User Login      + Register  

Table_of_Contents

1      About SME Server

1.1                Features and Benefits

1.1.1      Ease of Administration

1.1.2      File and Print Sharing

1.1.3      Internet Connection

1.1.4      Email

1.1.5      Antivirus and Antispam

1.1.6      Firewall

1.1.7      Remote Access

1.1.8      Directory Services

1.1.9      Web Hosting

1.1.10  Raid

1.1.11  Backup

1.1.12  Automatic Updates

1.1.13  Extensible

2      Install SME Server Virtual Machine

3      Configure SME Server Virtual Machine

3.1                SME Server First Boot Configuration

3.2                Test Virtual Machine on PC

3.3                Further SME Server Configuration

3.4                Install VmWare Tools on SME Server VM

3.5                Install SecureOffice VmWare Workstation

3.5.1      Share SecureOffice Folders With VM

3.5.2      Link VM and SecureOffice SSL Certs

3.5.3      Configure Domain Email

3.5.4      Forward WAN Service Ports to VM

3.5.5      Forward http(s) Services to VM

3.6                Final SME Server Configuration

3.6.1      Access Domain Website

3.6.2      Access SME Server Administration GUI

3.6.3      Configure Email Services

3.6.4      Configure SME Server Users and Groups

3.6.5      Configure SME Email Server

3.6.6      Test Domain Email Using Webmail

3.6.7      Configure Email Client on PC

4      Troubleshooting SME Server

List of Figures

Figure 1:       VmWare Workstation Main Screen

Figure 2:       VmWare Workstation Select Installation Source

Figure 3:       VmWare Workstation Select Guest Operating System

Figure 4:       VmWare Workstation Select VM Name and Location

Figure 5:       VmWare Workstation Select Disk Characteristics

Figure 6:       VmWare Workstation Ready to Create VM

Figure 7:       VmWare Workstation Configure Hardware

Figure 8:       SME Server Command Prompt

Figure 9:       SME Server Default Website

Figure 10:       SME Server Administration Page

Figure 11:       VmWare Add Shared Folder

Figure 12:       Nginx Configuration

Figure 13:       SME Server Email Configuration

Figure 14:       SME Server WebMail GUI

List of Tables

Table 1:       Email Port Forwards

Table 2:       Webserver Port Forwards

1      About SME Server

Koozali SME Server is a complete, secure, stable and versatile Open Source Linux Server distribution for small to medium sized enterprises. It is based on the rock solid CentOS/Redhat sources and brought to you by a large, active and skilled community, providing development, contribs (plugins) and support, since 2007.

Koozali SME Server is free to use for any individual or (commercial) organization and is sponsored by individuals and companies solely through donations.

Koozali SME Server has some unique features that make it an especially secure, stable and easy to operate server platform which is designed to be:

  • Simple to setup and use; Installation and basic configuration takes less than 20 minutes, and most configuration options can be set via a web-based interface.
  • Secure and stable to operate; SME Server only includes what is necessary. Stability comes from using proven, supported CentOS/Redhat sources and from an update system that notifies you with available updates.
  • Cross-platform and extendible to meet future needs; SME Server already has everything necessary to provide the core services most people need to network Linux and Windows systems. Dozens of contribs (Plugins) provide extra functionality.
  • Exceptionally reliable and easy to use, Koozali SME Server can be installed and configured in less than 20 minutes - yet it's powered by a secure and open Linux platform that's fully upgradeable and customizable. Simply install it on any standard PC and in minutes you'll have a robust Linux-based LAMP server capable of fully replacing those expensive Windows server licenses and providing a full range of services - including e-mail, firewall, file and print-sharing, web hosting, remote access and more.

Koozali SME Server integrates easily with Windows, Mac, and Unix/Linux clients within Linux and Windows network environments. It's as simple to use as a business server platform, but unlike a commercial solutions the entire system is modular and extensible, so it can be tailored to the needs of individual businesses.

And it's completely free!

Koozali SME Server can be downloaded from here.

1.1                Features and Benefits

1.1.1      Ease of Administration

Koozali SME Server software uses a web-based interface to enable easy administration from any web browser anywhere in the world, very securely protected and accessible remotely via SSH or a VPN, based on strict ACL's and firewall settings.

