hmLoadTopic({
hmKeywords:"Screening,Security,Security Features,Security Settings",
hmTitle:"Security Menu",
hmDescription:"MDaemon is equipped with an extensive suite of security features and controls. Click Security on MDaemon\'s menu bar to reach the following security features:",
hmPrevLink:"em-client.html",
hmNextLink:"health_check.html",
hmParentLink:"index.html",
hmBreadCrumbs:"",
hmTitlePath:"Security Menu",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">Security Menu<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText\"><span class=\"f_BodyText\">MDaemon is equipped with an extensive suite of security features and controls. Click <\/span><span class=\"f_MenuPath\">Security<\/span><span class=\"f_BodyText\"> on MDaemon<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_BodyText\">s menu bar to reach the following security features:<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"health_check.html\" class=\"topiclink\">Health Check<\/a><\/span><span class=\"f_List1\"> — This page provides a convenient list of important security settings consolidated onto a single page, and it displays each setting\'s current value and its default value. Where those values differ, the setting is highlighted so that the Global Administrators can quickly review those particular settings. If desired, admins can select any of those settings to change back to their default values, or they can click a link next to any setting to jump to the page where that setting is located. In addition, admins can easily undo the most recent change made on the Health Check page. They can also view previous changes made during the current browser session, and then undo specific changes. <\/span><span class=\"f_List1\" style=\"font-weight: bold;\">Note:<\/span><span class=\"f_List1\"> This option is only available in the <a href=\"webadmin_web-config.html\" class=\"topiclink\">MDaemon Remote Administration (MDRA)<\/a> web-interface.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"cf_and_av.html\" class=\"topiclink\">AntiVirus<\/a><\/span><span class=\"f_List1\"> — MDaemon AntiVirus can help you stop email-borne computer viruses by providing the highest level of integrated protection available for MDaemon customers. It will catch, quarantine, repair, and\/or remove any email message found to contain any virus. AntiVirus also contains a feature called Outbreak Protection, which can be used to protect you from certain spam, phishing, and virus outbreaks that can sometimes be missed by the other traditional, content and signature-based security measures.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"cf_content_filter_editor.html\" class=\"topiclink\">Content Filter<\/a><\/span><span class=\"f_List1\"> — a highly versatile and fully multi-threaded Content Filtering system makes it possible for you to customize server behavior based on the content of incoming and outgoing email messages. You can insert and delete message headers, add footers to messages, remove attachments, route copies to other users, cause an instant message to be sent to someone, run other programs, and much more.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"sf_spam_filter.html\" class=\"topiclink\">Spam Filter<\/a><\/span><span class=\"f_List1\"> — uses spam filtering technology to heuristically examine email messages in order to compute a &quot;score&quot;. This score is used to determine the likelihood of a message being spam. Based on that determination the server can then take certain actions such as refusing or flagging the message. See also: <a href=\"spam_traps.html\" class=\"topiclink\">Spam Traps<\/a><\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"dns_black_lists_dns-bl.html\" class=\"topiclink\">DNS Block Lists<\/a><\/span><span class=\"f_List1\"> —allows you to specify several DNS block listing services that will be checked each time someone tries to send a message to your server. If the connecting IP has been listed by any one of these hosts, the message will be refused.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--relay_settings.html\" class=\"topiclink\">Relay Control<\/a><\/span><span class=\"f_List1\"> — used to control what MDaemon will do when a message arrives at your mail server that is neither from nor to a local address.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--ip_shielding.html\" class=\"topiclink\">IP Shield<\/a><\/span><span class=\"f_List1\"> — if a domain name specified in this list attempts to connect to your server, its IP address must match the one that you have assigned to it.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--reverse_lookup.html\" class=\"topiclink\">Reverse Lookup<\/a><\/span><span class=\"f_List1\"> — MDaemon can query DNS servers to check the validity of the domain names and addresses reported during incoming messages. Controls on this screen can be used to cause suspicious messages to be refused or a special header inserted into them. Reverse Lookup data will also be reported in the MDaemon logs.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--pop_before_smtp.html\" class=\"topiclink\">POP Before SMTP<\/a><\/span><span class=\"f_List1\"> — the controls on this screen are used to require each user to first access his or her mailbox before being allowed to send a message through MDaemon, thus authenticating that the user is a valid account holder and allowed to use the mail system.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--trusted_hosts.html\" class=\"topiclink\">Trusted Hosts<\/a><\/span><span class=\"f_List1\"> — domain names and IP addresses that will be considered as exceptions to the relay rules listed on the Relay Control screen.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--smtp_authentication.html\" class=\"topiclink\">SMTP Authentication<\/a><\/span><span class=\"f_List1\"> — used for setting several options that denote how MDaemon will behave when a user sending a message to MDaemon has or has not been authenticated first.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--send-as-permissions.html\" class=\"topiclink\">Send As Permissions<\/a><\/span><span class=\"f_List1\"> — This page is used for associating <\/span><span class=\"f_List1\" style=\"font-style: italic;\">Send As Addresses<\/span><span class=\"f_List1\"> with specific MDaemon Accounts, allowing them to send messages as if from another MDaemon account. For example, you could give a manager\'s assistant permission to send messages as if they are coming from the manager\'s account, or you could use a wildcard address, such as &quot;*@example.com,&quot; to give all users of a specific domain permission to send from a specific address, such as &quot;info@example.com&quot;.