Small company logo:
   History
 
Advertising banner:
 
 80
Home • Help • Form • 80
 
Form tabs



Use this form to make changes to the default site configuration.



General tab
Use this tab for general information about the Internet Services system setup and site connection.


Primary domain name
Your server's domain name. In outgoing mail, this will be added to the names of local users and to remote names that do not have a domain name specified.

In the address user@huskyplanes.com, the domain name is huskyplanes.com.
Primary DNS
(Domain Name Server)
The IP address of your primary DNS. If you do not maintain your own DNS server, obtain this address from your Internet Service Provider (ISP).

If you have more than one DNS server, enter their addresses on the Advanced DNS form.
Postmaster name
All Internet email addressed to "postmaster" will be sent to this person. In most cases, this is the administrator.
We recommend that you create a separate mail address for the web administrator (for example, webadmin@huskyplanes.com). This way, rather than using the main administrator account for mail, you separate Internet and server administration.
Default: Administrator
Internet connection
The type of Internet connection.
•       Continuous (Default)
Select this if you have a full-time connection to the Internet. Outgoing mail will flow continuously and news and mail polling will be controlled by the Internet Service Account schedule that you specified on the Service Account form.
•       Intermittent or dial-up
Select this if you do not have a continuous connection to the Internet. Specify the connection schedule on the Service Account form. You must also set routing information on the Advanced Mail form.
81203_42521_14.png        Note
Before configuring Internet Services for dialup connections, you should already have installed and appropriately configured dialup software on the computer on which Internet Services is installed (for example, FreePPP on Mac OS and Dial-Up Networking on Windows).
You must also configure the system to recognize these. For more information, see your system documentation. You must set a low timeout value when you configure this software. The Scheduling tab of the Service Account form controls when you dial into your Internet Service Provider (ISP). The timeout value of your dialup software is how you control when the connection is dropped.
Schedule button
Opens the Scheduling tab of the Service Account form. Set scheduling information there, if you selected "Intermittent or dial-up".
Start Internet Services automatically
Starts Internet Services whenever you start your server.
For this option to work, the Internet Services component of FirstClass must be installed on the same machine as the server component. If your server and Internet Services are installed on separate machines or as a clustered service, you cannot select this feature.
81203_40013_5.png        Warning
If both the server and Internet Services are on the same machine, and you have Internet Services running as a Windows NT service, do not select the "Start Internet Services automatically" option, as enabling both will result in two copies of Internet Services being started.
Default: Unselected



Mail tab
Use this tab to set basic Internet mail protocols.
At the very least, you must enable SMTP mail if you want to send and receive Internet mail. You should also enable the POP3 and IMAP4 options if you have many users who send mail using third-party clients like Eudora or Outlook Express (see Connecting to servers in our Client Help for more information).


Enable SMTP
Allows FirstClass to make connections to and receive connections from other SMTP servers, to transfer Internet mail.
Default: Selected
SMTP server domain name
The domain name for your SMTP server. Normally, this will be in a format like mail.firstclass.com. This name must be defined in your DNS and must point to the IP address of the machine on which Internet Services is installed.
For each protocol you enable in Basic Internet Setup that requires a server domain name, we recommend that you provide a separate server domain name, even if all these names point to the same server machine.
Enable POP3 (outbound)
Enables the Internet Services POP3 server to serve out POP3 mail.
Default: Selected
Mail server (inbound)

The name of the POP3 server from where your users import their POP mail. The server you enter in this field will be used unless another one is specified on a user's Mail Import form in personal preferences (see Retrieving mail from Internet mail accounts in our Client Help).
Max outgoing mail
The maximum number of messages you want to send simultaneously.
Normally, you will accept the default 15. This is a large enough number to maintain significant mail flow but not so large as to cause memory problems. You may want to adjust this number if you notice mail overflow or low memory problems on your system, which you can monitor using the Internet Services Monitor. Increasing this number may require more memory resources.
Enable IMAP4 (outbound)
Enables the Internet Services IMAP4 server to serve out IMAP4 mail.
Default: Selected



News tab
Use this tab to set basic Internet news settings. You should only do this if you want to receive newsgroups.
For example, on Husky Planes we allow our users to register with newsgroups. We use news.huskyplanes.com as our news server domain and have registered it in our DNS. On Husky Planes, we use our ISP's news server, as we do not maintain our own. If you don’t maintain your own news server, you need to arrange which newsgroups your ISP sends you.


Enable NNTP
Provides for message transfer to and from Internet newsgroups by enabling the NNTP client protocol on your server.
Default: On
NNTP server domain name
The domain name you want associated with the NNTP protocol (for example, news.firstclass.com). This name must be defined in your DNS and must point to the IP address of the machine on which Internet Services is installed.
For each protocol you enable in Basic Internet Setup that requires a server domain name, we recommend that you provide a separate server domain name, even if all these names point to the same server machine.
NNTP feed server
The name of the server that provides your news feed. This is where newsgroup posts created on your system are sent. In most cases, this is your Internet Service Provider's news server.



