$$Surgemail Security$$

||include||style.htm|| ||include||body.htm|| ||ifdef||message||

||message||

||endif||

$$Security$$ | ||ifequal||displaymode||advanced|| Switch to: ||else|| Switch to: ||endif||

> $$Lockdown of management interfaces and security related settings$$.

$$Management$$ : | $$For extra safety, remote administration can be limited by IP address$$.

> ||include||table.htm||
> ||lang_get(g_admin_ip_desc)||
> ||lang_get(g_admin_localhost_desc)||
> ||ifequal||displaymode||advanced||
> ||lang_get(g_tellmail_ip_desc)||
> ||lang_get(g_admin_guesses_desc)||
> ||lang_get(g_admin_readonly_desc)||
> ||lang_get(g_alias_login_disable_desc)||
> ||lang_get(g_atrest_all_desc)||
> ||lang_get(g_atrest_api_desc)||
> ||lang_get(g_atrest_crazy_desc)||
> ||lang_get(g_atrest_enable_desc)||
> ||lang_get(g_manager_username_desc)||
> ||endif|| ||ifequal||displaymode||advanced||
> ||else||
> ||endif|| ||ifdef||settings_saved||$$settings saved$$||endif|| ||ifequal||displaymode||advanced|| ($$switch back to$$ $$standard$$ $$mode$$) ||else|| ( 9 $$additional settings in$$ $$advanced$$ $$mode$$) ||endif||

SSL : | SSL provides for secure communication between mail client / web browser and mail server. A self signed certificate is created by surgemail, most clients will generate a warning to this effect. You need to purchase a certificate from a Certification Authority to avoid this warning.

> ||include||table.htm||
> $$SSL Certificates$$
> ||lang_get(g_ssl_per_domain_desc)||
> ||lang_get(g_ssl_allow_desc)||
> ||lang_get(g_ssl_require_desc)||
> ||ifequal||displaymode||advanced||
> ||lang_get(g_ssl_require_login_desc)||
> ||lang_get(g_ssl_require_out_desc)||
> ||lang_get(g_ssl_try_out_desc)||
> ||lang_get(g_ssl_allow_imap_desc)||
> ||lang_get(g_ssl_require_imap_desc)||
> ||lang_get(g_letsencrypt_desc)||
> ||lang_get(g_ssl_allow_fix_desc)||
> ||lang_get(g_ssl_auto_desc)||
> ||lang_get(g_ssl_ciphers_desc)||
> ||lang_get(g_ssl_ciphers_add_desc)||
> ||lang_get(g_ssl_ciphers_web_desc)||
> ||lang_get(g_ssl_disable_desc)||
> ||lang_get(g_ssl_disable_des_desc)||
> ||lang_get(g_ssl_disable_port25_desc)||
> ||lang_get(g_ssl_disable_renegotiation_desc)||
> ||lang_get(g_ssl_disable_sslv2_desc)||
> ||lang_get(g_ssl_disable_sslv3_desc)||
> ||lang_get(g_ssl_disable_tlsv1_desc)||
> ||lang_get(g_ssl_disable_tlsv1_1_desc)||
> ||lang_get(g_ssl_disable_tlsv1_2_desc)||
> ||lang_get(g_ssl_disable_web_desc)||
> ||lang_get(g_ssl_dmalloc_desc)||
> ||lang_get(g_ssl_fips_desc)||
> ||lang_get(g_ssl_guess_domain_desc)||
> ||lang_get(g_ssl_honor_desc)||
> ||lang_get(g_ssl_lets_exclude_desc)||
> ||lang_get(g_ssl_lets_path_desc)||
> ||lang_get(g_ssl_lets_slave_desc)||
> ||lang_get(g_ssl_perfect_desc)||
> ||lang_get(g_ssl_require_in_desc)||
> ||lang_get(g_ssl_require_smtp_desc)||
> ||lang_get(g_ssl_require_web_desc)||
> ||lang_get(g_ssl_retry_seconds_desc)||
> ||lang_get(g_ssl_sha1_sign_desc)||
> ||lang_get(g_ssl_test_fail_desc)||
> ||lang_get(g_ssl_try_from_desc)||
> ||lang_get(g_ssl_try_not_desc)||
> ||lang_get(g_ssl_verify_desc)||
> ||lang_get(g_ssl_warn_desc)||
> ||lang_get(g_ssl_warn_ignore_desc)||
> ||lang_get(g_ssl_warn_text_desc)||
> ||lang_get(g_sstat_disable_desc)||
> ||endif|| ||ifequal||displaymode||advanced||
> ||else||
> ||endif|| ||ifdef||settings_saved||$$settings saved$$||endif|| ||ifequal||displaymode||advanced|| ($$switch back to$$ $$standard$$ $$mode$$) ||else|| ( 42 $$additional settings in$$ $$advanced$$ $$mode$$) ||endif||

DomainKeys : | DomainKeys is a cryptographic method that allows a receiving server/client to verify that the From/Sender header was accurate and not forged.

