<?xml version="1.0" encoding="utf-8"?><!DOCTYPE article  PUBLIC '-//OASIS//DTD DocBook XML V4.4//EN'  'http://www.docbook.org/xml/4.4/docbookx.dtd'><article><articleinfo><title>MemberManual/Email</title><revhistory><revision><revnumber>50</revnumber><date>2022-08-11 15:39:23</date><authorinitials>129.175.127.92</authorinitials><revremark>Add troubleshooting tip about forwarding</revremark></revision><revision><revnumber>49</revnumber><date>2022-07-24 14:42:37</date><authorinitials>108.170.138.85</authorinitials><revremark>Moved the mail settings to the top so people don't have to read through so much opaque text to get the common settings</revremark></revision><revision><revnumber>48</revnumber><date>2020-02-14 12:03:14</date><authorinitials>KevinEverets</authorinitials><revremark>Make it more clear in &quot;Dealing with spam&quot; that scanning must be manually enabled.</revremark></revision><revision><revnumber>47</revnumber><date>2015-06-07 11:23:22</date><authorinitials>DaniilFrumin</authorinitials><revremark>Remove squirrelmail (defunct)</revremark></revision><revision><revnumber>46</revnumber><date>2015-04-08 05:15:25</date><authorinitials>ClintonEbadi</authorinitials><revremark>might help to document the mx records needed</revremark></revision><revision><revnumber>45</revnumber><date>2014-05-09 22:55:18</date><authorinitials>ClintonEbadi</authorinitials><revremark>DefaultAliasSource has been changed</revremark></revision><revision><revnumber>44</revnumber><date>2014-04-23 19:02:54</date><authorinitials>ClintonEbadi</authorinitials><revremark>warn users that configuring your domain contains temporary untruths</revremark></revision><revision><revnumber>43</revnumber><date>2014-04-23 18:57:31</date><authorinitials>ClintonEbadi</authorinitials><revremark>maybe, just maybe the email page should explain how to set up mail for a domain</revremark></revision><revision><revnumber>42</revnumber><date>2014-04-23 18:38:21</date><authorinitials>ClintonEbadi</authorinitials><revremark>spamd is likely not actually interfering with dkim</revremark></revision><revision><revnumber>41</revnumber><date>2013-01-13 17:49:16</date><authorinitials>ClintonEbadi</authorinitials><revremark>minor corrections / cat</revremark></revision><revision><revnumber>40</revnumber><date>2013-01-10 01:20:51</date><authorinitials>ClintonEbadi</authorinitials><revremark>new webmail addresses welcome to web 2.0 hcoop</revremark></revision><revision><revnumber>39</revnumber><date>2013-01-05 07:45:14</date><authorinitials>ClintonEbadi</authorinitials><revremark>remove an outright lie, thanks to time</revremark></revision><revision><revnumber>38</revnumber><date>2013-01-04 23:49:07</date><authorinitials>ClintonEbadi</authorinitials></revision><revision><revnumber>37</revnumber><date>2013-01-04 23:46:17</date><authorinitials>ClintonEbadi</authorinitials><revremark>howto make sure you do not miss our mail if you use gmail</revremark></revision><revision><revnumber>36</revnumber><date>2013-01-04 22:39:30</date><authorinitials>ClintonEbadi</authorinitials><revremark>sub-addressing works</revremark></revision><revision><revnumber>35</revnumber><date>2013-01-04 21:33:11</date><authorinitials>ClintonEbadi</authorinitials><revremark>default sf=pf</revremark></revision><revision><revnumber>34</revnumber><date>2013-01-04 06:42:22</date><authorinitials>ClintonEbadi</authorinitials><revremark>warn gmail users everywhere</revremark></revision><revision><revnumber>33</revnumber><date>2013-01-01 20:20:49</date><authorinitials>ClintonEbadi</authorinitials><revremark>and procmail is basically dead, stop suggesting it</revremark></revision><revision><revnumber>32</revnumber><date>2013-01-01 20:17:33</date><authorinitials>ClintonEbadi</authorinitials><revremark>remove the HORRIBLY WRONG ADVICE that has landed up repeatedly on RBLs</revremark></revision><revision><revnumber>31</revnumber><date>2012-01-21 20:59:46</date><authorinitials>RyanMikulovsky</authorinitials><revremark>Mail on OS X 10.7 supports TLS SMTP.  