TweetFollow Us on Twitter

Kerio Mail Server

Volume Number: 20 (2004)
Issue Number: 11
Column Tag: Programming

Patch Panel

Kerio Mail Server

by John Welch

The Best Groupware Server on Mac OS X

One of the biggest holes in Apple's Server offerings is in the realm of groupware. Apple gives you a solid email server, so-so network address books, (Open Directory has real issues with the kinds of things you need for Address Books), but no calendaring or scheduling.

Welcome

If you look at the platform there aren't many choices at all. Now and Meeting Maker don't integrate with any other clients on the Mac. If you have Linux clients, then the only way to use Now is via a web interface, and Meeting Maker requires Windows for a lot of its higher end functionality. Oracle bought Steltor to get Corporate Time, but that requires a separate client for calendaring, and it's a pretty ugly client, even though it has fantastic functionality.

Stalker Software's Communigate Pro can only talk to iCal on the Mac. You can get better groupware functionality out of it, but only for Outlook on Windows. Communigate has issues with talking to Open Directory, or any directory server other than the one they ship with it, and recent price increases have effectively relegated that product to the high end market. Apple doesn't even have any kind of calendaring server at all, and from what they've released for information on Tiger Server, they aren't going to have one in 10.4 either.

Kerio

However, there's another, albeit less well-known choice: Kerio MailServer 6, from Kerio, http://www.kerio.com/ . While I haven't had a chance to beat on it over a long term, or in a large-scale implementation, what I have seen is very nice.

Installation and Initial Setup

Installing Kerio MailServer 6 is as simple as installing almost any other product. You run the installer, answer the questions in the wizard and you have a server. This is not to say you don't need to know what you are doing, but that Kerio has done the extra work to make getting the product installed and running as simple as possible. Yes, yes, a good admin shouldn't need it, but I appreciate it when a product doesn't require me to pass the labors of Hercules just to get it installed.

The admin interface is logically laid out and easy to use, even over Apple Remote Desktop. It's designed so that you can do the simple stuff easily, while not keeping you from the low level features you sometimes need.

One major bonus is the Open Directory integration features. This is a separate installer that you run on your Open Directory Master, which adds some Kerio - specific entries to your LDAP directory. This allows Kerio MailServer to pull user data and authentication information from an existing Open Directory setup, which allows you to keep your user information in one place.

Kerio can also tie into the Kerberos support in Open Directory, allowing it to participate in the Open Directory Single Sign On environment. So, if you use email/calendaring clients that support Kerberos, such as Mail, Eudora, or Mulberry, and your client Macs are MCX clients, then your users authenticate to Kerio when they log into their Macs. Single Signon does not suck.

Configuration

There are two primary tools for configuring Kerio MailServer; the MailServer Monitor application and the Administration Console. The MailServer Monitor lets you start/stop the MailServer and open the Administration Console. It has a nice Dock menu for these tasks, as seen below.


Kerio MailServer Monitor Dock menu


Kerio MailServer Monitor application

This brings me to my biggest complaint with Kerio...it places its startupitem in /System/Library/StartupItems/ and not /Library/StartupItems/. This is in general a bad idea, since like a lot of folks, I don't back that directory up, since it's easily restored from original media, and only Apple should be playing in there anyway. This should probably get fixed sooner than later.

The Administration Console is nicely designed, with all the features of the MailServer clearly labeled and easy to find. Spam is handled via standard SMTP relay settings, and subscription to various blacklists. MailServer ships with the four or so most popular blacklists, and you can add your own. You can also limit things like number of messages per hour from a single IP, number of concurrent SMTP connections from a single IP, harvest attack methods, and so on. MailServer ships with McAfee's antivirus engine, but can use external once, such as Sophos if you so desire. You can easily set up attachment filters, and the actions you want to take when a virus, or bad attachment is encountered.

The individual services MailServer provides can be enabled or disabled as you need, and set to automatically start when the MailServer launches if you like.


Kerio MailServer Administration Console

As I noted earlier, Kerio supports using both Active Directory and Open Directory for user authentication and LDAP services. This allows you to keep your user databases in one place, and not have to replicate user creation/deletion/changes/etc. between multiple user databases. The implementation is rather simple. You install the Open Directory adapter on the Open Directory Master, point MailServer at it, set up your Kerberos Realm information in MailServer and then add the users. It's five clicks to add the users in your Open Directory domain. The same applies for groups as well. Again, while an experienced email administrator can do all of this manually, having a well thought-out UI for this makes dealing with MailServer much nicer, and that's, well, nice.

Kerio supports all the major authentication schemes, such as SSL, Kerberos, CRAM-MD5, and NTLM, so using MailServer securely is as simple as telling MailServer what to use and how to use it.

