosts that use the AUTH LOGIN authentication method to provide a valid GroupWise user ID and password.
Force outbound authentication: Ensures that the Internet Agents sends messages only to remote SMTP hosts that are included in a gwauth.cfg file.
Disable ESMTP extensions: Disables all ESMTP extensions in the Internet Agent. Generally used only for troubleshooting purposes.
Using Extended SMTP (ESMTP) Optionsin the GroupWise Administration Guide.
The Message Formatting settings determine formatting and conversion settings for messages sent to and received from the Internet.
These options apply to messages received from the Internet.
Number of Inbound Conversion Threads: Select the number of threads you want the GWIA to use to convert inbound messages from MIME format to the GroupWise message format. The default is 4 threads. This setting corresponds with the --rt switch.
These options apply to messages sent to the Internet.
Number of Outbound Conversion Threads: Select the number of threads you want the GWIA to use to convert outbound messages from the GroupWise message format to MIME format. The default is 4 threads. This setting corresponds with the --st switch.
Message Text Line Wrapping:
Enable Quoted Printable Text Line Wrapping: By default, the GWIA wraps text according to the Quoted Printable MIME standard for line wrapping. This setting corresponds with the --nqpmt switch.
If you deselect this option, MIME messages go out as plain text and wrap text according to the number of characters specified in the Line Wrap Length for Message Text on Outbound Mail setting.
Line Wrap Length for Message Text on Outbound Mail: Specify the line length for outgoing messages. The default line length is 72 characters. This setting corresponds with the --wrap switch.
This is useful if the recipient's email system requires a certain line length.
Enable Flat-Forwarding: Automatically strips out the empty messages that accumulate when a message is forwarded multiple times. This setting corresponds with the --flatfwd switch.
Default Global Signature to Insert in Outbound Messages: Displays the default global signature for your GroupWise system (System > Global Signatures). If you want this GWIA to append a different global signature, select Override, then select the desired signature.
Apply Global Signature to Relay Messages: Appends the global signature to messages that are relayed through your GroupWise system (for example, messages from POP and IMAP clients) in addition to messages that originate within your GroupWise system. This setting corresponds with the --relayaddsignature switch.
Disable Mapping X-Priority Fields: Disables the mapping of an x-priority MIME field to a GroupWise priority for the message. This setting corresponds with the --nomappriority switch.
By default, the GWIA maps x-priority 1 and 2 messages as high priority, x-priority 3 messages as normal priority, and x-priority 4 and 5 as low priority in GroupWise.
Determining Format Options for Messagesin the GroupWise Administration Guide.
You can customize how the GWIA flags messages for handling by the GroupWise client Junk Mail Handling feature.
Flag Any Messages That Contain x-spam-flat:yes or Any of the Following x-fields and Values in the MIME Header As Junk Mail: Flags messages as junk mail if they contain an x-spam-flag:yes in the MIME header.
For more complex junk mail identification, list as many custom strings as necessary to identify junk mail. Each line identifies an “X” header field that your anti-spam service writes to the MIME header, along with the values that flag the message as spam. The GWIA examines the MIME header for any field listed in the Junk Mail box. When a match occurs, the message is marked for handling by the GroupWise client Junk Mail Handling feature.
Anti-spam services use different indicators to mark potential spam. One service might use a string of asterisks; the more asterisks, the greater the likelihood that the message is spam. Another service might use a numerical value; the higher the number, the greater the likelihood that the message is spam. The following samples are taken from MIME headers of messages:
X-Spam-Results: ***** X-Spam-Status: score=9
You must know the coding used by your anti-spam service in order to specify useful strings in the Junk Mail box.
Customized Spam Identification
Configuring How the GWIA Handles Email Addresses
The Security Settings help protect your GroupWise system from malicious or accidental spam attacks.
Reject If PTR Record Does Not Exist: Rejects messages from unidentified sources. This setting corresponds with the --rejbs switch.
An unidentified source is defined as a sending SMTP host that does not have a PTR (pointer) record. A PTR record provides the mapping between the hostname and the corresponding IP address of the sending SMTP host. This setting lets you reject messages if the sending host is not authentic.