1.1.2      File and Print Sharing

The core of any network environment is easy and simple access to shared files and printers. Koozali SME Server software allows for the easy sharing of files and printers for Windows and Macintosh clients. The "Information Bay" (i-bay) feature provides easy and convenient information storage and retrieval by multiple groups via web, FTP, or file sharing.

1.1.3      Internet Connection

Small business customers are looking for a simple solution that works with different types of connections to the Internet. Koozali SME Server automates the process of connecting to the Internet. Just connect the server and supply your ISP account information. The server solution acts as a gateway for your entire network and requires no additional client software and minimal configuration. Users can immediately start browsing the Web, using email, and access other Internet services.

1.1.4      Email

With the pervasiveness of email, small businesses increasingly need to support email for all their employees. Koozali SME Server provides a secure reliable email server and allows easy creation of individual and group addresses. For greater versatility, it works with any mail client that uses the industry-standard IMAP, POP3, and SMTP protocols. Secure webmail allows users to access the server from a web browser anywhere on the Internet, to send and receive e-mail via an encrypted SSL link.

1.1.5      Antivirus and Antispam

Koozali SME Server comes default with Antivirus and Antispam mechanisms based on well known and industry standard ClamAV Antivirus and SpamAssassin products.to reduce the amount of possible unsolicited mail, Koozali SME Server fully automatically updates Antivirus signatures, and Antispam rules on a daily bases.

1.1.6      Firewall

Security is always a priority when a company starts using the Internet. Koozali SME Server offers a multi-layer architecture, protecting the external interface through packet-filtering and service restriction. It offers selective address or port binding, application-level access control lists, and protects the internal network from any intrusion. For SecureOffice, Sme Server is run in "server only" mode and has no internal network, since LAN functionality is provided by SecureOffice..

1.1.7      Remote Access

Businesses with remote or branch sites or telecommuting employees require remote access to their email and to other resources on the local network. SME Server provides multiple tools such as webmail access to email using any browser, PPTP (for secure client-to-server VPNs) and open secure shell (SSH) to provide encrypted access to server resources for administrators.

1.1.8      Directory Services

Companies typically require a central directory of email addresses that all users can access. Koozali SME Server features a robust directory service that can be used by most email clients (including Outlook, Outlook Express, and Netscape Communicator). This feature is implemented using the industry-standard LDAP protocol.

1.1.9      Web Hosting

Small businesses also need a secure and reliable web presence and an intranet to communicate with employees. Koozali SME Server includes the Apache web server, the most commonly used web server of the Internet. The content can be easily edited and updated from desktop clients (including dynamic content). It also supports the use of Secure Sockets Layer (SSL) connections for e-commerce.

1.1.10  Raid

Koozli SME Server software supports software RAID 1, 5 and 6, for security and redundancy of Terabytes of data.

1.1.11  Backup

Koozali SME Server provides flexible backup methods such as USB Disk backup, tape backup or backup to a remote server. Backups can be fully automated and can include both full and incremental backups.

1.1.12  Automatic Updates

Almost all of the packages that Koozali SME Server includes from upstream vendors are included unmodified. The purpose of doing so is to take advantage of the stability that comes from the huge user base that uses these packages, for security, and to allow automatic updates as soon as an update is available from the upstream vendor.

1.1.13  Extensible

The Koozali SME Server architecture explicitly supports developers by making it easy to drop software into place and remove it without needing to modify existing files. Extensions can easily add new features and there are dozens of them freely available. A few popular examples are Owncloud, Asterisk VOIP PBX, Wordpress, Mediawiki, Zarafa, Pydio and OsCommerce.

2      Install SME Server Virtual Machine

Prior to installing any virtual machines on SecureOffice, it is recommended to first get the virtual machine working on your PC.

Download free VmWare Workstation.

Install VmWare workstation on your PC. Additional installation instructions are located here.

The following instructions can be used to create Virtual Machines (VMs) under Windows, Linux or SecureOffice / VmWare Workstation once the licensed VmWare Workstation package is installed on SecureOffice.