Web tab
Use this tab to enable the HTTP protocol to allow users to access your web site with their web browsers. The HTTP also lets you publish material on the web.

Enable HTTP
Lets you publish HTML documents from your web server by enabling the HTTP protocol on your server.
Default: On
HTTP Server domain name
Enter your site domain name.



File tab
Use this tab to configure the FTP and CIFS/SMB file sharing protocols.


Enable FTP
Allows users to download files from your server and from users' home pages with an FTP client. To make files available for FTP, place them in the Internet Services/FTP folder.
Default: On
FTP server domain name
The domain name you want associated with your FTP server. This name must resolve to your FTP server machine, be defined in your DNS server, and point to the IP address of the machine on which Internet Services is installed.
We recommend that you provide a separate server domain name, for each protocol you enable that requires a server domain name.
Enable CIFS/SMB
Enable the CIFS/SMB protocol on your system to mount your FirstClass Desktop as a network file system.
For detailed steps on how to configure CIFS/SMB on your system, see About accessing files.
For advanced options (for example, CIFS ports) see the CIFS tab on the  Advanced Web & File form.
Default: Off



Directory tab
Use this tab to give users with Finger and LDAP clients access to your FirstClass Directory.
81203_42521_14.png        Note
You can enable SSL support for LDAP on the LDAP tab on the Advanced Directory form. For information on creating a security certificate, see Creating a security certificate for your system.


Enable Finger
Allows Internet users to search the Directory using a Finger client by enabling the Finger protocol on your server.
Default: On
Enable LDAP
Allows Internet users to search the Directory using an LDAP client by enabling the LDAP protocol on your server.
Default: On



UCE/Spam tab
Use this tab to configure if your site relays messages, how to handle spam and junk mail, and the behaviour of the Abuse section on the Security tab on the Internet Services Monitor.
For more information on controlling spam and securing your Internet Services environment, see About system security.
Relaying subtab
Use this subtab to control which messages your site relays and which messages to accept.


Disable ALL relaying, including SMTP AUTH and trusted IPs
Disallows all relaying off your system.
This is the most secure choice as it disables relaying completely including SMTP AUTH users (fully authenticated users) and trusted IP addresses.
This is a drastic measure that should only be used in extreme circumstances if you are experiencing many problems on your site due to relaying. This option provides you with the opportunity to stop the flow completely and fix the leaks but does not affect users sending email using FirstClass.
Default: On
RBL subtab
Use this subtab to enable the Real Blackhole Lookup (RBL) option to handle problem IP addresses found on your RBL services.


Enable RBL lookups
Rejects connections from any IP address listed on the RBL hosts to which you are subscribed.
Default: Off
Inject X-RBL-Warning header instead of NDN
If option is unchecked, Internet Services sends a 550 error message followed by information in the "Help text" field.
Help text fields contain messages the sender receives that describes why the connection was refused and contains a link to the RBL site where the sender can take corrective action.
You will only have one message per RBL site. An example of this is, "Your mail has been found on our RBL service list and will not be delivered. Go to rbl.spamcop.org for more information".
Connection requests from an IP address found on one of your RBL services will be cached for an hour. This avoids the lengthy process of your system having to lookup a bad IP address every time it tries to connect to your server.
If option is checked, a warning in the header of the message goes to the recipient at your site. This warning tells the recipient that the email address has been found in the system RBL service and that he should use his personal mail rules to filter messages of this type (see Creating rules for automatic mail handling in our Client online help).
81203_42521_14.png        Note
Your system filter documents override any settings on the UCE/Spam tab (see The Internet Services Filters folder).
Default: Off
Enable SURBL lookups
Rejects connections from any IP address listed on the SURBL hosts to which you are subscribed.
Default: Off
Junk subtab
Use this subtab to choose how to handle junk mail entering your system and to configure the Strike list option, if you have set up your rules to register Strikes.


Reject unknown domain names
Does a reverse DNS lookup (checks IP addresses against the connecting SMTP server) and rejects any that fail. Internet Services uses your DNS to retrieve a list of domain names associated with any incoming IP addresses.