Must configure using preferences dialog, not the initial setup wizard for new accounts</revremark></revision><revision><revnumber>30</revnumber><date>2008-07-07 04:28:18</date><authorinitials>localhost</authorinitials><revremark>converted to 1.6 markup</revremark></revision><revision><revnumber>29</revnumber><date>2008-05-14 23:50:19</date><authorinitials>MichaelOlson</authorinitials><revremark>s/mail2/mail/</revremark></revision><revision><revnumber>28</revnumber><date>2008-04-30 15:03:41</date><authorinitials>AdamChlipala</authorinitials><revremark>deleuze -&gt; mail</revremark></revision><revision><revnumber>27</revnumber><date>2008-04-30 14:52:50</date><authorinitials>AdamChlipala</authorinitials><revremark>mire -&gt; ssh</revremark></revision><revision><revnumber>26</revnumber><date>2008-02-19 23:20:24</date><authorinitials>MichaelOlson</authorinitials><revremark>Mention roundcube</revremark></revision><revision><revnumber>25</revnumber><date>2007-12-15 17:31:10</date><authorinitials>AdamChlipala</authorinitials><revremark>members2 -&gt; members</revremark></revision><revision><revnumber>24</revnumber><date>2007-12-04 01:09:23</date><authorinitials>MichaelOlson</authorinitials><revremark>Mention that you have to log into mire to check quota</revremark></revision><revision><revnumber>23</revnumber><date>2007-11-21 01:55:21</date><authorinitials>MichaelOlson</authorinitials><revremark>Make new SMTP clients subpage, done with Exim auth</revremark></revision><revision><revnumber>22</revnumber><date>2007-11-12 15:47:25</date><authorinitials>MichaelOlson</authorinitials><revremark>Mention plain text</revremark></revision><revision><revnumber>21</revnumber><date>2007-11-12 06:36:55</date><authorinitials>MichaelOlson</authorinitials><revremark>Add note about state of Exim auth</revremark></revision><revision><revnumber>20</revnumber><date>2007-11-08 05:52:29</date><authorinitials>MichaelOlson</authorinitials><revremark>Remove domtool part; it isn't needed after all</revremark></revision><revision><revnumber>19</revnumber><date>2007-11-08 05:32:59</date><authorinitials>MichaelOlson</authorinitials></revision><revision><revnumber>18</revnumber><date>2007-11-08 05:32:19</date><authorinitials>MichaelOlson</authorinitials><revremark>Make ssh tunnel for dumb mail clients a separate section</revremark></revision><revision><revnumber>17</revnumber><date>2007-11-04 22:51:39</date><authorinitials>AdamChlipala</authorinitials><revremark>Fix typo</revremark></revision><revision><revnumber>16</revnumber><date>2007-11-01 22:43:57</date><authorinitials>MichaelOlson</authorinitials><revremark>add mailing lists section</revremark></revision><revision><revnumber>15</revnumber><date>2007-11-01 22:40:02</date><authorinitials>MichaelOlson</authorinitials><revremark>Add sending mail section</revremark></revision><revision><revnumber>14</revnumber><date>2007-11-01 22:11:15</date><authorinitials>MichaelOlson</authorinitials><revremark>fix link to domtool user guide</revremark></revision><revision><revnumber>13</revnumber><date>2007-11-01 22:10:10</date><authorinitials>MichaelOlson</authorinitials><revremark>mention domtool user manual, add configuring email clients sect</revremark></revision><revision><revnumber>12</revnumber><date>2007-11-01 22:00:32</date><authorinitials>MichaelOlson</authorinitials><revremark>Mention webmail. Maildir vs. mbox</revremark></revision><revision><revnumber>11</revnumber><date>2007-11-01 21:53:49</date><authorinitials>MichaelOlson</authorinitials><revremark>Improve filtering section</revremark></revision><revision><revnumber>10</revnumber><date>2007-11-01 20:54:58</date><authorinitials>MichaelOlson</authorinitials><revremark>Fix some subpage links</revremark></revision><revision><revnumber>9</revnumber><date>2007-11-01 20:39:32</date><authorinitials>MichaelOlson</authorinitials><revremark>Add link to SpamAssassin subpage</revremark></revision><revision><revnumber>8</revnumber><date>2007-11-01 20:37:55</date><authorinitials>MichaelOlson</authorinitials><revremark>Link to VirtualMail subpage</revremark></revision><revision><revnumber>7</revnumber><date>2007-11-01 20:14:20</date><authorinitials>MichaelOlson</authorinitials><revremark>Explain