Administrator's Guide - Kerio Software Archive

Administrator's Guide - Kerio Software Archive Administrator's Guide - Kerio Software Archive

download.kerio.com
from download.kerio.com More from this publisher
11.07.2015 Views

Chapter 6 ServicesMax. number of concurrent connectionsThis option limits the number of concurrent connections to the selected service. Toomany concurrent connections may cause the server overload which can subsequentlylead to its failure. This is also the main idea of the so-called DoS (Denial of Service) attackwhere the attacker tries to overload the server by too many concurrent connections. Settingthe limit for the number of connections therefore helps to prevent the DoS (Denialof Service) attacks against your server.Warning: When you plan to limit the number of connections, consider the number ofserver users.6.2 Important NotesNon-secure and secure versions of the same service act as two separate services. This meansthat there are two different ways of accessing the same server and the user (client) can choosewhich one to use. For security and privacy protection reasons we strongly recommend usinga secure version of any communication means. However, this must be supported by clientsoftware.IMAP and HTTP access the same IMAP account in the same way. These two services can bothbe used (one at a time) without any limitations or risk. POP3 and IMAP/HTTP access thesame physical account but POP3 can only retrieve messages stored in the INBOX folder, as itcannot “see” other folders. All incoming messages are stored in the INBOX folder. POP3 alsodownloads all messages from the server to the client machine. This can lead to the followingcomplications:1. If a user logs into the account using POP3 first, all messages from the INBOX folder willbe downloaded to his/her machine. After logging in using IMAP, these messages will nolonger be at the server.2. If a user logs into the account using IMAP first (or uses HTTP) and moves messages toa folder other than INBOX, these messages will not be downloaded later using POP3.3. If a user has set rules such that all messages are moved to different folders, no messageswill be accessible via POP3.6.3 TroubleshootingWhen solving problems regarding services, logs of the traffic between the server and clientsmight be helpful. To log relevant information, enable a corresponding option under Logs →Debug in the Kerio Administration Console:1. In the Kerio Administration Console, go to the Logs section and select the Debug log.2. Right-click on the log pane to open a context menu, and select Messages.3. In the Logged Information dialog just opened, enable logging for the particular service (seefigure 6.5).60

6.3 TroubleshootingFigure 6.5The Debug log settings4. Confirm changes by OK.The following types of services are associated with the Debug log options:SMTPIf any problems arise in the communication between the SMTP server and a client, it ispossible to use the SMTP Server and SMTP Client options.POP3When problems with POP3 server arise, enabling the POP3 Server option might be helpful.IMAPWhen problems with IMAP server arise, enabling of the IMAP Server logging might behelpful.NNTPWhen problems with NNTP server arise, a log that can be enabled by the NNTP Serveroption might help.LDAPWhen problems with LDAP server arise, a log that can be enabled by the LDAP Serveroption might help.HTTP• HTTP Server — this option enables logging of HTTP traffic on the server’s side.• WebDAV Server Request — this option enables logging of queries sent from the Web-DAV server. It can be used in MS Entourage or Apple Mail where problems with Exchangeaccounts arise.• SyncML Synchronization — this option enables log that stores information on synchronizationof calendars and contacts over the SyncML Plug-in. The log may be helpfulwhen solving problems with synchronization over the Kerio Synchronization Plug-in.61

Chapter 6 ServicesMax. number of concurrent connectionsThis option limits the number of concurrent connections to the selected service. Toomany concurrent connections may cause the server overload which can subsequentlylead to its failure. This is also the main idea of the so-called DoS (Denial of Service) attackwhere the attacker tries to overload the server by too many concurrent connections. Settingthe limit for the number of connections therefore helps to prevent the DoS (Denialof Service) attacks against your server.Warning: When you plan to limit the number of connections, consider the number ofserver users.6.2 Important NotesNon-secure and secure versions of the same service act as two separate services. This meansthat there are two different ways of accessing the same server and the user (client) can choosewhich one to use. For security and privacy protection reasons we strongly recommend usinga secure version of any communication means. However, this must be supported by clientsoftware.IMAP and HTTP access the same IMAP account in the same way. These two services can bothbe used (one at a time) without any limitations or risk. POP3 and IMAP/HTTP access thesame physical account but POP3 can only retrieve messages stored in the INBOX folder, as itcannot “see” other folders. All incoming messages are stored in the INBOX folder. POP3 alsodownloads all messages from the server to the client machine. This can lead to the followingcomplications:1. If a user logs into the account using POP3 first, all messages from the INBOX folder willbe downloaded to his/her machine. After logging in using IMAP, these messages will nolonger be at the server.2. If a user logs into the account using IMAP first (or uses HTTP) and moves messages toa folder other than INBOX, these messages will not be downloaded later using POP3.3. If a user has set rules such that all messages are moved to different folders, no messageswill be accessible via POP3.6.3 TroubleshootingWhen solving problems regarding services, logs of the traffic between the server and clientsmight be helpful. To log relevant information, enable a corresponding option under Logs →Debug in the <strong>Kerio</strong> Administration Console:1. In the <strong>Kerio</strong> Administration Console, go to the Logs section and select the Debug log.2. Right-click on the log pane to open a context menu, and select Messages.3. In the Logged Information dialog just opened, enable logging for the particular service (seefigure 6.5).60

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!