The Kelly Company and Shamrock Logo
DAWKCo(tm) Software: e-Mail POP3 Server, SMTP Anti-Spam eMail Blocker, WebMail, Web Site Mapper, Website Design
 
Software Websites News Favorites Contact



Advanced Search

Sitemap






 

DAWKCo Software Tech Support FAQ
Frequently Asked Questions and answers -- Terms Of Use

 
FAQ List
Q: Does your POP3 Server support TLS or SSL (secure sockets layer)?
Q: Can I use AUTH GSSAPI secure authentication with your POP3 Server?
Q: Do I need to install Exchange Server to use your POP3 Server?
Q: Can DAWKCo POP3 mailboxes be updated without having to restart the POP3 Server?
Q: Can I change the IIS SMTP Server folder locations?
Q: Which Windows account(s) should I use for DAWKCo POP3 mailbox access control?
Q: How do I set up a DNS zone for a virtual domain?
Q: What permissions do I have to set for DAWKCo POP3 users, groups, etc.?
Q: Can a DAWKCo POP3 mailbox have multiple Forwards?
Q: Can a DAWKCo POP3 mailbox have multiple Aliases?
Q: Can a DAWKCo POP3 mailbox have a Distribution List?
Q: Is it possible to use DNS Round Robin Load Balancing and/or File Replication with your POP3 Server?
Q: How do I block SMTP Relay (a.k.a. Open Relay or Spam Relaying) at the IIS SMTP Server?
Q: Where can we find out if our mail server has been "blacklisted" over Spam or Relay issues?
Q: Can your POP3 Server software provide publicly accessible mail services if my server machine sits behind a DSL Router/Firewall?
Q: What security settings are recommended for the DAWKCo web-based mail applications and utilities?
 

 
Q: Does your POP3 Server support TLS or SSL (secure sockets layer)?
A: Yes, with DAWKCo POP3 Services Small Business Version, which supports both TLS and SSL3.   (Note: DAWKCo POP3 Server Hosting Version does not currently support TLS/SSL, but will soon...)
^FAQ List
 
Q: Can I use AUTH GSSAPI secure authentication with your POP3 Server?
A: Yes, with DAWKCo POP3 Services Small Business Version, which supports: GSSAPI (Kerberos V5), GSS-SPNEGO (KERBEROS_V5, DIGEST-MD5, NTLM), DIGEST-MD5 and CRAM-MD5.   (Note: DAWKCo POP3 Server Hosting Version currently supports only CRAM-MD5, but will add support for GSSAPI (Kerberos V5) soon...)
^FAQ List
 
Q: Do I need to install Exchange Server to use your POP3 Server?
A: No. DAWKCo POP3 Server, used in conjunction with the IIS SMTP Server, is all that's required for a complete mail server solution.
^FAQ List
 
Q: Can DAWKCo POP3 mailboxes be updated without having to restart the POP3 Server?
A: Yes. Use the Web-based POP3 Domains Admin Utility provided.
^FAQ List
 
Q: Can I change the IIS SMTP Server folder locations?
A: Yes. To do so, download the following Zip archive:
 
set-smtp-dirs.js.zip (Zip archived JScript, 1.9KB)
 
Extract the script file from the Zip archive to your local hard disk and open a Command Prompt window at that location. For the usage instructions message, at the command prompt type either:
 
wscript setsmtpdirs.js
 
or
 
cscript setsmtpdirs.js
 
and press Enter. For further details, search for:  SMTP Server Folder Locations
^FAQ List
 
Q: Which Windows account(s) should I use for DAWKCo POP3 mailbox access control?
A: First, you should NOT use the Windows built-in "Administrator" account, or any account with administrative privileges--that could pose a security risk. You should just use any regular User Type account(s), and account(s) created specifically for POP3 purposes would be best. No special privileges are needed; however, they cannot be disabled or restricted accounts. The POP3 Admin Utility will set the appropriate permissions needed. POP3 Domain Admins will be granted the extra privileges need to administer their POP3 domains via the Web-based utilities.
 
