⇤ ← Revision 1 as of 2007-10-30 18:17:53
2987
Comment: initial version
|
3140
SMTP and SSL
|
Deletions are marked like this. | Additions are marked like this. |
Line 48: | Line 48: |
'''TLS''' (on port 25) or '''SSL''' (on port 25) must be used. | '''TLS''' (on port 25) must be used. That uses SSL encryption. Please note, that at our site the use of SSL instead of TLS for SMTP is not possible, as this is not supported and officially also not recommended. |
Configuration of Mail Readers for the DESY Mail Servers in Zeuthen
General Remarks
The centrally installed mail clients on Linux/UNIX and Windows are usually preconfigured to use the correct settings. As users can override these settings and recommended settings may change it is a good advice to check whether your personal mail settings are in agreement with the values given below
Incoming Mail
Incoming mail is accessed using the
IMAP protocol on the server
mail.ifh.de (please note that a few users have to use mail1.ifh.de instead, they got an information from the computing center on that fact).
Authentication can be done using
GSSAPI (Kerberos5) or by
Plain authentication giving the (AFS) username and password
If password authentication is chosen,
TLS (on port 143) or SSL (on port 993) must be used.
Outgoing Mail
All outgoing mail is sent using the
SMTP protocol and one of the mail servers
mail.ifh.de (mailz2.desy.de) or mail1.ifh.de (mailz.desy.de) must be used as all other outgoing mail traffic (e.g. sent from a notebook to a remote provider) is blocked. The use of mail.ifh.de is preferred, as mail1.ifh.de is seen only from inside DESY.
SMTP Authentication
- is not required but it can be used. It has to be used if mail from a remote host (e.g. from a notebook on a conference) needs to be sent via our mail server to a recipient outside DESY. This is called relaying and normally not allowed. The authentication can be done using
GSSAPI (Kerberos5) or by
Plain authentication giving the (AFS) username and password
If password authentication is chosen,
TLS (on port 25) must be used. That uses SSL encryption.
Please note, that at our site the use of SSL instead of TLS for SMTP is not possible, as this is not supported and officially also not recommended.
Address Books
The centrally managed address books are using the LDAP protocol. To use it the name of a server and at least the search base have to be given. The following address books are useful (access is limited to DESY and to some High Energy Physics Institutes):
server name |
search base |
remarks |
ldap.desy.de |
o=DESY,c=de |
the official address book |
ldap.ifh.de |
o=DESY,c=de |
for internal use only |
ldap.cern.ch |
o=CERN,c=ch |
the CERN address book |
The search base o=DESY Zeuthen is not updated any longer and will disappear, do not use it!
Your Mail Address
In all mails the preferred email address Firstname.Lastname@desy.de should be used.
Please note that the default on some unmaintained systems is accountname@hostname.ifh.de which does not work. Mail clients allow you to override that default From: address to use the form given above.