2.1    Create SME Server Virtual Machine

Installation of SME Server 9.2, x86_64 is used as an example. An Overview of SME Server features is located here and here

Download SME Server 9.2 x86_64 DVD ISO from here.

Start VmWare Workstation on your PC. The main screen will appear, as shown below. Note that the version may not match the figures below, since VmWare Workstation is updated on a regular basis.

Figure 1: VmWare Workstation Main Screen

Select "Create New Virtual Machine". The select installation source window will appear, as shown below.

Figure 2: VmWare Workstation Select Installation Source

Select "Installer disc image file (iso), browse to and select the SME Server ISO file downloaded above. Click "Next". The "Select Operating System" window will appear, as shown below.

Figure 3: VmWare Workstation Select Guest Operating System

Normally, VmWare Workstation will detect the operating system correctly, as it did in Figure 3. If the operating system is not detected properly, the operating system and version will have to be manually selected. Press "Next". The "Select Name and Location" window will appear, as shown below.

Figure 4: VmWare Workstation Select VM Name and Location

Type a name for your virtual machine. Browse to a location to create the virtual machine. Create a new directory if necessary.

Once the virtual machine is created and configured, if required, it (entire directory) can be copied to the SecureOffice file system, to be hosted by SecureOffice. The virtual machine created on your PC will not be needed after this, unless it is used to create the SecureOffice boot disk and can be deleted.

Press "Next". The "Specify Disk Characteristics" window will appear, as shown below.

Figure 5: VmWare Workstation Select Disk Characteristics

The size of the disk and whether the disk is stored as a single or multiple files are user preferences. The above settings are reasonable to start with and, the disk size can be increased or decreased later, if desired. Click "Next". The VmWare Workstation "Ready to Create Virtual Machine" window will appear, as shown below.

Figure 6: VmWare Workstation Ready to Create VM

Press "Customize Hardware". The customize hardware window will appear, as shown below.

Figure 7: VmWare Workstation Configure Hardware

Choose the desired memory size and number of processors, a user preference. 2GB of memory and 2 processors are recommended. For the network, select "Bridged", "Replicate physical network connection state", "Connect at power on". Press "Close". This will return you to the "Create VM window Figure 6). Press "Finish". The VmWare Workstation main window (Figure 1) will appear, with the new virtual machine selected. Select "Play Virtual Machine".

3      Configure SME Server Virtual Machine

3.1                SME Server First Boot Configuration

Immediately after entering "Play Virtual Machine" after installing VmWare Workstation and creating the SME Server VM (previous section), SME Server will boot for the first time.

From within the virtual machine console window, perform the following steps, selecting (cursor keys) the operation before pressing "enter":

  • Select whether to test the boot media or not, press enter
  • select "Install or Upgrade Existing System" (default).
  • Select installation language.
  • Select your keyboard type.
  • Select your time zone.
  • Select "write changes to disk". Some packages will install.
  • Select "reboot"
  • Select "no restore from backup"
  • Choose administrator password, confirm.
  • Choose domain name (your SecureOffice domain)
  • Choose "e1000" for Ethernet.
  • Choose a static IPv4 address on your LAN conforming to the IP address numbering plan. It is assumed the purpose of this virtual machine is to host internet services, which is why a static LAN address is required. This allows SecureOffice (nginx or firewall) to be configured to forward services for this host.
  • Choose netmask. The netmask must be the same as SecureOffice (default 255.255.255.0, as set in "/etc/config/network", for LAN interface).
  • Choose "Server Only" mode.
  • Choose gateway. The Gateway must be the address of the SecureOffice LAN (default 192.168.10.1, as set in "/etc/config/network", for LAN interface).
  • Choose "No DHCP Server"
  • Leave DNS blank.
  • Choose "Activate Changes". Many packages will be installed and SME Server will reboot. After this step, SME Server has all the latest updates installed, ready to host websites, be an email and file server for your domain.

There is a wealth of free services and applications that can be installed on SME Server. A list is here. General instructions for installing additional software is available here.

While within the VmWare guest operating system window, press "CTL+ALT" at any time to return mouse and keyboard control to your PC.

3.2                Test Virtual Machine on PC

Now that your virtual machine has been created and, optionally additional applications / services installed, it can be tested on the PC which was used to create it.