Client setup is like any other. You tell your email client what server to use, set up your authentication type, enter your user ID and password (if you aren't using Kerberos), and you're set. If you want to use Entourage (v.X and 2004) or Outlook, Kerio's manual has the specific instructions on how to set this up, and they work nicely. For Outlook, Kerio provides a MAPI connector, and Entourage uses HTTP-DAV, which is also used by Outlook and Evolution.

No, you aren't going to perfectly replicate an Exchange server, but if you need 100% of Exchange features, you're using Outlook and Exchange, period. But for 90% of common groupware needs, Kerio can handle it with ease.

From my own tests, and looking at other tests of email servers, Kerio should have no problems handling email and groupware needs for almost any size of client base.

Conclusion

This is kind of a hit and run review, but sometimes I don't have the six months to a year I like to test such things. While there is still desperate need for more choices in groupware servers for the Mac, the fact is, that if we only have one real choice, having that choice be Kerio is not the worst thing that can happen. Kerio has wisely chosen to implement groupware support in such a manner that you can use existing groupware clients in your enterprise, and still get maximum benefit. It has a setup and configuration that are so well designed and easy to use that they should be copied everywhere, and a manual that is as well-written as any one I've found. It's rare that I can solve every problem I have with setting up a product with nothing more than the shipped documentation, and it's really sweet when a company takes the time and effort to make this happen.


John Welch (jwelch@provar.com is an IT Staff Member for Kansas City Life Insurance, a Technical Strategist for Provar, (http://www.provar.com/) and the Chief Know-It-All for TackyShirt, (http://www.tackyshirt.com/. He has over fifteen years of experience at making Macs work with other computer systems. John specializes in figuring out ways in which to make the Mac do what nobody thinks it can, showing that the Mac is a superior administrative platform, and teaching others how to use it in interesting, if sometimes frightening ways. He also does things that don't involve computertry on occasion, or at least that's the rumor.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Microsoft Remote Desktop 8.0.16 - Connec...
With Microsoft Remote Desktop, you can connect to a remote PC and your work resources from almost anywhere. Experience the power of Windows with RemoteFX in a Remote Desktop client designed to help... Read more
Spotify 1.0.4.90. - Stream music, create...
Spotify is a streaming music service that gives you on-demand access to millions of songs. Whether you like driving rock, silky R&B, or grandiose classical music, Spotify's massive catalogue puts... Read more
djay Pro 1.1 - Transform your Mac into a...
djay Pro provides a complete toolkit for performing DJs. Its unique modern interface is built around a sophisticated integration with iTunes and Spotify, giving you instant access to millions of... Read more
Vivaldi 1.0.118.19 - Lightweight browser...
Vivaldi browser. In 1994, two programmers started working on a web browser. Our idea was to make a really fast browser, capable of running on limited hardware, keeping in mind that users are... Read more
Stacks 2.6.11 - New way to create pages...
Stacks is a new way to create pages in RapidWeaver. It's a plugin designed to combine drag-and-drop simplicity with the power of fluid layout. Features: Fluid Layout: Stacks lets you build pages... Read more
xScope 4.1.3 - Onscreen graphic measurem...
xScope is powerful set of tools that are ideal for measuring, inspecting, and testing on-screen graphics and layouts. Its tools float above your desktop windows and can be accessed via a toolbar,... Read more
Cyberduck 4.7 - FTP and SFTP browser. (F...
Cyberduck is a robust FTP/FTP-TLS/SFTP browser for the Mac whose lack of visual clutter and cleverly intuitive features make it easy to use. Support for external editors and system technologies such... Read more
Labels & Addresses 1.7 - Powerful la...
Labels & Addresses is a home and office tool for printing all sorts of labels, envelopes, inventory labels, and price tags. Merge-printing capability makes the program a great tool for holiday... Read more
teleport 1.2.1 - Use one mouse/keyboard...
teleport is a simple utility to let you use one single mouse and keyboard to control several of your Macs. Simply reach the edge of your screen, and your mouse teleports to your other Mac! The... Read more
Apple iMovie 10.0.8 - Edit personal vide...
With an all-new design, Apple iMovie lets you enjoy your videos like never before. Browse your clips more easily, instantly share your favorite moments, and create beautiful HD movies and Hollywood-... Read more