Delivery sectin</revremark></revision><revision><revnumber>6</revnumber><date>2007-11-01 20:13:26</date><authorinitials>MichaelOlson</authorinitials><revremark>Move IMAP and POP instructions here</revremark></revision><revision><revnumber>5</revnumber><date>2007-11-01 20:07:31</date><authorinitials>MichaelOlson</authorinitials><revremark>Fix links</revremark></revision><revision><revnumber>4</revnumber><date>2007-11-01 20:06:36</date><authorinitials>MichaelOlson</authorinitials><revremark>Link to exim and procmail subpages</revremark></revision><revision><revnumber>3</revnumber><date>2007-11-01 19:52:22</date><authorinitials>MichaelOlson</authorinitials><revremark>Shorten name</revremark></revision><revision><revnumber>2</revnumber><date>2007-11-01 19:51:53</date><authorinitials>MichaelOlson</authorinitials><revremark>Mention quotas.  Begin work on rest.</revremark></revision><revision><revnumber>1</revnumber><date>2007-10-25 01:15:50</date><authorinitials>MichaelOlson</authorinitials><revremark>Initial contents</revremark></revision></revhistory></articleinfo><para>This is the chapter of the <ulink url="https://wiki.hcoop.net/MemberManual/Email/MemberManual#">MemberManual</ulink> that describes how to receive and manage your email. </para><section><title>Quick Setup</title><para>IMAP: <code>mail.hcoop.net:993</code> (SSL) or <code>mail.hcoop.net:143</code> (STARTTLS) - use the hcoop username only, or a virtual email address </para><para>SMTP: <code>mail.hcoop.net:465</code> (TLS) </para><para>POP3: <code>mail.hcoop.net:995</code>.  If you're using Thunderbird, make sure to uncheck &quot;Use secure authentication&quot;.  Do not use port 110; it is not available. </para></section><section><title>Introduction</title><para>HCoop offers a variety of ways to wrangle and access your email.  Your email address is your login name, <code>@hcoop.net</code>.   </para><para>Email sent to any of your HCoop-managed domains can be configured using Domtool.  Please consult the <ulink url="https://wiki.hcoop.net/MemberManual/Email/DomTool/UserGuide#">Domtool User Guide</ulink> for details on how to set that up. </para><para>We use the Maildir format (that is, a directory which contains files, each file containing exactly one message) rather than the mbox format (where all messages reside in one large mbox file). </para><para>By default, all email is delivered to your <code>~/Maildir</code> directory.  This directory is created for you when your account is created.  So please do not delete the <code>~/Maildir</code> directory if you value mail delivery and access. </para></section><section><title>Delivery</title><para>This section contains some topics relating to email delivery. </para><section><title>Quotas</title><para>The <code>~/Maildir</code> directory resides on its own volume, and has a separate quota from the rest of your home directory. </para><para>Before copying over any existing email, be sure that you have enough disk space in your quota.  Log into <code>ssh.hcoop.net</code> and run </para><screen><![CDATA[fs listquota ~/Maildir]]></screen><para>This will give you the name of your mail volume, available space (in MB), used space (in MB), the percentage of your volume used, and the percent of space used on AFS by all HCoop volumes. </para><para>If you need more space, just <ulink url="https://members.hcoop.net/portal/quota">request a quota change</ulink> using the portal. </para></section><section><title>Sub Addresses</title><para>All mail address support sub-addressing in the form <code>mailbox+$address@domain</code> which is delivered to <code>mailbox@domain</code>. This allows you to easily generate one-time use addresses that can be blocked by a filter later if the source ends up spamming you without resorting to a catch-all, and more generally to make it easier to filter your mail (e.g. <ulink url="https://wiki.hcoop.net/MemberManual/Email/ClintonEbadi#">ClintonEbadi</ulink> uses <code>clinton+amazon</code>, <code>clinton+paypal</code>, etc. and procmail rules for filing them into folders). </para></section><section><title>Filtering</title><para>Both Exim filters and Procmail are available.  