After the virtual machine was created, The VmWare Workstation window will be at a login command prompt. Enter "root" as the user name and the admin password chosen during first boot to login. The VmWare window will display the SME Server command prompt, as shown below.

Figure 8: SME Server Command Prompt

Hint: If console copy and paste is required, it is best to login to your virtual machine with PuTTY using the IP address and password chosen during VM creation.

Using a web browser, enter the IP address of your virtual machine. The browser will display the default (unconfigured) SME Server website, as shown below.

Figure 9: SME Server Default Website

Using a web browser, enter the IP address of your virtual machine plus "/server-manager" and login with user "admin" and the password chosen during first boot of the virtual machine. The browser will display the main administration page of SME Server, as shown below.

Figure 10: SME Server Administration Page

SME Server is now ready for configuration as an email server and provide web hosting for your domains. Installation of additional services / applications, web site files and final configuration can be done using the VM on the installation PC, or after the VM has been copied to the SecureOffice file system, SecureOffice VmWare Workstation installed and configured. It is suggested to do and test as much as you can on the installation PC, to maximize usage time for trial licenses.

3.3                Further SME Server Configuration

It depends on individual user needs to determine requirements for their server / services. SME Server, in addition to being very stable, well maintained, easy to use and feature rich is well documented, which is why it is recommended.

HowTo's for basic SME Server administration tasks, including email setup are located here and here. If hosting an email server, insure that the DDNS provider pre-requisites pertaining to email have been met.

Your website, unless you are porting an existing one, or building one from scratch will require a CMS (Content Management System). Instructions for installing and configuring a Wordpress web site is located here. Instructions for installing and configuring a Xoops web site (such as this one) are located here. There are many other CMS possibilities such as e-commerce (online stores) that can be found by searching the internet and research. Another option is hiring a consultant to create your website.

One crucial SME Server package that should be installed is PhpMyAdmin which provides a web based GUI for database management, required for installation and maintenance of any modern website CMS (Content Management System). Follow the PhpMyAdmin installation instructions.

It is possible to complete the following SME Server configuration using the VM on your local PC, rather than on SecureOffice after VmWare Workstation is installed. If you choose to do so, it is necessary to alter your PC and router firewalls to enable / forward the necessary service ports.

3.4                Install VmWare Tools on SME Server VM

VmWare Tools enhances the functionality and performance of virtual machines and host interaction. For example, without VmWare Tools installed, shared directories between the host (SecureOffice) and the VM may not function (distribution specific).

It is recommended to install VmWare tools while the VM is still on the PC which was used to create it.

A default installation of SME Server is missing the "fuse.x86_64" and "fuse-libs" packages required by VmWare Tools. They must be installed prior to installing VmWare Tools.

At a command prompt within the VM, enter "yum install fuse.x86_64 fuse-libs" and follow the prompts.

To install VmWare Tools on SME Server, follow these steps.

  • From the Windows VmWare player application navigate to "Player->Manage->Install Vmware Tools". At the bottom of the VmWare player window instructions will appear regarding mounting the virtual CDROM.
  • From a command prompt within the VM enter "mkdir -p /mnt/dvd" to create a mount point for the VmWare Tools virtual CDROM.
  • At VM command prompt enter "mount /dev/sr0 /mnt/dvd; ls /mnt/dvd" to mount and display the CDROM directory. If you have more than one CDROM in your VM, you will have to identify which device to use instead of "/dev/sr0".
  • The directory listing of "/mnt/dvd" will contain a file called "VMwareTools-VERSION.tar.gz" where "VERSION" varies. Copy this file to "/tmp" and change directory by entering "cp /mnt/dvd/ VMwareTools-VERSION.tar.gz /tmp; cd /tmp".
  • Decompress VmWare Tools by entering "tar -zxvf VMwareTools-VERSION.tar.gz; cd /vmware-tools-distrib". This also changes directory to the VmWare Tools installation directory.
  • Start the VmWare Tools installation by entering "./ vmware-install.pl" and choosing default answers to all questions. VmWare tools will install.
  • At the end of installation, an error may display: "Unable to start services for VMware Tools". If this happens, it is due to VmWare tools using an obsolete startup method for the "thinprint" service. To fix this, enter "mv /etc/init/vmware-tools-thinprint.conf /etc/init/vmware-tools-thinprint.conf_notused" and then restart VmWare Tools by entering "/etc/vmware-tools/services.sh start". All services should now start with "OK" status.
  • Enable vmware-tools autostart by entering "ln -sf /etc/vmware-tools/services.sh /etc/rc7.d/S90vmware-tools-services" at a SME Server command prompt.