Discover Your Reflexes With Minimalist G...
Discover O, BYOF Studios, may look simple at first with its' color matching premise and swipe controls, but as you speed up the task becomes more daunting. [Read more] | Read more »
Here's Another Roundup of Notable A...
Now that the Apple Watch is publically available (kind of), even more apps and games have been popping up for it. Some of them are updates to existing software, others are brand new. The main thing is that they're all for the Apple Watch, and if you... | Read more »
Use Batting Average and the Apple Watch...
Batting Average, by Pixolini, is designed to help you manage your statistics. Every time you go to bat, you can use your Apple Watch to track  your swings, strikes, and hits. [Read more] | Read more »
Celebrate Studio Pango's 3rd Annive...
It is time to party, Pangoland pals! Studio Pango is celebrating their 3rd birthday and their gift to you is a new update to Pangoland. [Read more] | Read more »
Become the World's Most Important D...
Must Deliver, by cherrypick games, is a top-down endless-runner witha healthy dose of the living dead. [Read more] | Read more »
SoundHound + LiveLyrics is Making its De...
SoundHound Inc. has announced that SoundHound + LiveLyrics, will be one of the first third-party apps to hit the Apple Watch. With  SoundHound you'll be able to tap on your watch and have the app recognize the music you are listening to, then have... | Read more »
Adobe Joins the Apple Watch Lineup With...
A whole tidal wave of apps are headed for the Apple Watch, and Adobe has joined in with 3 new ways to enhance your creativity and collaborate with others. The watch apps pair with iPad/iPhone apps to give you total control over your Adobe projects... | Read more »
Z Steel Soldiers, Sequel to Kavcom'...
Kavcom has released Z Steel Soldiers, which continues the story of the comedic RTS originally created by the Bitmap Brothers. [Read more] | Read more »
Seene Lets You Create 3D Images With You...
Seene, by Obvious Engineering, is a 3D capture app that's meant to allow you to create visually stunning 3D images with a tap of your finger, and then share them as a 3D photo, video or gif. [Read more] | Read more »
Lost Within - Tips, Tricks, and Strategi...
Have you just downloaded Lost Within and are you in need of a guiding hand? While it’s not the toughest of games out there you might still want some helpful tips to get you started. [Read more] | Read more »

Price Scanner via MacPrices.net

Zoho Business Apps for Apple Watch Put Select...
Pleasanton, California based Zoho has launched Zoho Business Apps for Apple Watch, a line of apps that extends Zoho business applications to let users perform select functions from an Apple Watch.... Read more
Universal Stylus Initiative Launched to Creat...
OEMs, stylus and touch controller manufacturers have announced the launch of Universal Stylus Initiative (USI), a new organization formed to develop and promote an industry specification for an... Read more
Amazon Shopping App for Apple Watch
With the new Amazon shopping app for Apple Watch, Amazon customers with one of the wearable devices can simply tap the app on the watch to purchase items in seconds, or save an idea for later. The... Read more
Intel Compute Stick: A New Mini-Computing For...
The Intel Compute Stick, a new pocket-sized computer based on a quad-core Intel Atom processor running Windows 8.1 with Bing, is available now through Intel Authorized Dealers across much of the... Read more
Heal to Launch First One-Touch House Call Doc...
Santa Monica, California based Heal, a pioneer in on-demand personal health care services — will offer the first one-touch, on-demand house call doctor app for the Apple Watch. Heal’s Watch app,... Read more
Mac Notebooks: Avoiding MagSafe Power Adapter...
Apple Support says proper usage, care, and maintenance of Your Mac notebook’s MagSafe power adapter can substantially increase the the adapter’s service life. Of course, MagSafe itself is an Apple... Read more
12″ Retina MacBook In Shootout With Air And P...
BareFeats’ rob-ART morgan has posted another comparison of the 12″ MacBook with other Mac laptops, noting that the general goodness of all Mac laptops can make which one to purchase a tough decision... Read more
FileMaker Go for iPad and iPhone: Over 1.5 Mi...
FileMaker has announced that its FileMaker Go for iPad and iPhone app has surpassed 1.5 million downloads from the iTunes App Store. The milestone confirms the continued popularity of the FileMaker... Read more
Sale! 13-inch 2.7GHz Retina MacBook Pro for $...
 Best Buy has the new 2015 13″ 2.7GHz/128GB Retina MacBook Pro on sale for $1099 – $200 off MSRP. Choose free shipping or free local store pickup (if available). Price for online orders only, in-... Read more
Minimalist MacBook Confirms Death of Steve Jo...
ReadWrite’s Adriana Lee has posted a eulogy for the “Digital Hub” concept Steve Jobs first proposed back in 2001, declaring the new 12-inch MacBook with its single, over-subscribed USB-C port to be... Read more

Jobs Board

*Apple* Client Systems Solution Specialist -...
…drive revenue and profit in assigned sales segment and/or region specific to the Apple brand and product sets. This person will work directly with CDW Account Managers Read more
*Apple* Retail - Multiple Positions (US) - A...
Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, you're also the Read more
*Apple* Support Technician IV - Jack Henry a...
Job Description Jack Henry & Associates is seeking an Apple Support Technician. This position while acting independently, ensures the proper day-to-day control of Read more
*Apple* Client Systems Solution Specialist -...
…drive revenue and profit in assigned sales segment and/or region specific to the Apple brand and product sets. This person will work directly with CDW Account Managers Read more
*Apple* Software Support - Casper (Can work...
…experience . Full knowledge of Mac OS X and prior . Mac OSX / Server . Apple Remote Desktop . Process Documentation . Ability to prioritize multiple tasks in a fast pace Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.