Although linkage between any particular person(s) and the Windows account(s) used for POP3 mailbox access control is not necessary, there should be a distinction between Windows account(s) used for mailbox owners designated as POP3 Domain Administrators and those used for mailbox owners designated as POP3 Users. Many POP3 Domain Admins can use the same Windows account; and similarly so for POP3 Domain Users. However, an account used for POP3 Domain Admins should NOT also be used for POP3 Domain Users and vice versa, to prevent regular users from being granted web-based administrative privileges inadvertently.
^FAQ List
 
Q: How do I set up a DNS zone for a virtual domain?
A: Use the following (or similar) procedure:
  1. Open Administrative Tools, DNS.
  2. Expand the machine node (at the top), expand the Forward Lookup Zones and Reverse Lookup Zones nodes
  3. Right-click on the Forward Lookup Zones node, click New Zone..., the New Zone Wizard opens, click Next
  4. Select "Standard Primary" and click Next
  5. Type the virtual domain name in zone Name input box (e.g., yourdomain.com), click Next
  6. Select "Create a new file with this filename:" and leave what's there (e.g., yourdomain.com.dns), click Next, click Finish. You should now see a new folder (yourdomain.com) under the Forward Lookup Zones folder. The SOA and NS records it contains should already be correctly inherited from the server.
     
    Before you continue adding records to the new zone, you'll want to make sure that there is a corresponding Reverse Lookup Zone. If you already have a reverse lookup zone for the IP address used by the new forward lookup zone, skip this step. If you don't, proceed as follows:
    1. Right-click on the Reverse Lookup Zones node, click New Zone..., the New Zone Wizard opens, click Next
    2. Select "Standard Primary" and click Next
    3. Select "Network ID" and enter the first three octets of the IP address for the new zone, click Next, click Finish. You should now see a new folder (x.x.x.in-addr.arpa, or x.x.x.x subnet) under the Reverse Lookup Zones folder. The SOA and NS records it contains should already be correctly inherited from the server.

    Now back to the Forward Lookup Zone:
     
  7. Right-click on the new zone folder (yourdomain.com), click New Host..., the New Host dialog opens
  8. Leave the "Name" input blank. Enter the proper IP address, Check the "Create associated pointer (PTR) record" checkbox and click Add Host.
     
    Note: a DNS message box will pop up stating that "Same as parent folder" is not a valid host name, etc. Click Yes.
     
  9. Click OK, click Done.
  10. Right-click on the new zone folder (yourdomain.com), click New Mail Exchanger..., the New Resource Record dialog opens
  11. Leave the "Host or domain" input blank. Under "Mail server:" enter the Fully Qualified Domain Name of the mail server computer with a trailing dot (e.g., mailservermachine.mailserverdomain.dom.). Under "Mail server priority:" enter 0 (the number zero). Click OK.

If you want to add virtual hostname aliases, such as "www" "ftp" "mail" and the like, for each of them, do the following:
  1. Right-click on the new zone folder (yourdomain.com), click New Alias..., the New Resource Record dialog opens
  2. Under "Alias name:" enter "mail" (for example, with NO trailing dot and NO quotation marks). Under "Fully qualified name for target host:" enter the virtual domain name (of this new zone) with a trailing dot (e.g., yourdomain.com.). Click OK. The virtual host can now be accessed using the name "mail.yourdomain.com" (typically used for e-mail software purposes).

To force the above changes to take effect immediately:
  1. Right-click on the machine node, click "Update Server Data Files"
  2. Right-click on the machine node, click "All Tasks > Restart." The DNS Server Service will stop and restart; afterward, the changes will take effect.

Notes: "Absolute" DNS style names end with a trailing dot because "." is the Root domain (or root of all domains) in DNS. The DNS Resource Record Type names discussed here are: "A" (Host), "MX" (Mail Exchange) and "CNAME" (Alias).
^FAQ List
 
Q: What permissions do I have to set for DAWKCo POP3 users, groups, etc.?
A: You don't normally need to worry about setting any permissions or rights manually--the POP3 Admin Utility takes care of those requirements automatically. The only possible exceptions occur when existing permissions, rights or policies in place at the time of POP3 Server install prevent the utility (which runs in the security context of the Administrators local group) from setting required permissions and rights, or the system state prohibits the settings or prevents them from taking effect (e.g., access to locked files denied, etc.).
 