You can use either procmail or an Exim filter, but not both.  Here are some considerations for deciding which one to use. </para><itemizedlist><listitem><para>If you are not familiar with procmail, and simply want to send mail to another email address, using an Exim filter will be best. </para></listitem><listitem><para>If you want to use a more readable syntax, which uses <code>if ... then</code> statements, then using an Exim filter instead of procmail will be more tolerable. </para></listitem><listitem><para>If you already know procmail, you can use it. </para></listitem></itemizedlist><para>It is recommended that you not use procmail going forward because it has been unmaintained for about a decade, and can have reliability issues during delivery. </para><para>Please read the following subpages for specific information on each method. </para><itemizedlist><listitem><para><ulink url="https://wiki.hcoop.net/MemberManual/Email/MemberManual/Email/EximFilter#">Exim filter instructions</ulink> </para></listitem><listitem><para><ulink url="https://wiki.hcoop.net/MemberManual/Email/MemberManual/Email/Procmail#">Procmail instructions</ulink> </para></listitem></itemizedlist></section><section><title>Forwarding</title><para>If you want email sent to your HCoop email address to be forwarded elsewhere, you can do that as follows. </para><itemizedlist><listitem><para>Make a <code>.public/.forward</code> file in your home directory. </para></listitem></itemizedlist><para><emphasis role="strong">If you are forwarding to GMail</emphasis>: you <emphasis>must</emphasis> read <ulink url="https://support.google.com/mail/bin/answer.py?hl=en&amp;answer=175365">Google's Best Mail Practices</ulink> document to avoid causing all coop mail to be flagged as spam. Currently, what you can do on the delivery side is: </para><itemizedlist><listitem><para>Do not enable a default alias (catch-all address). This is the number one thing you can do to help the coop avoid the wrath of Google; when you have a catch-all you will more likely than not receive several thousand spam messages per month. Often, Google rejects them upon forwarding so you never see them, but it wastes resources for us and makes Google think we're spammers. </para></listitem><listitem><para>Add your hcoop mail account as an addition identity in gmail. According to Google &quot;Go to your Mail settings and Accounts tab and add the address you are forwarding from to 'Send mail as'. This is a new feature from user requests, where Gmail will detect that you forwarded from that account and help prevent displaying a phishing warning.&quot; </para></listitem></itemizedlist><para><anchor id="official.gmail"/> </para><section><title>Official Mail and Gmail</title><para>Gmail has decided that official communications from Hcoop are spam for reasons they prefer to keep mysterious. To help you receive official communications, there are a few steps you should take. </para><itemizedlist><listitem><para>Remove the spam tag from any official mail that gets classified as spam </para></listitem><listitem><para>Add a filter for &quot;<code>from:(*@*hcoop.net)</code>&quot; with the setting &quot;Never send to Spam&quot; (see Google's <ulink url="http://support.google.com/mail/bin/topic.py?hl=en&amp;topic=1669049&amp;parent=1668963&amp;ctx=topic">Using filters and labels</ulink> documentation). </para><itemizedlist><listitem><para>In January 2013, you could do this by searching for the above text and clicking the down arrow in the search box to create a filter from the current search </para></listitem></itemizedlist></listitem></itemizedlist></section></section><section><title>Dealing with spam</title><para>Note that scanning for spam must be manually enabled for each account with &quot;setsa on&quot; from the terminal. A virtual account would use &quot;setsa <ulink url="mailto:user@domain.com">user@domain.com</ulink> on&quot;. </para><para>Spam is an inevitable fact of life.  