The incoming IP address in this case is the SMTP mail server that attempts to connect to Internet Services to deliver a message. This may not be the address of the original server. For example, if SMTP server A routes a message to SMTP server B that tries to connect to your system, Internet Services will try to resolve the IP address of SMTP server B.
Coupling this option with the RBL service can provide your site with added security. Internet Services maintains a cache of reverse DNS records, so SMTP servers that send you a lot of mail won't  increase your system load.
Default: Off
NNTP crossposting limit
The maximum number of crossposts (single news items posted to multiple newsgroups) that will cause news to be rejected. FirstClass rejects any newsgroup messages with more crosspostings than this limit. For example, if you select 10, a news item crossposted to 10 newsgroups will be accepted, but one crossposted to 11 newsgroups will be rejected. It is generally considered bad netiquette to crosspost to more than two or three newsgroups. Excessive crossposting is often used to distribute junk mail. By specifying a low number, you will probably eliminate a considerable amount of junk mail.
Default: 10
Strike List
Use this section to set a strike counter for SMTP servers who continously deliver spam to your system. Configure the:
•       number of strikes against servers before blocking them
•       period of time between each strike that must pass with no strikes before the strike counter is reset
•       amount of time to block struck out IPs.
Default: 3, 1, 5
Mail Rules subtab
Use this subtab to control how the rules.MailRules document scores Spam. To enable the score fields, you must make a change and close the form. If you don't touch a spam-score field, that field is not enabled. In other words, Internet Services will use the fallback scores configured in the rules.MailRules file.


Low spam score
The minimum and maximum score for a message to be flagged as "Low".
Default: Min: = 15, Max: = 25
Medium spam score
The maximum score for a message to be flagged as "Medium".
Default: 50
High spam score
The maximum score for a message to be flagged as "High". Messages scoring higher than this value are flagged as "Extreme".
Default: 100
Extreme causes NDN
Select this field if you want to automatically reject a message that exceeds the High spam Max score.
Default: Off                            
SubjectBlock causes NDN
Select this field if you want to automatically reject a message if the subject contains words in the rules.SubjectBlock file.
Default: Off
Crosspost limit
If the message has more recipients than this value, then the Spam score will be increased for that message.
Default: 15
Abuse subtab
Use this subtab to enable and display activity in the Abuse section on the Security tab on the Internet Services Monitor.


Abuse note level
Internet Services will note IP addresses whose abuse score exceeds this amount to identify any further suspicious activity.
Default: 50
Abuse warning level
Internet Services will mark IP addresses whose abuse score exceeds this amount with a yellow light.
Default: 100
Abuse danger level
Internet Services will mark IP addresses whose abuse score exceeds this amount with a red light.
Default: 500
Abuse autoblock level
Internet Services will add IP addresses whose abuse score exceeds this amount to the temporary IP blocklist.
Default: Off
Abuse block time
This is the period of time that IP addresses will remain on the temporary IP blocklist.
Default: 1 hour
Abuse reset interval
Internet Services will reset the abuse score of IP addresses who have not engaged in suspicious activity for this period of time.
Default: 6 hours



Connections tab
Use this tab to reject connections based on filter documents in your Filters folder and also enable the Black Hole option to shut down any server trying to deliver large quantities of spam or launch a Denial of Service (DOS) against your system.


Reject connections based on Filters
Rejects connections based on entries in filter documents located in the Filters folder in the Internet Services folder on the administrator's Desktop (see Handling spam in the Internet Services online help).
Default: On
Connection Black Hole
Use this section to lock down connections attempting to deliver spam to your site or attempting to launch denial of service against your system. You can also specify the amount of time you want to hold these connections.
81203_42521_14.png         Note
You must enable "Reject connections based on Filters" to use this option.
Under "Hold connections from", select from where you want to lock down offending connections.
Default: None, 5 Minutes





Defaults:
First option On, second option On,
third option Off, fourth option Off





Service tab
Use this tab to set up the basics of your Internet account and the priority level at which the Internet Services executable will run.

Service account
The account to which automatched addresses are linked. If a message has an address containing @, FirstClass sends the message for delivery to the Internet account. This is also the account that Internet Services uses for mail and news routings and for public (nonauthenticated) access through HTTP, FTP, Finger, and LDAP. This name must match the name on the Gateway form, in the Gateways folder, in order for the gateway to connect to the server.
The default name is Internet. Do not change this default unless you reconfigure the Internet account and change the name. Do not change this to the name of a third party gateway.
Default: Internet
Internet Services priority
The priority of Internet Services operations on this machine:
•       High
Select this if Internet Services is running on a dedicated machine or on a system with multiple CPUs.
•       Medium (Default)
Select this if the server and Internet Services are running on the same machine.
•       Low
Select this to allow other software to run on this machine with little performance impact. Only do this temporarily, because Internet Services' performance will be severely affected.
We recommend against running software other than the server and Internet Services on the same machine.
Configuration refresh interval
Determines how often the configuration module will query the server to locate new configuration resources. Set to 0 to disable.
Internet sessions
The maximum number of incoming Internet protocol connections (for example, Finger, POP3, HTTP) that Internet Services will accept.

Each session uses only one connection, regardless of protocol and has the potential to occupy one server network session. Since Internet Services uses caching, the actual number of sessions used may be less than the number of requests.
Check the Internet Services Monitor to see whether the number of sessions you have set is appropriate, or whether connections are being rejected.
Default: 10
Configure button
Opens the Service Account form. Use this form to view or update the Internet Services gateway settings for a particular account.