When this option is enabled, the GWIA refuses messages from a relay host if a reverse DNS lookup shows that a PTR record does not exist for the IP address of the GWIA’s host.
When this option is disabled, the GWIA accepts messages from any host, but it displays a warning if the initiating host is not authentic.
Reject If PTR Record Does Not Match Sender’s Greeting: Rejects messages from sending SMTP hosts where the sending host's PTR record does not match the information that the SMTP host sends out when it is initially contacted by another SMTP host. If the information does not match, the sending host might not be authentic.
Flag Messages with an Invalid PTR Record As Junk Mail: Allows messages from unidentified sources to be handled by users' Junk Mail Handling settings in the GroupWise client rather than being rejected by the GWIA. This gives users more control over what they consider to be junk mail.
A mailbomb is an attack on your GroupWise system that consists of sending a massive amount of messages to GroupWise users in an attempt to exceed mailbox limits or bring down your GroupWise system.
Enable Mailbomb Protection: Configures the GWIA to start discarding messages from an SMTP host or IP address if an excessive number of messages are received from that location in a relatively short period of time. The default is 30 messages received within 10 seconds.
nn Messages Received within nn Seconds: Specify the number of messages that is considered excessive. The message count setting corresponds to the --mbcount switch. Specify the number of seconds to count messages. The time setting corresponds to the --mbtime switch.
If you want to prevent future mailbombs from the mailbomb sender, identify the sender's IP address by looking at the GWIA log file, then modify the appropriate class of service to prevent mail being received from that IP address (Access Control tab > Settings page).
Mailbomb (Spam) Protectionin the GroupWise Administration Guide.
You can configure how long the GWIA waits for various types of communications from other SMTP hosts. When the specified time has passed, the GWIA generates a TCP read/write error.
Commands: Select how long the GWIA should wait for an SMTP command. The default is 5 minutes. This setting corresponds with the --tc switch.
Data: Select how long the GWIA should wait for data from the receiving host. The default is 3 minutes. This setting corresponds with the --td switch.
Connection Establishment: Select how long the GWIA should wait for the receiving host to establish a connection. The default is 2 minutes. This setting corresponds with the --te switch.
Initial Greeting: Select how long the GWIA should wait for the initial greeting from the receiving host. The default is 5 minutes. This setting corresponds with the --tg switch.
TCP Read: Select how long the GWIA should wait for a TCP read. The default is 5 minutes. This setting corresponds with the --tr switch.
Connection Termination: Select how long the GWIA should wait for the receiving host to terminate the connection. The default is 10 minutes. This setting corresponds with the --tt switch.
You can configure how the GWIA handles messages that it cannot deliver.
Amount of Original Message to Return to Sender When Message Is Undeliverable: Select how much of the original message is sent back to the sender when a message is deemed undeliverable. The default is 2 KB of the original message. This setting corresponds with the --mudas switch.
Forward Undeliverable Inbound Messages to Host: Specify the IP address or DNS hostname of a host you want to forward undeliverable messages to. This setting corresponds with the Internet Agent's --fut switch.
This might be useful if you use gateway aliases for non-GroupWise email systems. When an IP address is specified instead of a DNS hostname, the IP address must be surrounded by square brackets [ ]. For example, [172.16.5.18].
If your network uses IPV6, you must specify the DNS hostname.
A problem message is an inbound or outbound message that the GWIA cannot convert properly. By default, the GWIA discards problem messages.
If you want to save problem messages, select one or both of the following options:
Move to Problem Directory: Moves the problem messages to the domain/wpgate/gwia/gwprob folder.
Send to Postmaster: Sends the problem messages to the GWIA’s postmaster (GroupWise tab > Administrators page).
This setting corresponds with the --badmsg switch.
Determining What to Do with Undeliverable Messagesin the GroupWise Administration Guide.
You can configure the GWIA to support POP3 (Post Office Protocol version 3) and IMAP4 (Internet Messaging Access Protocol version 4).
With POP3/IMAP4 enabled, the GWIA functions as a POP3/IMAP4 server, allowing POP3/IMAP4 email clients to access GroupWise mailboxes. This means that GroupWise users can download messages from their GroupWise mailboxes to a POP3/IMAP4 email client.