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--spf__sender_id.html\" class=\"topiclink\">SPF<\/a><\/span><span class=\"f_List1\"> — Most domains publish MX records to identify the machines that may receive mail for them, but this doesn\'t identify the locations allowed to send mail for them. Sender Policy Framework (SPF) is a means by which domains can also publish &quot;reverse MX&quot; records to identify those locations authorized to send messages.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--domainkeys_identified_mail.html\" class=\"topiclink\">DomainKeys Identified Mail<\/a><\/span><span class=\"f_List1\"> — DomainKeys Identified Mail (DKIM) is an email verification system that can be utilized to prevent spoofing. It can also be used to ensure the integrity of incoming messages, ensuring that the message hasn\'t been tampered with between the time it left the sender\'s mail server and arrived at yours. This is accomplished by using an encrypted public\/private key pairs system. Outgoing messages are signed using a private key and incoming messages have their signatures verified by testing them with the public key published on the sender\'s DNS server.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--sender-blacklist.html\" class=\"topiclink\">Sender Block List<\/a><\/span><span class=\"f_List1\"> — lists addresses that are not allowed to send mail traffic through your server.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--ip_screening.html\" class=\"topiclink\">IP Screen<\/a><\/span><span class=\"f_List1\"> — used to designate IP addresses from which you will allow or refuse connections to your server. <\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--host_screening.html\" class=\"topiclink\">Host Screen<\/a><\/span><span class=\"f_List1\"> — used to designate hosts (domain names) from which you will allow or refuse connections to your server.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"dynamic-screening_options.html\" class=\"topiclink\">Dynamic Screening<\/a><\/span><span class=\"f_List1\"> — Using Dynamic Screening, MDaemon can track the behavior of incoming connections to identify suspicious activity and then respond accordingly. You can <a href=\"dynamic-screening_auth-failure-tracking.html\" class=\"topiclink\">block an IP address<\/a> (or range of addresses) from connecting when it fails authentication a specified number times within a specified amount of time. You can also<\/span><span class=\"f_List1\"> <a href=\"dynamic-screening_auth-failure-tracking.html#account-blocking-options\" class=\"topiclink\">block the accounts<\/a> attempting to authenticate when they fail too many times too quickly.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"ssl__certificates.html\" class=\"topiclink\">SSL &amp; TLS<\/a><\/span><span class=\"f_List1\"> — MDaemon supports the Secure Sockets Layer (SSL) protocol for SMTP, POP, and IMAP, and for Webmail\'s web server. SSL is the standard method for securing server\/client Internet communications.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--backscatter_protection.html\" class=\"topiclink\">Backscatter Protection<\/a><\/span><span class=\"f_List1\"> — &quot;Backscatter&quot; refers to response messages that your users receive to emails that they never sent. This occurs when spam messages or messages sent by viruses contain a Return-Path address that is forged. Backscatter Protection helps prevent this by ensuring that only legitimate Delivery Status Notifications and Autoresponders get delivered to your accounts, by using a private key hashing method to generate and insert a special time-sensitive code into the Return-Path address of your users\' outgoing messages.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"bandwidth_throttling_overview.html\" class=\"topiclink\">Bandwidth Throttling<\/a><\/span><span class=\"f_List1\"> — the Bandwidth Throttling feature makes it possible for you to police the consumption of bandwidth used by MDaemon. You can control the rate at which sessions or services progress, setting different rates for each of MDaemon\'s major services on a per-domain basis, including Domains and Domain Gateways.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--tarpit_settings.html\" class=\"topiclink\">Tarpitting<\/a><\/span><span class=\"f_List1\"> — makes it possible for you to deliberately slow down a connection once a specified number of RCPT commands have been received from a message\'s sender. This is to discourage spammers from trying to send unsolicited bulk email to you. The assumption behind this technique is that if takes spammers an inordinately long period of time to send each message then that will discourage them from trying to do so again in the future.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--greylisting.html\" class=\"topiclink\">Greylisting<\/a><\/span><span class=\"f_List1\"> — Greylisting is a spam-fighting technique that exploits the fact that SMTP servers retry delivery of any message that receives a temporary (i.e. &quot;try again later&quot;) error code. Using this technique, when a message arrives from a sender not on the allow list or otherwise previously unknown, its sender, recipient, and sending server\'s IP address will be logged and then the message will be refused by Greylisting with a temporary error code during the SMTP session. Then, when the legitimate servers attempt to deliver the messages again a few minutes later, they will be accepted. Because spammers do not typically make further delivery attempts, Greylisting can significantly help to reduce the amount of spam your users receive.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--lan_ips.html\" class=\"topiclink\">LAN IPs<\/a><\/span><span class=\"f_List1\"> — use this screen to list IP addresses that reside on your LAN (local area network). These IP addresses are therefore treated as local traffic for the purposes of bandwidth throttling, and may be exempt from various other security and spam prevention restrictions.<\/span><\/p>\n\r<p class=\"p_List1\" style=\"text-indent: 0; padding-left: 1.6875rem; margin-left: 2.0625rem;\"><span class=\"f_List1\" style=\"font-family: Arial,\'Lucida Sans Unicode\',\'Lucida Grande\',\'Lucida Sans\';display:inline-block;width:1.6875rem;margin-left:-1.6875rem\">&#8226;<\/span><span class=\"f_List1\" style=\"font-weight: bold;\"><a href=\"security--site_policy.html\" class=\"topiclink\">Site Policy<\/a><\/span><span class=\"f_List1\"> — used for creating a site policy to be transmitted to sending servers at the beginning of every SMTP mail session. An example of a common site policy is, &quot;This server does not relay.&quot;<\/span><\/p>"
})