> ||include||table.htm||
> $$Create DomainKeys for signing outgoing messages$$
> ||lang_get(g_dkim_check_desc)||
> ||lang_get(g_dkim_sign_desc)||
> ||ifequal||displaymode||advanced||
> ||lang_get(g_dkim_allow_desc)||
> ||lang_get(g_dkim_alt_domains_desc)||
> ||lang_get(g_dkim_alt_name_desc)||
> ||lang_get(g_dkim_exclude_desc)||
> ||lang_get(g_dkim_headers_desc)||
> ||lang_get(g_dkim_nogateway_desc)||
> ||lang_get(g_dkim_only_desc)||
> ||lang_get(g_dkim_return_desc)||
> ||lang_get(g_dkim_selector_desc)||
> ||lang_get(g_dkim_skip_desc)||
> ||lang_get(g_dmarc_enforce_desc)||
> ||lang_get(g_dmarc_none_quarantine_desc)||
> ||lang_get(g_dmarc_use_desc)||
> ||lang_get(g_dmarc_whitelist_desc)||
> ||endif|| ||ifequal||displaymode||advanced||
> ||else||
> ||endif|| ||ifdef||settings_saved||$$settings saved$$||endif|| ||ifequal||displaymode||advanced|| ($$switch back to$$ $$standard$$ $$mode$$) ||else|| ( 14 $$additional settings in$$ $$advanced$$ $$mode$$) ||endif||

$$Logins anti Hacking$$ : | $$User login attempts using POP, IMAP or web interface$$.

> ||include||table.htm||
> ||lang_get(g_bad_login_allow_desc)||
> ||lang_get(g_bad_login_ip_allow_desc)||
> ||lang_get(g_bad_login_mins_desc)||
> ||lang_get(g_hacker_max_desc)||
> ||lang_get(g_hacker_poison_desc)||
> ||lang_get(g_safe_smtp_desc)||
> ||lang_get(g_safe_warning_desc)||
> ||lang_get(g_safe_country_desc)||
> ||lang_get(g_spam_user_max_desc)||
> ||lang_get(g_spam_from_max_desc)||
> ||lang_get(g_user_send_warning_desc)||
> ||lang_get(g_user_send_ip_desc)||
> ||lang_get(g_create_pass_digit_desc)||
> ||lang_get(g_create_pass_recheck_desc)||
> ||lang_get(g_hack_touser_desc)||
> ||lang_get(g_spf_enforce_local_desc)||
> ||lang_get(g_from_noforgeme_desc)||
> ||ifequal||displaymode||advanced||
> ||lang_get(g_bad_login_dumb_desc)||
> ||lang_get(g_bad_login_ip_ignore_desc)||
> ||lang_get(g_bad_login_lockout_desc)||
> ||lang_get(g_create_pass_recheck_text_desc)||
> ||lang_get(g_recent_bypass_desc)||
> ||lang_get(g_tcp_proxy_ip_desc)||
> ||endif|| ||ifequal||displaymode||advanced||
> ||else||
> ||endif|| ||ifdef||settings_saved||$$settings saved$$||endif|| ||ifequal||displaymode||advanced|| ($$switch back to$$ $$standard$$ $$mode$$) ||else|| ( 6 $$additional settings in$$ $$advanced$$ $$mode$$) ||endif||

$$Obscure settings$$ : | ($$all advanced$$).

> ||include||table.htm|| ||ifequal||displaymode||advanced|| ||endif|| ||ifequal||displaymode||advanced|| ||else|| ||endif|| ||ifdef||settings_saved||$$settings saved$$||endif|| ||ifequal||displaymode||advanced|| ($$switch back to$$ $$standard$$ $$mode$$) ||else|| ( $$no additional settings in$$ $$advanced$$ $$mode$$) ||endif||

||ifequal||displaymode||advanced|| $$Hint$$: $$Setting background colour indicates whether it is a standard or advanced mode setting. Also settings in italics have been automatically added to the relevant sections of this web admin user interface. These are likely to be new or obscure$$.
||endif|| ||include||footer.htm||