Enable POP3 Service: Allows POP3 downloads of GroupWise messages. POP3 service is off by default.
Number of Threads for POP3 Connections: Specify the maximum number of threads you want the GWIA to use for POP3 connections. This setting corresponds with the --pt switch.
Number of Threads for POP3 SSL Connections: Specify the maximum number of threads you want the GWIA to use for secure POP3 connections. This setting corresponds with the --sslpt switch.
Enable Intruder Detection: Logs in POP3 email clients through the POA so that the POA's intruder detection can take effect, if intruder has been configured (Post Office object > Client Settings tab > Intruder Detection). This setting corresponds with the --popintruderdetect switch.
Do Not Publish GroupWise Information on an Initial POP3 Connection: Suppresses the GroupWise version and copyright date information that the GWIA typically responds with when contacted by a POP client. It is enabled by default. This setting corresponds with the --nopopversion switch.
Configuring POP3/IMAP4 Servicesin the GroupWise Administration Guide.
Enable IMAP4 Service: Allows IMAP4 downloads and management of GroupWise messages. IMAP4 service is off by default.
Number of Threads for IMAP4 Connections: Specify the maximum number of threads you want the GWIA to use for IMAP4 connections. This setting corresponds with the GWIA --it switch.
Number of Threads for IMAP4 SSL Connections: Specify the maximum number of threads you want the GWIA to use for secure IMAP4 connections. This setting corresponds with the GWIA --sslit switch
Maximum Number of Items to Read: Specify in thousands the maximum number of items that you want the GWIA to download at one time. This setting corresponds with the --imapreadlimit switch.
By default, the GWIA downloads 5,000 items at a time. For example, specify 10 to download 10,000 items at a time.
Do Not Publish GroupWise Information on an Initial IMAP4 Connection: Suppresses the GroupWise version and copyright date information that the GWIA typically responds with when contacted by an IMAP client. It is enabled by default. This setting corresponds with the --noimapversion switch.
Configuring POP3/IMAP4 Servicesin the GroupWise Administration Guide.
The GWIA uses several folders to process message files. They are initially created on the domain server when you install the GWIA.
If you install the GWIA on a server other than the domain server, you should set up local folders for the GWIA to use for message processing. This increases GWIA performance because the GWIA does not need to read and write the files across the network to the domain server.
Conversion Directory: The GWIA uses the conversion folder to store temporary files during message conversion. These files are automatically deleted after they are processed. The default location is:
domain/wpgate/gwia/000.prc/gwwork
Specify a local folder for the GWIA to use for message conversion. This setting corresponds to the --work switch.
SMTP Queues Directory: The GWIA uses the defer, send, receive, and result subfolders in the SMTP queues folder to store messages being routed to and from the Internet. By default, the SMTP queues folder and the GWIA home folder are the same location. The default location is:
domain/wpgate/gwia
Specify a local folder for the GWIA to use during message routing. This setting corresponds with the --dhome switch.
SMTP Services Queues Directory: Optionally, you can set up a secondary SMTP queues folder for troubleshooting or for use by a third-party application such as a virus scanner. The GWIA places outbound messages in the SMTP services queues folder and does not process them further.
(Optional) Specify a secondary SMTP queues folder to meet a specific message routing need. This setting corresponds with the --smtphome switch.
The Access Control Settings configure GroupWise user access to the SMTP, IMAP4, and POP3 features of the GWIA. These GWIA features provide various types of Internet access for GroupWise users.
Controlling User Access to the Internetin the GroupWise Administration Guide.
A GroupWise class of service is a specifically defined set of GWIA privileges for Internet access. The Default Class of Service, which all users belong to, allows incoming and outgoing SMTP/MIME email messages, and allows POP3 and IMAP4 access for non-GroupWise email clients.
A user's access to the Internet from GroupWise is based on his or her membership in a class of service. All users are members of the Default Class of Service.
You can control user Internet access at a user, group, post office, or domain level.
Class of Service List: Lists all classes of service that have been defined for this GWIA. Click the name of a class of service to edit its properties. Select a class of service to view its membership in the Memberships list.
