TweetFollow Us on Twitter

Kerio Mail Server

Volume Number: 20 (2004)
Issue Number: 11
Column Tag: Programming

Patch Panel

Kerio Mail Server

by John Welch

The Best Groupware Server on Mac OS X

One of the biggest holes in Apple's Server offerings is in the realm of groupware. Apple gives you a solid email server, so-so network address books, (Open Directory has real issues with the kinds of things you need for Address Books), but no calendaring or scheduling.

Welcome

If you look at the platform there aren't many choices at all. Now and Meeting Maker don't integrate with any other clients on the Mac. If you have Linux clients, then the only way to use Now is via a web interface, and Meeting Maker requires Windows for a lot of its higher end functionality. Oracle bought Steltor to get Corporate Time, but that requires a separate client for calendaring, and it's a pretty ugly client, even though it has fantastic functionality.

Stalker Software's Communigate Pro can only talk to iCal on the Mac. You can get better groupware functionality out of it, but only for Outlook on Windows. Communigate has issues with talking to Open Directory, or any directory server other than the one they ship with it, and recent price increases have effectively relegated that product to the high end market. Apple doesn't even have any kind of calendaring server at all, and from what they've released for information on Tiger Server, they aren't going to have one in 10.4 either.

Kerio

However, there's another, albeit less well-known choice: Kerio MailServer 6, from Kerio, http://www.kerio.com/ . While I haven't had a chance to beat on it over a long term, or in a large-scale implementation, what I have seen is very nice.

Installation and Initial Setup

Installing Kerio MailServer 6 is as simple as installing almost any other product. You run the installer, answer the questions in the wizard and you have a server. This is not to say you don't need to know what you are doing, but that Kerio has done the extra work to make getting the product installed and running as simple as possible. Yes, yes, a good admin shouldn't need it, but I appreciate it when a product doesn't require me to pass the labors of Hercules just to get it installed.

The admin interface is logically laid out and easy to use, even over Apple Remote Desktop. It's designed so that you can do the simple stuff easily, while not keeping you from the low level features you sometimes need.

One major bonus is the Open Directory integration features. This is a separate installer that you run on your Open Directory Master, which adds some Kerio - specific entries to your LDAP directory. This allows Kerio MailServer to pull user data and authentication information from an existing Open Directory setup, which allows you to keep your user information in one place.

Kerio can also tie into the Kerberos support in Open Directory, allowing it to participate in the Open Directory Single Sign On environment. So, if you use email/calendaring clients that support Kerberos, such as Mail, Eudora, or Mulberry, and your client Macs are MCX clients, then your users authenticate to Kerio when they log into their Macs. Single Signon does not suck.

Configuration

There are two primary tools for configuring Kerio MailServer; the MailServer Monitor application and the Administration Console. The MailServer Monitor lets you start/stop the MailServer and open the Administration Console. It has a nice Dock menu for these tasks, as seen below.


Kerio MailServer Monitor Dock menu


Kerio MailServer Monitor application

This brings me to my biggest complaint with Kerio...it places its startupitem in /System/Library/StartupItems/ and not /Library/StartupItems/. This is in general a bad idea, since like a lot of folks, I don't back that directory up, since it's easily restored from original media, and only Apple should be playing in there anyway. This should probably get fixed sooner than later.

The Administration Console is nicely designed, with all the features of the MailServer clearly labeled and easy to find. Spam is handled via standard SMTP relay settings, and subscription to various blacklists. MailServer ships with the four or so most popular blacklists, and you can add your own. You can also limit things like number of messages per hour from a single IP, number of concurrent SMTP connections from a single IP, harvest attack methods, and so on. MailServer ships with McAfee's antivirus engine, but can use external once, such as Sophos if you so desire. You can easily set up attachment filters, and the actions you want to take when a virus, or bad attachment is encountered.

The individual services MailServer provides can be enabled or disabled as you need, and set to automatically start when the MailServer launches if you like.


Kerio MailServer Administration Console

As I noted earlier, Kerio supports using both Active Directory and Open Directory for user authentication and LDAP services. This allows you to keep your user databases in one place, and not have to replicate user creation/deletion/changes/etc. between multiple user databases. The implementation is rather simple. You install the Open Directory adapter on the Open Directory Master, point MailServer at it, set up your Kerberos Realm information in MailServer and then add the users. It's five clicks to add the users in your Open Directory domain. The same applies for groups as well. Again, while an experienced email administrator can do all of this manually, having a well thought-out UI for this makes dealing with MailServer much nicer, and that's, well, nice.

Kerio supports all the major authentication schemes, such as SSL, Kerberos, CRAM-MD5, and NTLM, so using MailServer securely is as simple as telling MailServer what to use and how to use it.

Client setup is like any other. You tell your email client what server to use, set up your authentication type, enter your user ID and password (if you aren't using Kerberos), and you're set. If you want to use Entourage (v.X and 2004) or Outlook, Kerio's manual has the specific instructions on how to set this up, and they work nicely. For Outlook, Kerio provides a MAPI connector, and Entourage uses HTTP-DAV, which is also used by Outlook and Evolution.