3.5                Install SecureOffice VmWare Workstation

Now that your virtual machine has been created, it can be copied over to SecureOffice and the SecureOffice / VmWare Workstation application installed by following the instructions starting at Create VM Directory on SecureOffice.

The following SME Server configuration takes place after your virtual machine is installed on SecureOffice.

3.5.1      Share SecureOffice Folders With VM

Shared folder support is required for SecureOffice and VM's to share SSL certificates, so when certificates are updated (ideally, automatically by LetsEncrypt), the updated certificates are immediately available for the VM's and any secure (https) websites they host.

Shared folders are also useful as a mechanism for transferring files between SecureOffice and VM's.

This step must be performed when the VM is installed and running on SecureOffice, since the correct paths will not exist on your PC.

To enable a shared folder, using the SecureOffice VmWare player GUI (SecureOffice Xorg console) , navigate to "Player->Manage->Virtual Machine Settings->Options->Shared Folders". Select "Always Enabled": and press "Add". The "Add Shared Folder" window will appear as shown below.

Figure 11: VmWare Add Shared Folder

Enter the "Host Path" and "Name" as shown above, press "Next". The shared directory will be "/tmp" on SecureOffice and "/mnt/hgfs/Temp" within your VM. This directory will be used for file transfer between SecureOffice and the VM.

Press "Add" again. Enter "/etc/ssl/domains" as the "Host Path". Enter "/domains" as the "Name", press "Next". The shared directory will be "/etc/ssl/domains" on SecureOffice and "/mnt/hgfs/domains" within your VM. This directory is used for sharing SSL certificates from SecureOffice with VM's.

3.5.2      Link VM and SecureOffice SSL Certs

This step will be deferred until final "Securing Your Site" instructions. The following is informational.

SecureOffice SSL certificates are stored (and automatically updated) in directory "/etc/ssl/domains" with file names "<yourdomain>.crt" and "<yourdomain>.key". VmWare Workstation (shared directories) maps SecureOffice directory "/etc/ssl/domains" which, if shared folders have been configured as above, will appear as directory "/mnt/hgfs/domains" within your VM.

The certificate files "/mnt/hgfs/domains/<yourdomain>.crt" and "/mnt/hgfs/domains/<yourdomain>.key" must (within the VM) be linked to whatever directory your VM expects SSL certificates to reside, in addition to whatever configuration your VM requires for specifying the file names of SSL certificate files.

3.5.3      Configure Domain Email

If your ISP blocks port 25, you will need a service to forward (proxy) domain emails to an alternate port, configure the firewall to open this port and alter your domain MX records to point to the email reception proxy. If port 25 is not blocked by your ISP (may not be if you have a static IP address), an email proxy is not necessary.

An excellent and inexpensive (can be free) service / email proxy for your domain emails is MX GuardDog, which also provides MX backup (queue your emails when your site is offline), excellent spam filtering as a bonus. MacWorld has a review of MX GuardDog here. MX GuardDog can be evaluated, signed up for and configured here. MX GuardDog can be free at the cost of placing a link to them on your site. If MX GuardDog is not chosen, you will have to search the internet for alternatives. The ability to forward emails to an alternate port is crucial.

Once you have an email proxy account configured, your domain MX records must be altered to point to the email proxy, as opposed to your domain. The method depends on your DDNS provider, if SecureOffice pre-requisites in the area of Ability to Manage Domain MX Records was adhered to in selecting a DDNS provider. If not, another DDNS provider must be chosen.

3.5.4      Forward WAN Service Ports to VM

It is assumed that you will be running a website and email server using a virtual machine. Omit any settings for services that you are not running.

By following port forwarding instructions, add the following port forwards.