New: Click New to create a new class of service.
Delete: Select one or more classes of service, then click Delete to remove them from the list.
When you delete a class of service, user access is determined by the Default Class of Service or another class in which users have membership.
Classes of Service
Creating a Class of Service
You can add users, groups of users, post offices, or domains to a Membership list for each class of service. By default, Everyone belongs to the Default Class of Service.
Because you can assign membership at a user, group, post office, or domain level, you can make a user a member of more than one class of service. For example, a user might inherit membership in one class because his or her post office is a member; at the same time, the user is a member in another class because he or she was added as a user to that class. Because only one class of service can be applied to a user at one time, membership conflicts are resolved hierarchically, as shown below:
Membership... |
Overrides... |
---|---|
As a user |
|
As a member of a group |
|
Through a post office |
|
Through a domain |
Default class of service membership |
If a user's membership in two classes of service is based upon the same level of membership (for example, both through individual user membership), the class of service that applies is the one that allows the most privileges.
Memberships List: Lists all members of the selected class of service.
Add: Click Add to add a user, group, post office, or domain to the list for the selected class of service.
Remove: Select a member, then click Remove to remove it from the list.
Test: Verify the class of service that is being applied to a user, group, post office, or domain. Click Test, select the object whose access settings you want to verify, then click View Access.
Classes of Service
Creating a Class of Service
A GroupWise class of service is a specifically defined set of GWIA privileges for Internet access. The Default Class of Service, which all users belong to, allows incoming and outgoing SMTP/MIME email messages, and allows POP3 and IMAP4 access for non-GroupWise email clients.
Name: Specify a unique descriptive name for the new class of service.
Edit Access Settings: Change the access settings. Access settings determine whether user access is allowed or prevented.
If you do not change the access settings, user access is set to Inherit Access, which means user access is determined by the class of service assigned at a higher level. For example, a post office inherits the domain's access. If the domain is not a member of a class of service, the post office inherits the default class of service.
Select Membership: Add members to the class of service.
Classes of Service
Creating a Class of Service
A GroupWise class of service is a specifically defined set of GWIA privileges for Internet access. The Default Class of Service, which all users belong to, allows incoming and outgoing SMTP/MIME email messages, and allows POP3 and IMAP4 access for non-GroupWise email clients.
The SMTP Incoming options determine whether members of the class of service can receive Internet email messages.
Inherit Access: Members of this class of service inherit their Internet access from a class of service assigned at a higher level. For example, a post office inherits the domain's Internet access. If the domain is not a member of a specific class of service, the post office inherits the Default Class of Service.
Allow Incoming Messages: Allows members of the class of service to receive email messages from the Internet.
Prevent Incoming Messages: Prevents members of the class of service from receiving email messages from the Internet.
Prevent Messages Larger Than: (Optional) If you select Allow incoming messages or Prevent incoming messages, you can establish a size limit for Internet email messages. By default, there is no size limit on Internet email messages.
If you select an Allow... or Prevent... option, you can establish specific exceptions to refine Internet access for the class of service.
If you've chosen to prevent incoming Internet messages but you want to allow messages from specific Internet sites, add the sites to the Allow Messages From list.
Allow Messages From List: Lists the only Internet sites from which members of the class of service can receive messages.
You can use the Allow Message From list to override blacklists (Access Control tab > Blacklists page). For example, if goodhost.com has been added to a blacklist but you still want to receive messages from that host, you could add the host to the Allow Messages From list.
New: Click New to add an Internet address to the list.
Edit: Select an Internet address, then click Edit to modify it.
Delete: Select one or more Internet addresses, then click Delete to remove them from the list.
If you've chosen to allow incoming Internet messages but you want to prevent messages from specific Internet sites, add the sites to the Prevent Messages From list.
Prevent Messages From List: Lists specific Internet sites from which members of the class of service are prevented from receiving email messages.
New: Click New to add an Internet address to the list.
Edit: Select an Internet address, then click Edit to modify it.
Delete: Select one or more Internet addresses, then click Delete to remove them from the list.
