NethServer Documentation

NethServer Documentation, Release 7 Final
262
Chapter 64. SOGo Groupware

---

CHAPTER
65
TLS policy
Enforced security level Configures the system services as described in the
TLS policy
section
263

---

NethServer Documentation, Release 7 Final
264
Chapter 65. TLS policy

---

Index
A
account
service
,
35
active directory
change IP
,
33
default accounts
,
33
ActiveSync
,
95
alert
,
154
alias:
DHCP
,
42
alias:
HELO
EHLO
,
88
alias:
PXE
,
42
alias:
Trivial File Transfer Protocol
TFTP
,
44
always send a copy
email
,
80
,
83
Android device
,
95
anti-spam
, see antispam
anti-virus
, see antivirus
antispam
email
,
84
antivirus
email
,
84
application
,
28
archives
,
84
Asterisk
,
185
attachment
email
,
84
B
bcc
email
,
80
,
83
blacklist
,
199
email
,
85
bridged
,
168
C
CalDAV and CardDAV protocols
,
96
CentOS
installation
,
15
change IP
active directory
,
33
chat
,
123
,
255
Collectd
,
165
compatibility
hardware
,
11
configuration backup
,
59
content filter
,
149
custom
quota
, email,
82
spam retention
, email,
82
D
data backup
,
59
default accounts
active directory
,
33
delegate
,
29
delivery
email
,
80
DHCP
,
42
disclaimer
email
,
80
DNS
,
41
DNS alias
,
42
DNSBL
,
85
domain
email
,
80
DPI
,
139
DROP
,
139
Duplicity
,
70
,
77
Dynamic Host Configuration Protocol
,
42
E
email
always send a copy
,
80
,
83
antispam
,
84
antivirus
,
84
attachment
,
84
bcc
,
80
,
83
265

---

NethServer Documentation, Release 7 Final
blacklist
,
85
custom quota
,
82
custom spam retention
,
82
delivery
,
80
disclaimer
,
80
domain
,
80
filter
,
84
HELO
,
88
hidden copy
,
80
,
83
internal visibility
,
82
legal note
,
80
local network only
,
82
master user
,
82
message queue
,
83
migration
,
236
private internal
,
82
relay
,
80
retries
,
83
signature
,
80
size
,
83
smarthost
,
83
spam retention
,
82
spam training
,
85
whitelist
,
85
email address
,
81
encryption
file system
,
13
EveBox
,
154
executables
,
84
F
fax
,
133
file system
encryption
,
13
filter
email
,
84
firewall
,
137
Firewall log
,
139
Firewall objects
,
143
FreePBX
,
185
FTP
,
175
jail
,
54
FTP server
,
51
G
gateway
,
137
Getmail
software
,
121
Google Translate
,
150
H
hardware
compatibility
,
11
requirements
,
11
HELO
email
,
88
hidden copy
email
,
80
,
83
HTTP
,
49
,
156
HTTPS
,
49
I
imap
port
,
201
imaps
port
,
201
impersonate
,
113
installation
,
9
CentOS
,
15
ISO
,
12
USB
,
15
VPS
,
15
internal
email private
,
82
internal visibility
email
,
82
Intrusion Prevention System
,
151
iOS device
,
95
IP/MAC binding
,
144
IPsec
,
170
ISO
installation
,
12
J
Jabber
,
123
,
255
jail
FTP
,
54
L
Launcher
,
28
legal note
email
,
80
local network only
email
,
82
logrotate
,
27
M
mailbox
shared
,
81
user
,
81
master
,
129
master user
email
,
82
message queue
email
,
83
migration
,
234
email
,
236
266
Index

---

NethServer Documentation, Release 7 Final
N
NAT 1:1
,
142
net2net
,
167
network latency
,
165
network service
,
26
Nextcloud
,
171
O
Outlook
,
116
P
p2p topology
,
169
password
,
35
,
37
password expiration
,
38
PHP
,
51
ping
,
165
policies
,
138
pop3
port
,
201
POP3 connector
,
121
pop3s
port
,
201
port
imap
,
201
imaps
,
201
pop3
,
201
pop3s
,
201
smtp
,
201
smtps
,
201
port forward
,
140
Preboot eXecution Environment
,
42
private
internal
, email,
82
pseudonym
,
81
PST
,
116
PXE
,
42
Q
quota
email custom
,
82
R
REJECT
,
138
relay
email
,
80
requirements
hardware
,
11
restic
,
71
retries
email
,
83
reverse proxy
,
51
,
155
roadwarrior
,
167
Roundcube
,
91
routed
,
168
rsync
,
71
Rules
,
138
S
S2S
,
123
score
spam
,
84
service
account
,
35
settings
,
27
SFTP
,
27
shared
mailbox
,
81
shared folder
,
158
signature
email
,
80
size
email
,
83
Slack
,
127
slave
,
129
smarthost
email
,
83
smtp
port
,
201
smtps
port
,
201
SNMP
,
179
software
Getmail
,
121
spam
,
84
score
,
84
spam retention
email
,
82
email custom
,
82
spam training
email
,
85
SSH
,
27
statistics
,
165
status
,
25
storage
,
26
strong
,
37
subnet topology
,
168
Suricata
,
151
System
,
25
T
team chat
,
127
TFTP
,
44
third-party software
,
233
time conditions
,
144
Time machine-style
,
71
Traffic shaping
,
142
tunnel
,
167
Index
267