See the <ulink url="https://wiki.hcoop.net/MemberManual/Email/MemberManual/Email/SpamAssassin#">SpamAssassin subpage</ulink> for details on using SpamAssassin, which is our preferred solution to the spam problem. </para></section><section><title>Configuring Mail On Your Domain</title><para>If you use the domtool <ulink url="https://wiki.hcoop.net/MemberManual/Email/DomTool/Examples#Domains">dom</ulink> type and are using HCoop's DNS servers, mail will be handled automatically. </para><para>If you are using another DNS provider, you will need to: </para><itemizedlist><listitem><para>Use the <code>handleMail</code> action in your domain to enable mail handling by HCoop's mail server </para></listitem><listitem><para>Create the DNS record <code>MX 1 mail.hcoop.net.</code> to have mail routed through HCoop's mail server </para></listitem></itemizedlist><section><title>Changing Default Behavior</title><para>If you are using <ulink url="https://wiki.hcoop.net/MemberManual/Email/DomTool/Examples#Domains">Easy_domain</ulink>, mail routing for your domain is controlled by the environment variables <code>DefaultAlias</code> and <code>DefaultAliasSource</code>. By default, <code>$your-hcoop-username@$domain</code> is routed to your local HCoop mail account. You can override <code>DefaultAliasSource</code> to use another address, or a catch-all. Additional aliases can be added using the <code>emailAlias from to</code> action. For example, assuming a hypothetical user <code>alice</code>: </para><screen><![CDATA[dom "foo.com" where
  DefaultAliasSource = userSource "bar";
with
end;
]]><![CDATA[
dom "baz.com" where
  DefaultAliasSource = defaultSource;
with
end;
]]><![CDATA[
dom "quux.com" with
  emailAlias "bob" "bob@elsewhere.com";
  emailAlias "admin" "alice";
end;
]]><![CDATA[
dom "foobar.com" where
  DefaultAlias = false;
with
  emailAlias "bazquux" "alice";
end;]]></screen><itemizedlist><listitem><para>Instead of <code>alice@foo.com</code>, <code>bar@foo.com</code> would be delivered to alice's local mail account, and all other addresses at <code>foo.com</code> would be rejected </para></listitem><listitem><para>Any address at <code>baz.com</code> would be delivered to alice's local mail account </para></listitem><listitem><para><code>alice@quux.com</code> would be delivered to alice's local mail account thanks to <code>DefaultAliasSource</code>. <code>bob@quux.com</code> would be forwarded to <code>bob@elsewhere.com</code>. Additionally, <code>admin@quux.com</code> would also be delivered to alice's local mail account. All other addresses at <code>quux.com</code> would be rejected. </para></listitem><listitem><para><code>foobar.com</code> disables the default alias entirely, and instead <code>bazquux@foobar.com</code> is manually set to deliver mail to alice's local mail account. All other addresses at <code>foobar.com</code> would be rejected. </para></listitem></itemizedlist><para>See <ulink url="https://wiki.hcoop.net/MemberManual/Email/DomTool/Examples#Mail">DomTool/Examples#Mail</ulink> documents how to configure more complicated setups including aliasing a single address to multiple targets. </para></section></section><section><title>Virtual mailboxes</title><para>Virtual mailboxes are a good way to give someone a &quot;vanity address&quot; on one of your domains, where they can receive and check email.  See the <ulink url="https://wiki.hcoop.net/MemberManual/Email/MemberManual/Email/VirtualMail#">Virtual Mail subpage</ulink> for full details on how to use them. </para></section><section><title>Mailing lists</title><para>Instructions for setting up mailing lists on your domain are available on the <ulink url="https://wiki.hcoop.net/MemberManual/Email/MemberManual/Email/MailingLists#">Mailing Lists subpage</ulink>. </para></section></section><section><title>Access</title><para>This section explains how to access your email. </para><section><title>Webmail</title><para>HCoop has a webmail interfaces that allow you to access your email using a web browser. </para><para>It is powered by Roundcube and is available at <ulink url="https://webmail.hcoop.net"/>. It uses fancy AJAX and requires a fairly modern browser. </para></section><section><title>Configuring email