Classes of Service
Creating a Class of Service
The SMTP Outgoing options determine whether members of the class of service can send Internet email messages.
Inherit Access: Members of this class of service inherit their Internet access from a class of service assigned at a higher level. For example, a post office inherits the domain's Internet access. If the domain is not a member of a specific class of service, the post office inherits the Default Class of Service.
Allow Outgoing Messages: Allows members of the class of service to send email messages over the Internet.
Prevent Outgoing Messages: Prevents members of the class of service from sending email messages over the Internet.
Exceptions: Click Exceptions to list specific Internet sites to which outgoing messages are allowed, even if they would otherwise be prevented.
Prevent Messages Larger Than: (Optional) If you select Allow incoming messages or Prevent incoming messages, you can establish a size limit for Internet email messages. By default, there is no size limit on Internet email messages.
Rule-generated email messages are auto-reply messages or auto-forward messages set up by GroupWise users.Out of Office rules generate specialized types of auto-reply messages.
Allow Replies: Allows the GWIA to send rule-generated replies over the Internet.
By default, this option is deselected. If you do not select this option, rule-generated replies are not sent to Internet recipients.
Exceptions: Click Exceptions to list specific Internet sites that are handled the opposite of the Allow replies setting.
Allow Forwards: Allows the GWIA to send rule-generated forwarded messages over the Internet.
By default, the GWIA blocks all rule-generated forwarded messages, because such messages can be a security issue.
Exceptions: Click Exceptions to list specific Internet sites that are handled the opposite of the Allow forwards setting.
Classes of Service
Creating a Class of Service
The IMAP4 options determine whether members of the class of service can use IMAP4 email clients to access their GroupWise mailboxes.
Inherit Access: Members of this class of service inherit their Internet access from a class of service assigned at a higher level. For example, a post office inherits the domain's Internet access. If the domain is not a member of a specific class of service, the post office inherits the Default Class of Service.
Allow Access: Allows members of the class or service to send and receive messages by using an IMAP4 email client to access their GroupWise mailboxes.
Prevent Access: Prevents members of the class or service from sending and receiving messages by using an IMAP4 email client to access their GroupWise mailboxes.
Classes of Service
Creating a Class of Service
The POP3 options determine whether members of the class of service can use POP3 email clients to access their GroupWise mailboxes.
Inherit Access: Members of this class of service inherit their Internet access from a class of service assigned at a higher level. For example, a post office inherits the domain's Internet access. If the domain is not a member of a specific class of service, the post office inherits the Default Class of Service.
Allow Access: Allows members of the class or service to send and receive messages by using a POP3 email client to access their GroupWise mailboxes.
Prevent Access: Prevents members of the class or service from sending and receiving messages by using a POP3 email client to access their GroupWise mailboxes.
The following options are available when you select Allow access:
Delete Messages from GroupWise Mailbox after Download: Messages downloaded from a GroupWise mailbox to a POP3 email client are moved to the Trash folder in the GroupWise mailbox.
Purge Messages from GroupWise Mailbox after Download: Messages downloaded from a GroupWise mailbox are moved to the mailbox's Trash folder and then emptied. This completely removes the messages from GroupWise.
Convert Messages to MIME Format When Downloading: Messages downloaded to a POP3 email client are converted to MIME format.
High Performance on File Size Calculations: POP3 email clients calculate the size of each message file before downloading it. Select this option to assign a size of 1 KB to each message file. This eliminates the time associated with calculating a file's actual size.
Number of Days Prior to Today To Get Messages From: Select the number of days to go back to look for messages to download from the GroupWise mailbox to the POP3 email client. The default is 30 days.
Maximum Number of Messages To Download: Select the maximum number of messages a user can download at one time from a GroupWise mailbox to a POP3 email client. The default is 100 messages.
Classes of Service
Creating a Class of Service
Setting: Lists the access settings that are currently being applied to the selected object. Select an access setting to display the source of the setting.
Source: Lists details about the selected access setting.
Class of Service: Displays the class of service that controls the access setting.
Domain: Displays a domain name if the access setting is being provided through a domain that is a member of the class of service.
Post Office: Displays a post office name if the access setting is being provided through a post office that is a member of the class of service.