---

NethServer Documentation, Release 7 Final
two factor authentication
,
94
U
upgrade
,
238
UPS
,
129
USB
installation
,
15
user
mailbox
,
81
V
virtual hosts
,
49
,
156
virtual machines
,
186
virtual modem
,
133
VPN
,
167
VPS
installation
,
15
W
WAN
,
140
WAN priority
,
169
web proxy
,
145
web proxy stats
,
147
webmail
,
91
weight
,
140
whitelist
email
,
85
X
XMPP
,
123
,
255
Z
zone
,
143
268
Index

---

Document Outline

• Release notes 7
  • Major changes on 2020-05-05
  • Major changes on 2019-10-07
  • Major changes on 2018-12-17
  • Major changes on 2018-06-11
  • Major changes on 2017-10-26
  • Major changes on 2017-07-31
  • Major changes on 2017-01-30
  • Deprecated features and packages
  • Upgrading NethServer 6 to NethServer 7
• Installation
  • Minimum requirements
  • Installation types
  • Installing from ISO
  • Install on CentOS
  • Next steps
• Accessing the Server Manager
  • Login
  • Hints
  • Change the current password
  • Logout
• Subscription
  • Registering the system
  • Removing a subscription
• Software center
  • Applications installation
  • Software updates
• Base system
  • System
  • Applications
  • Terminal
  • Role delegation
  • Two-factor authentication (2FA)
• Users and groups
  • Account providers
  • Users
  • Groups
  • Admin account
  • Password management
  • Import and delete accounts from plain-text files
• DNS
  • Hosts
  • Alias
  • Domain redirection
• DHCP and PXE server
  • DHCP configuration
  • Host IP reservation
  • Boot from network configuration
• TLS policy
  • Policy 2020-05-10
  • Policy 2018-10-01
  • Policy 2018-06-21
  • Policy 2018-03-30
  • Default upstream policy
• Web server
  • Web server dashboard
  • Settings
  • Virtual hosts
  • Reverse proxy
  • FTP server
• Firewall and gateway (new)
  • General
  • Dashboard
  • WAN
  • Traffic shaping
  • SNAT
  • Objects
  • Port forward
  • Rules
  • Local rules
  • Connections
  • Settings
• Backup
  • Settings
  • Selective restore of files
• Disaster recovery
  • New Server Manager
  • Old Server Manager
  • Skip network restore
• Backup customization
  • Data backup
  • Configuration backup
  • Restore from command line
  • Formatting a local disk
• Legacy backup
  • Configuration backup
  • Data backup
• Email
  • Domains
  • Email addresses
  • Mailbox configuration
  • Messages
  • Smarthost
  • IMAP synchronization
  • Filter
  • Client configuration
  • Special SMTP access policies
  • Custom HELO
  • Outlook deleted mail
  • Log
• Webmail
  • Plugins
  • Access
  • Removing
• WebTop 5
  • Authentication
  • Two factor authentication (2FA)
  • Synchronization with ActiveSync (EAS)
  • Synchronization with CalDAV and CardDAV
  • Sharing email folders or the entire account
  • Sharing calendars and contacts
  • Mail tags
  • Mail inline preview
  • Mail archiving
  • Subscription of IMAP folders
  • Export events (CSV)
  • Nextcloud integration
  • Use the personal Cloud to send and receive documents
  • Chat integration
  • Audio and video WebRTC calls with chat (Beta)
  • Send SMS from contacts
  • Custom link buttons in launcher
  • Browser notifications
  • Mailcards of user and domain
  • Configure multiple mailcards for a single user
  • Manage identities
  • Subscribing remote resources
  • User settings management
  • Changing the logo
  • Change the public URL
  • Change default limit “Maximum file size”
  • Importing contacts and calendars
  • Hide auto-suggested recipient in lookups
  • Edit subject of a mail and save it
  • Importing from Outlook PST
  • Troubleshooting
  • WebTop vs SOGo
  • Google integration
• POP3 connector
• Chat
  • Server to server (S2S)
  • Client