No, you aren't going to perfectly replicate an Exchange server, but if you need 100% of Exchange features, you're using Outlook and Exchange, period. But for 90% of common groupware needs, Kerio can handle it with ease.

From my own tests, and looking at other tests of email servers, Kerio should have no problems handling email and groupware needs for almost any size of client base.

Conclusion

This is kind of a hit and run review, but sometimes I don't have the six months to a year I like to test such things. While there is still desperate need for more choices in groupware servers for the Mac, the fact is, that if we only have one real choice, having that choice be Kerio is not the worst thing that can happen. Kerio has wisely chosen to implement groupware support in such a manner that you can use existing groupware clients in your enterprise, and still get maximum benefit. It has a setup and configuration that are so well designed and easy to use that they should be copied everywhere, and a manual that is as well-written as any one I've found. It's rare that I can solve every problem I have with setting up a product with nothing more than the shipped documentation, and it's really sweet when a company takes the time and effort to make this happen.


John Welch (jwelch@provar.com is an IT Staff Member for Kansas City Life Insurance, a Technical Strategist for Provar, (http://www.provar.com/) and the Chief Know-It-All for TackyShirt, (http://www.tackyshirt.com/. He has over fifteen years of experience at making Macs work with other computer systems. John specializes in figuring out ways in which to make the Mac do what nobody thinks it can, showing that the Mac is a superior administrative platform, and teaching others how to use it in interesting, if sometimes frightening ways. He also does things that don't involve computertry on occasion, or at least that's the rumor.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

LibreOffice 4.4.3 - Free, open-source of...
LibreOffice is an office suite (word processor, spreadsheet, presentations, drawing tool) compatible with other major office suites. The Document Foundation is coordinating development and... Read more
FoldersSynchronizer 4.2.1 - Synchronize...
FoldersSynchronizer is a popular and useful utility that synchronizes and backs-up files, folders, disks and boot disks. On each session you can apply special options like Timers, Multiple Folders,... Read more
Simon 4.0.2 - Monitor changes and crashe...
Simon monitors websites and alerts you of crashes and changes. Select pages to monitor, choose your alert options, and customize your settings. Simon does the rest. Keep a watchful eye on your... Read more
Cocktail 8.1.2 - General maintenance and...
Cocktail is a general purpose utility for OS X that lets you clean, repair and optimize your Mac. It is a powerful digital toolset that helps hundreds of thousands of Mac users around the world get... Read more
Cyberduck 4.6.4 - FTP and SFTP browser....
Cyberduck is a robust FTP/FTP-TLS/SFTP browser for the Mac whose lack of visual clutter and cleverly intuitive features make it easy to use. Support for external editors and system technologies such... Read more
Herald 5.0.2 - Notification plugin for M...
Note: Versions 2.1.3 (for OS X 10.7), 3.0.6 (for OS X 10.8), and 4.0.8 (for OS X 10.9) are no longer supported by the developer. Herald is a notification plugin for Mail.app, Apple's Mac OS X email... Read more
DEVONthink Pro 2.8.3 - Knowledge base, i...
Save 10% with our exclusive coupon code: MACUPDATE10 DEVONthink Pro is your essential assistant for today's world, where almost everything is digital. From shopping receipts to important research... Read more
Boom 2 1.0.1 - System-wide pro audio app...
Boom 2 is a system-wide volume booster and equalizer app that is designed especially for OS X 10.10 Yosemite. It comes with a smart interface, self-calibrates itself according to your Mac, offers... Read more
Apple Security Update 2015-001 - For OS...
Apple Security Update 2015-001 is recommended for all users and improves the security of OS X. For detailed information about the security content of this update, please visit: http://support.apple.... Read more
Drive Genius 4.0.1 - Powerful system uti...
Drive Genius 4 gives you faster performance from your Mac while also protecting it. The award-winning and improved DrivePulse feature alerts you to hard drive issues before they become major problems... Read more