(One possible instance that requires a manual work-around in permissions settings is documented in the Release Notes under Known Issues, WebMAIL, Item 1.)
^FAQ List
 
Q: Can a DAWKCo POP3 mailbox have multiple Forwards?
A: With the Hosting Versions, yes, but it may require some tricks if the addresses are all remotely hosted. (Forwarding is not available in the Small Business Versions.) Technically, the POP3 Admin Utility and POP3 Server (in current Hosting Versions) allows entry of only one "Forward" address per mailbox, which can be a local or remote address. If you only need forwarding to other locally hosted mailboxes, you can use the "Distribution List" feature to effectively forward to multiple mailboxes. If more than one of the addresses to be forwarded to are remote however, then you must forward to locally hosted mailboxes first using a Distribution List and then additionally set up forwards from those locally hosted mailbox(es) to the remote address(es).
^FAQ List
 
Q: Can a DAWKCo POP3 mailbox have multiple Aliases?
A: Yes. Not only can you have multiple aliases within a given domain, but you can also map e-mail addresses from your other hosted domains to the same mailbox.
^FAQ List
 
Q: Can a DAWKCo POP3 mailbox have a Distribution List?
A: With the Hosting Versions, yes; however, you can only distribute to mailboxes within your hosted domains.
^FAQ List
 
Q: Is it possible to use DNS Round Robin Load Balancing and/or File Replication with your POP3 Server?
A: In short, No, the current versions do not support that scenario. The dynamic nature of POP3 mailboxes and their contents makes Round Robin Load Balancing for purposes of a POP3 Server very complex and slows performance considerably. It entails mailboxes File Replication between servers and requires complex synchronization to ensure that the contents of any mailbox on one server matches that of all the others, while users are receiving, accessing and deleting their mail in real-time.
 
Instead, you could split up the mailboxes between different servers and install a separate instance of our POP3 Server software on each server. (Note: the POP3 Server software license is granted on a per server basis.)
^FAQ List
 
Q: How do I block SMTP Relay (a.k.a. Open Relay or Spam Relaying) at the IIS SMTP Server?
A: See the Readme File for details on how to block third-party relay (or Close an "Open Relay") in the IIS SMTP Server.
^FAQ List
 
Q: Where can we find out if we've been "blacklisted" over Spam or Relay issues?
A: The last time we checked, the following websites had useful info about e-mail server blacklists:
There are probably others. To find them, do an Internet search for keywords like: DNSBL, RBL, Blackhole List, UCE, SPAM, blocking Spam, ORBS, relay blocking, etc.
^FAQ List
 
Q: Can your POP3 Server software provide publicly accessible mail services if my server machine sits behind a DSL Router/Firewall?
A: Yes. This is typically accomplished via "port mappings" at the Router/Firewall, which has your publicly accessible "external" IP address. Your server machine has a private "internal" IP address. The port mappings essentially pipe connections and traffic to/from the external IP address at the router to/from the internal IP address at the server. You configure your services to listen on the internal IP address.
 
Presumably your DSL service provider will provide your external DNS services, but you must also run DNS Server locally to provide local area name resolution on the private portion of your network.
^FAQ List
 
Q: What security settings are recommended for the DAWKCo web-based mail applications and utilities?
A: For a brief discussion about securing web applications, please see Support Inquiry Response (SIR) article sir200807091028, "How To Use the IUSR_<machinename>, IWAM_<machinename> and NETWORK SERVICE Accounts, and the IIS_WPG, Domain Guests and Guests Groups to Secure Web Application Folders and Files."
^FAQ List



TERMS OF USE: we attempt to ensure accuracy and validity to the best of our knowledge of all technical support information provided here; however, all information contained in or displayed on this technical support website is provided "AS-IS" with NO WARRANTIES of any kind either expressed or implied, including but not limited to fitness for any particular purpose. The reader assumes any and all risk when using this information. If you do not agree to these terms, do not use this technical support website.
 


Shamrock LogoHome | Software | Websites | News | Links | Contact | Sitemap | ^
Web Pages by DAWKCoTM Software
Copyright ©1996-2015 The Kelly CompanySM. All rights reserved.

Page Last Updated:  Thursday, 09-Mar-2017 19:40:12 EST