clients</title><para>Please consult the <ulink url="https://wiki.hcoop.net/MemberManual/Email/MemberManual/Email/Clients#">email clients subpage</ulink> for examples of how to get IMAP and POP3 access working with various email clients. </para></section></section><section><title>Sending Mail</title><para>When at all possible, send mail through our mail hub. In the past, you could send from arbitrary machines, but the self-appointed spam police of the world have decided that mail for a domain originating from multiple locations is a sure sign of spamming. Additionally, it is highly likely that your ISP's entire netblock has been blacklisted already. If you are using your hcoop.net address you <emphasis role="strong">must send mail through us</emphasis> because our SPF records mandates it in order to reduce the likelihood Google et al will flag our messages to members as spam. </para><para>Configure <code>mail.hcoop.net</code> as the outgoing SMTP server in your mail client.  You can use either port 25 or port 465.  You must enable TLS SMTP auth, and you will need to authenticate with the same username and password that you use to get mail from POP3 or IMAP. Virtual mailbox names and passwords may be used here. <emphasis role="strong">The server will not query you for a username and password by default.</emphasis> Thus, you <emphasis>will</emphasis> get confusing error messages if you don't configure your client to attempt to authenticate with plaintext SMTP auth using TLS. </para><para>The SMTP server requires a TLS aware mail client.  MacOS X &lt;= 10.6 Mail, Outlook, and Opera do not seem to support this at the moment.  Mozilla supports TLS and runs on MacOS X, Windows and Linux.  Mail on OS X 10.7 (Lion) supports TLS for SMTP, but it must be configured using the account preferences dialog rather than the initial account setup wizard. </para><para>You may also want to reconfigure your domain to use <code>addDefaultSPF</code> which sets an SPF record indicating that all mail for your domain will go through our mail servers (more generally, any mail exchanger you've set). If you ever send mail from another host by changing the <code>From</code>, you do not want to do this as it would increase the likelihood that mail is marked as spam. </para><section><title>ISPs that block SMTP</title><para>Some ISPs and possibly other networks discriminate against the SMTP protocol.  Some block or filter in or outgoing SMTP altogether. </para><para>If you need to send mail using HCOOP's mail server and experience long delays, this is likely due to your network.  You can test out the mail server's responsiveness by doing &quot;telnet mail.hcoop.net 25&quot; on both your local machine and <code>ssh.hcoop.net</code>.  If you immediately get a &quot;220&quot; banner, the server is working fine and you can type &quot;QUIT&quot;. </para><para>To work around this issue, you can use <code>mail80.hcoop.net</code> as the server, and configure your email client to send mail through port 80. </para></section><section><title>Mail clients that don't understand TLS</title><para>You can also set up a custom SSH tunnel to port 25 on <code>ssh.hcoop.net</code>, if your MUA can't/won't use TLS. </para></section><section><title>Configuring programs to send mail through HCoop</title><para>For information on how to send mail through HCoop's SMTP server, check out our <ulink url="https://wiki.hcoop.net/MemberManual/Email/MemberManual/Email/SMTPClients#">SMTP Clients</ulink> subpage. </para></section></section><section><title>Troubleshooting tips</title><itemizedlist><listitem><para>Sending test e-mails from an account where your HCoop e-mails are being forwarded to can produce misleading results. In Gmail, for example, the test e-mails can seem to disappear. Check for a <code>.public/.forward</code> file to make sure you know whether and how you have forwarding set up. </para></listitem></itemizedlist><!--rule (<hr>) is not applicable to DocBook--><para> <ulink url="https://wiki.hcoop.net/MemberManual/Email/CategoryMemberManual#">CategoryMemberManual</ulink> </para></section></article>