Zimbra Collaboration Server Administrator’s Guide ZCS 8.0 Open Source Edition August 2013 Legal Notices Copyright ©2005-2014 Telligent Systems, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. “Telligent” and “Zimbra” are registered trademarks or trademarks of Telligent Systems, Inc. in the United States and other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies. Telligent Systems, Inc. d/b/a Zimbra Software, LLC www.zimbra.com ZCS 8.0 March 2014 Rev 6 for 8.0.7 Table of Contents 1 Introduction . 9 Audience . 9 Third-Party Components . 9 Support and Contact Information . 9 2 Product Overview . 11 Core Email, Calendar and Collaboration Functionality . 11 Zimbra Components . 12 System Architecture . 12 Zimbra Application Packages . 14 Example of a Typical Multiserver Configuration . 15 Zimbra System Directory Tree . 17 Web Client Versions . 18 3 Zimbra Mailbox Server . 21 Incoming Mail Routing . 21 Mailbox Server . 21 Message Store . 21 Data Store. 22 Index Store . 22 Mailbox Server Logs . 23 4 Zimbra LDAP Service . 25 LDAP Traffic Flow . 25 LDAP Directory Hierarchy . 26 ZCS LDAP Schema . 27 ZCS Objects . 28 Account Authentication . 30 Internal Authentication Mechanism. 30 External LDAP and External AD Authentication Mechanism . 30 Custom Authentication . 31 Kerberos5 Authentication Mechanism . 32 Global Address List . 33 Flushing LDAP Cache . 34 Flush the Cache for Themes and Locales . 35 Flush Accounts, Groups, COS, Domains, and Servers . 35 5 Zimbra Mail Transfer Agent. 37 Zimbra MTA Deployment . 37 Postfix Configuration Files . 38 SMTP Authentication . 38 SMTP Restrictions . 39 Sending Non Local Mail to a Different Server. 39 Anti-Virus and Anti-Spam Protection . 39 Anti-Virus Protection . 39 Zimbra Collaboration Server Open Source Edition 8.0 iii Administrator’s Guide Anti-Spam Protection . 40 Receiving and Sending Mail . 42 Message Queues . 42 6 Zimbra Proxy Server . 45 Proxy Components . 45 Proxy Architecture and Flow . 45 Change the Zimbra Proxy Configuration . 46 Zimbra IMAP/POP Proxy . 46 Zimbra Proxy Ports for POP and IMAP . 47 Setting Up IMAP and POP Proxy After HTTP Proxy Installation . 47 Configure ZCS HTTP Proxy . 49 Setting Up HTTP Proxy . 50 Set Proxy Trusted IP Addresses. 52 Configure Zimbra Proxy for Kerberos Authentication . 53 7 Using the Administration Console . 55 Administrator Accounts . 55 Change Administrator Passwords . 55 Log in to the Administration Console . 55 Managing Tasks . 56 Message of the Day for Administrators . 56 Create a Message of the Day . 56 Remove a Message of the Day . 56 Zimbra Search . 57 8 Managing Configuration . 59 Global Configuration . 59 General Global Settings . 60 Setting Up Email Attachment Rules . 61 Blocking Email Attachments by File Type. 61 Global MTA Settings. 61 Global IMAP and POP Settings . 63 Working With Domains . 63 Domain General Information Settings. 64 Global Address List (GAL) Mode . 65 Using GAL sync accounts for faster access to GAL . 66 Authentication Modes . 67 Virtual Hosts . 68 Renaming a Domain . 68 Adding a Domain Alias . 69 Zimlets on the Domain . 69 Managing Server Settings . 69 General Server Settings . 70 Change MTA Server Settings . 71 Setting Up IP Address Binding . 71 Managing SSL Certificates for ZCS . 72 Installing Certificates. 72 Viewing Installed Certificates . 73 Maintaining Valid Certificates . ..