  • Administrators
  • Message Archive Management
  • Other options
• Team chat (Mattermost)
  • Configuration
  • Authentication
• UPS
  • Custom device
  • UPS statistics
• Report
  • Dashboard
  • Settings
• Fax server
  • Modem
  • Client
  • Samba virtual printer
  • Mail2Fax
  • Virtual modems
• Firewall and gateway
  • Policy
  • Rules
  • Multi WAN
  • Port forward
  • sNAT 1:1
  • Traffic shaping
  • Firewall objects
  • IP/MAC binding
• Web proxy
  • Authenticated mode
  • Client configuration
  • SSL Proxy
  • Bypass
  • Priority and divert rules
  • Report
  • Cache
  • Safe ports
  • Logs
• Web content filter
  • Filters
  • Antivirus
  • Troubleshooting
• IPS (Suricata)
  • Rule categories
  • Bypass
  • EveBox
• Reverse proxy
  • Path and virtual host rules
  • Manual configuration
• Virtual hosts
  • Virtual host names (FQDN)
  • Configuring a web application
  • Apache permissions
• Shared folders
  • Requirements
  • Authorizations
  • Network access
  • Network recycle bin
  • Hide a shared folder
  • Home share
  • Change resource permissions from Windows clients
  • Administrative access
  • Auditing
• Bandwidth monitor
  • Dashboard
  • Settings
  • Logs
• Statistics (collectd)
  • Network latency
• VPN
  • OpenVPN
  • IPsec
• Nextcloud
  • Installation
  • Configuration
• FTP
  • System users
• Phone Home
  • Disabling
• SNMP
• Hotspot (Dedalo)
  • How it works?
  • How to install it
  • Configuration
• FreePBX
  • Installation
  • Web Access
  • FwConsole
  • Advanced Documentation
• Virtual machines
  • External resources
• Fail2ban
  • Installation
  • Settings
  • Unban IP
  • Statistics
  • Tools
  • Whois
• Rspamd
  • Rspamd Web Interface
  • Modules
  • Frequently asked questions
• Antivirus
• Threat shield
  • Configuration
  • Incident response
  • Statistics
• Email module transition to Rspamd
  • Feature changes
  • Upgrade procedures
• Collabora Online
  • Installation
  • Admin user
• Docker
  • Official documentation
  • Installation
  • Docker repository
  • Configuration
  • Web user Interface
  • Default network
  • Aqua network
  • Aeria network
  • Macvlan
  • Issues
  • Sources
• SOGo
  • Installation
  • Official documentation
  • Usage
  • Esmith database
  • Access SOGo on an exclusive hostname
  • Maximum IMAP command
  • ActiveSync
  • Backup
  • Fine tuning
  • Clients
  • Nightly build
  • Issues
  • Sources
• PhpVirtualBox
  • Installation
  • User permissions
  • Authentication
  • Uploading ISOs
  • Oracle VM VirtualBox Extension Pack
  • The RDP console
  • VM networking
  • Esmith database
  • Documentation
• HotSync
  • Terminology
  • Installation
  • Configuration
  • Restore: put SLAVE in production
  • Troubleshooting
  • Supported packages
• Microsoft SQL Server
  • Installation
  • Default configuration
  • Install mssql-server service
  • Helpful actions
  • Backup and restore
  • SQLCMD utility
• Third-party software
  • Installation
  • Backup
  • Firewall
  • Starting and stopping
• Migration from NethService/SME Server
  • Accounts provider
  • Email
  • Apache
  • Ibays
  • Migration from backup
  • Migration with rsync
• Upgrade from NethServer 6
  • Accounts provider
  • Shared folders
  • Mail server
  • TLS policy
  • Let’s Encrypt
  • Owncloud and Nextcloud
  • Perl libraries
  • Upgrade from backup
  • Upgrade with rsync
  • Upgrade with Upgrade tool (beta)
• Documentation license
• List of NethServer 7 ISO releases
  • 7.8.2003
  • 7.7.1908
  • 7.6.1810
  • 7.5.1804
  • 7.4.1708
  • 7.3.1611
  • 7.2.1511
• Public issue trackers
• Index
• Chat
• Windows file server
• Reverse proxy
  • Create / Edit
  • Delete
• SOGo Groupware
• TLS policy
• Index