Unlock Sunshine Girl in Ironkill with th...
Unlock Sunshine Girl in Ironkill with this special 148Apps code Posted by Rob Rich on January 29th, 2015 [ permalink ] Robo-fighter Ironkill has been out on iOS a | Read more »
Crossroad Zombies Review
Crossroad Zombies Review By Jordan Minor on January 29th, 2015 Our Rating: :: CROSSWALKING DEADiPad Only App - Designed for the iPad Crossroad Zombies is a rough draft of a cool genre mash-up.   | Read more »
Blood Brothers 2 – Tips, Cheats, and Str...
War is hell: Is it the kind of hell you want to check out? Read our Blood Brothers 2 review to find out! Blood Brothers 2, DeNA’s follow-up to the original Blood Brothers, is an intriguing card collecting / role-playing / strategy hybrid. There’s... | Read more »
Blood Brothers 2 Review
Blood Brothers 2 Review By Nadia Oxford on January 29th, 2015 Our Rating: :: AN AGGRAVATING RELATIVEUniversal App - Designed for iPhone and iPad Blood Brothers 2 is built on a simple, solid foundation, but its free-to-play system... | Read more »
I AM BREAD, the Toast of the Town, is Ro...
Have you ever dreamt of being deliciously gluten-y? Do you feel passionate about Rye and Wheat? The guys at Bossa Studios do and that is why they are bringing I AM BREAD to iOS soon. The loafy app will feature all the new content that is being... | Read more »
Fahrenheit: Indigo Prophecy Remastered R...
Fahrenheit: Indigo Prophecy Remastered Review By Jennifer Allen on January 29th, 2015 Our Rating: Universal App - Designed for iPhone and iPad 10 years after its initial release and Fahrenheit: Indigo Prophecy still feels like a... | Read more »
Evolve: Hunters Quest is a Match-3 That...
Evolve: Hunters Quest is a Match-3 That Has You Hunting Up Some Big Game. Posted by Jessica Fisher on January 29th, 2015 [ permalink ] | Read more »
Destructamundo Review
Destructamundo Review By Jordan Minor on January 29th, 2015 Our Rating: :: WRECKING CREWUniversal App - Designed for iPhone and iPad Destructamundo blows up real good.   | Read more »
The Sandbox Gets Exclusive Update, Adds...
The Sandbox Gets Exclusive Update, Adds Invincible Characters Campagin Posted by Tre Lawrence on January 29th, 2015 [ permalink ] | Read more »
Mean Girls: The Game Review
Mean Girls: The Game Review By Jordan Minor on January 29th, 2015 Our Rating: :: FETCHUniversal App - Designed for iPhone and iPad A Mean Girls tower defense game makes way more sense than you’d think.   | Read more »

Price Scanner via MacPrices.net

Back in stock: Refurbished iPod nanos for $99...
The Apple Store has Apple Certified Refurbished 16GB iPod nanos available for $99 including free shipping and Apple’s standard one-year warranty. That’s $50 off the cost of new nanos. Most colors are... Read more
New Good Management Suite Simplifies Enterpri...
Good Technology has announced the availability of the Good Management Suite, a comprehensive cross-platform solution for organizations getting started with mobile business initiatives. Built on the... Read more
15-inch 2.0GHz Retina MacBook Pro (refurbishe...
The Apple Store has Apple Certified Refurbished previous-generation 15″ 2.0GHz Retina MacBook Pros available for $1489 including free shipping plus Apple’s standard one-year warranty. Their price is... Read more
15-inch 2.5GHz Retina MacBook Pro on sale for...
Amazon has the 15″ 2.5GHz Retina MacBook Pro on sale for $2319.99 including free shipping. Their price is $180 off MSRP, and it’s the lowest price available for this model from any reseller. Read more
iPad Turns Five – The ”Book Mystique
Five years ago this week, the late Steve Jobs took the stage at an Apple special press event to unveil the first Apple iPad — a slab-shaped, hand-holdable device that was to shake the personal... Read more
Sale! 15-inch Retina MacBook Pros for up to $...
B&H Photo has the new 2014 15″ Retina MacBook Pros on sale for $150 off MSRP for a limited time. Shipping is free, and B&H charges NY sales tax only: - 15″ 2.2GHz Retina MacBook Pro: $1889.99... Read more
Apple refurbished Mac minis for up to $150 of...
The Apple Store has restocked Apple Certified Refurbished 2014 Mac minis, with models available starting at $419. Apple’s one-year warranty is included with each mini, and shipping is free: - 1.4GHz... Read more
Apple Releases New Tranche Of OS Updates For...
Apple has released incremental bugfix and security updates for its most recent Mac and iOS versions. OS X Yosemite 10.10.2 Update Apple says this update includes the following improvements: Resolves... Read more
Samsung To Be Main Supplier Of A9 Chips For i...
Korea’s Maeil Business Newspaper reports that Samsung has beat out its chipmaking rivals, Taiwan’s Qualcomm and TSMC, as supplier of chipsets for the next generations of both its own Galaxy S6 and... Read more
Save up to $340 on iMacs with Apple Certified...
The Apple Store has Apple Certified Refurbished iMacs available for up to $340 off the cost of new models. Apple’s one-year warranty is standard, and shipping is free. These are the best prices on... Read more

Jobs Board

SW QA Engineer - *Apple* TV - Apple (United...
**Job Summary** The Apple TV team is looking for experienced Quality Assurance Engineers with a passion for delivering first in class home entertainment solutions. **Key Read more
*Apple* Retail - Multiple Positions(US) - Ap...
Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, you re also the Read more
*Apple* Systems Engineer - Pre Sales, Educat...
…is responsible for proactively providing technical expertise to drive sales of Apple solutions into assigned accounts. The SE architects, validates, and assists in Read more
*Apple* Solutions Consultant - Retail Sales...
As an ambassador of the Apple brand, the ASC is accountable for driving sales performance by: Connecting with customers. Discovering customers' needs and values. Showing Read more
*Apple* Solutions Consultant - Retail Sales...
As an ambassador of the Apple brand, the ASC is accountable for driving sales performance by: Connecting with customers. Discovering customers' needs and values. Showing Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.