Regarding email reception. Your ISP may have blocked port 25 to prevent spamming. Most ISP`s provide an alternate port for email transmission. You may need an email relay / proxy service for email reception. This determines whether the "Allow-smtp" (ISP port 25 open) or "Allow-smtp-proxy" (ISP port 25 blocked) firewall entries are used.

If "Allow-smtp-proxy" alternate email reception proxy / relay service is required, since you are running a domain email server, it is required that your DDNS provider have the ability to alter MX records and redirect domain email to the proxy email receiver which send received emails to your email server using an alternate port. This is discussed in SecureOffice prerequisites, section Ability to Manage Domain MX Records. The alternate port must be forwarded to your email server, port 25 on the firewall:

Name

Protocol

Ext Zone

Ext port

Int Zone

Int IP Addr

Int port

Notes

 

 

 

 

 

 

 

 

Allow-smtp

tcp

wan

25

lan

Email Server (VM) LAN Address

25

Only if ISP does not block port 25 incoming

Allow-smtp-proxy

tcp

wan

Port that your proxy email receiver forwards email to

lan

Email Server (VM) LAN Address

25

Only if ISP blocks port 25 incoming

Allow-imaps

tcp

wan

993

lan

Email Server (VM) LAN Address

993

Secure IMAP

 

 

 

 

 

 

 

 

 

Table 1: Email Port Forwards

After these port forwards are entered and saved, from a console, enter "/etc/init.d/firewall restart".

3.5.5      Forward http(s) Services to VM

Two SecureOffices options exist for forwarding web services (http, https) traffic to other servers (including virtual machines): using the SecureOffice nginx webserver (preferred, since can steer subdomains to various servers) or port forwarding (discouraged, since all requests must go to same server).

For port forwarding, follow port forwarding instructions, add the following port forwards. When done, enter "/etc/init.d/firewall restart"

 

Name

Protocol

Ext Zone

Ext port

Int Zone

Int IP Addr

Int port

Notes

 

 

 

 

 

 

 

 

Allow-http

tcp

wan

80

lan

Webserver (VM) LAN Address

80

Running Webserver on VM or other computer on LAN. Unnecessary if nginx used for domain web services.

Allow-https

tcp

wan

443

lan

Webserver (VM) LAN Address

443

Secure Website access. Unnecessary if nginx used for domain web services

 

Table 2: Webserver Port Forwards

To use nginx, copy "/etc/nginx/vhosts/example.conf" to "/etc/nginx/vhosts/<your site>.conf", and follow the instructions within, uncommenting, change "example.com" to "<yoursite URL>" (without www) and changing the IP address to match the IP address of your VM..

# Change example.com to your_site DNS name

# Change IP address (192.168.10.2) to address of virtual machine server on LAN.

#

# Uncomment (remove #) everything below

# server {

# listen 80;

# listen [::]:80;

# server_name example.com *.example.com;

# location /.well-known/acme-challenge/ {

# default_type "text/plain";

# allow all;

# alias /var/letsencrypt/;

# }

# location / {

# return 301 https://$host$request_uri;

# }

# }

# server {

# listen 443;

# listen [::]:443;

# server_name example.com *.example.com;

#

# location / {

# proxy_set_header Host www.example.com:$server_port;

# # Allow downstream sites to know who's connecting

# proxy_set_header X-Forwarded-For $remote_addr;

# proxy_pass $scheme://192.168.10.2:$server_port;

# }

# }

Figure 12: Nginx Configuration

Enter "/etc/init.d/nginx restart" to have the new settings take effect.

At this point, your virtual machine should be running and ready to configure services. If SME Server-9 was chosen, complete the Final SME Server Configuration steps below.

3.6                Final SME Server Configuration

3.6.1      Access Domain Website

At this point, enter <www.<yourSecureOfficedomain> in a web browser address bar. If all is well, you should see the starter web page of your website from SME Server (Figure 9). Your website can also be accessed from the local LAN by entering "your_server_LAN_address", configured during SME first boot.

3.6.2      Access SME Server Administration GUI

The SME Server administration web GUI can be accessed from your local LAN by entering "<your_VM_LAN_address>/server-manager", login with user "admin" and the password chosen during first boot of the virtual machine. The browser will display the main administration page of SME Server (Figure 10).