Member ID: Displays a group name if the access setting is being provided through a group that is a member of the class of service. Displays Everyone if the setting is not defined by the class of service.
Classes of Service
Creating a Class of Service
Several organizations provide lists of IP addresses that are known to be open relay hosts or spam hosts. If you want to use free blacklist services, or if you subscribe to fee-based services, you can configure the GWIA to use the defined services to ensure that no messages are received into your GroupWise system from blacklisted hosts.
Blacklist Addresses List: Displays the addresses of all blacklists that the GWIA checks when it receives a message from another SMTP host. This list corresponds with the --rbl switch.
The GWIA checks the first blacklist and continues checking lists until the sending SMTP host's IP address is found, or all lists have been checked. Use the arrows below the list to change the order of the blacklists.
If the sending SMTP host's IP address is included on any of the blacklists, the message is rejected. If the GWIA's logging level is set to Verbose, the log file includes information about the rejected message and the referring blacklist.
Add: Click Add to add a new blacklist address to the list.
The following list provides the names, websites, and blacklist URLs for several well-known blacklist services that were free at the time of this release:
Blacklist Service |
Website |
Blacklist URL |
---|---|---|
Spam and Open Relay Blocking System (SORBS) |
dnsbl.sorbs.net |
|
Spamhaus |
sbl.spamhaus.org |
|
bl.blocklist.de |
bl.blocklist.de |
Edit: Select an address, then click Edit to modify it.
Remove: Select an address, then click Remove to remove it from the list.
If a blacklist is blocking a specific SMTP host that you want to receive messages from, you can allow a specific SMTP host as an exception to the blacklist. On the Default Class of Service, use SMTP Incoming tab > Allow incoming messages to override the blacklisted host. For example, if goodhost.com has been added to a blacklist but you still want to receive messages from that host, you could edit the default class of service to add goodhost.com to the list of allowed hosts.
Real-Time Blacklistsin the GroupWise Administration Guide.
The GWIA can be configured to function as an SMTP relay host.
Allow Message Relaying: Allows the GWIA to relay email messages that do not pertain to users in your GroupWise system.
Prevent Message Relaying: Prevents the GWIA from relaying email messages that do not pertain to users in your GroupWise system.
Prevent Messages Larger Than: (Optional) If you select Allow message relaying, you can establish a size limit for relayed email messages. By default, there is no size limit on relayed email messages.
If you select Allow Message Relaying, you can list specific Internet addresses to prevent from relaying.
If you select Prevent Message Relaying, you can list specific Internet addresses to allow to relay.
SMTP Relay Exceptions List: Lists specific Internet sites that are handled the opposite of the selected Message Relaying setting.
New: Click New to add an Internet address to the list.
Edit: Select an Internet address, then click Edit to modify it.
Delete: Select one or more Internet addresses, then click Delete to remove them from the list.
Enabling SMTP Relayingin the GroupWise Administration Guide.
The GWIA Access Control database (gwac.db) stores the information for the classes of service that you have defined. If any problems occur with a class of service, you can validate the database to check for errors. If errors are found, you can recover the database.
Validate Database: Checks for physical inconsistencies with the database's records and indexes, Then it produces a report listing the number of inconsistencies found and the number of records and indexes examined.
Recover Database: If validating the database reveals inconsistencies within the database, you should recover the database. During this process, a new database is created and all salvageable records are copied to the new database. Unsalvageable records are lost. The report lists the total number of records and the number of records recovered.
Maintaining the Access Control Databasein the GroupWise Administration Guide.
Breadcrumbs identify the context of the object.
Save: Edit the GWIA object properties as needed, then click Save to save your changes.
Close: Click Close to return to the Internet Agents list.
Customize Tab Order:
Click Customize Tab Order to reorganize the tabs on the properties page.
Delete: Deletes the GWIA object from the domain.
Deleting a GWIA object does not remove the GWIA software from the server.
Diagnostics > Information: Displays the Information window with external object tallies specific to the GWIA.
Diagnostics > Display Object: Displays the Display Object window with object attributes and values for the GWIA object.
For trademark and copyright information, see Legal Notices.