3.6.3      Configure Email Services

It is assumed that the Firewall and Configure Domain Email steps are complete. This means that email for your domain is forwarded to SME Server.

3.6.4      Configure SME Server Users and Groups

To add users and groups, using a browser on your local LAN, enter "<your_VM_LAN_address>/server-manager", login with user "admin" and the password chosen during first boot of the virtual machine. The browser will display the main administration page of SME Server (Figure 10). In the left pane, select "Users" for user administration and "Groups" for group administration.

A default installation of SME Server has one user: "admin" with the password chosen at first boot and no groups. Additional users must be created.

Each user is assigned an email address of the form "user@yourdomain". Each user account includes separate, password-protected email and file storage areas. Pseudonyms (aliases) of the form "FirstName.LastName" and "FirstName_LastName" are automatically created for each user. Each user can login with their userID or pseudonyms and receive emails at the following email addresses:

After users are created, passwords must be assigned to each user. After creating users, it is suggested to create two groups, to differentiate users between administrators with full access and clients with restricted access. It is suggested the groups be named "administrators" and "clients". Users can then be assigned to their corresponding group.

To create users and groups, read and follow the SME Server administration manual regarding users and groups.

3.6.5      Configure SME Email Server

Using the SME Server administration GUI, select "E-mail". The E-mail configuration page will display, as shown below.

Figure 13: SME Server Email Configuration

Enter the following for basic email settings:

  • POP3 server access: Allow access only from local networks
  • IMAP server access: Allow private and public (secure IMAPS)
  • Webmail access: Allow HTTPS (secure)
  • Virus scanning: Enabled
  • Spam filtering: Enabled
  • Executable content blocking: Enabled, need to select which types to block.
  • Email retrieval mode: Standard (SMTP)
  • SMTP authentication: Allow SSMTP (secure)
  • Email to unknown users: Reject
  • Address of internal mail server: leave blank
  • Address of internet providers mail server: If your ISP blocks port 25, this is the IP address and port of your ISP's outgoing email server of the form "aaa.bbb.ccc.ddd:port". If your ISP does not block port 25, leave blank.

If a more complex email service or other protocols are required, read and follow the SME Server administration manual regarding E-mail.

3.6.6      Test Domain Email Using Webmail

Users and group assignments must exist for each user of your domain. Email addresses will be of the form "user@yourdomain".

The SME Server webmail GUI can be accessed using a browser from your local LAN by entering "<your_VM_LAN_address>/webmail", or from the internet by entering "yourdomain/webmail" if remote access has been enabled. Login with a valid email user ID and the password assigned when the user was created. The main SME Server webmail page will display, as shown below:

Figure 14: SME Server WebMail GUI

Create and sent a test email (New Message) to another email address on a different domain, such as a Gmail account. The email should show up in the destination email account. If there are problems, use the troubleshooting steps outlined in the above regarding "E-mail" link.

From another email account (such as Gmail), compose and send an email to "user"@ yourdomain", where "user" is the user logged into webmail. The email should arrive and be displayed in the SME Server webmail GUI.

Note that it may take some time for emails to be received due to network delays and server queues, sometimes as long as an hour.

Fix any problems before proceeding to the next step.

3.6.7      Configure Email Client on PC

SME Server has a Wiki article regarding configuring E-mail clients such as MS Outlook. Follow the guide and configure your email for a SME Server account to send and receive email using SME Server.

Using the SME Server account on your email account, compose a test email to another email address on a different domain, such as a Gmail account. The email should show up in the destination email account. If there are problems, use the troubleshooting steps outlined in the above regarding "E-mail" link.

From another email account (such as Gmail), compose and send an email to "user"@ yourdomain, where "user" is the user previously logged into webmail. The email should arrive and be displayed in your email client.

Fix any problems before proceeding.

4      Troubleshooting SME Server

If the issue is SME Server startup, or network connectivity issues, refer to Troubleshooting Virtual Machines.

Any other issues are SME Server specific and will require an internet search to narrow and resolve the problem.

Technologies Used:

Design by: XOOPS UI/UX Team