WebClient Database

What is PDO?

PDO is PHP Data Object layer that is used to access databases.

 IceWarp Server supports SQLite, MySQL, and MSSQL (ODBC) databases.  Webclient uses the database for caching folders and items.

What is the problem?

In older versions of IceWarp there were some bugs which could break Webclient database integrity. In most cases the problems appeared with SQLITE databases. For solving the problem it is enough deleting the database of the specific user with problems:

../icewarp/mail/domain_user/user/~webmail/cache.db

How to delete an account cache from WebClient database?

When a centralized database is used there are not single databases for every user, however there is only one database which keeps the records for all users and the administrator should delete the records from this database.

First the administrator should connect to the database with some SQL manager. It is possible to use the manager distributed with the database or use IceWarp SQL Manager instead (in console System ~ Tools ~ SQL manager).

Next step is selecting the Webclient database. For IceWarp SQL Manager the administrator should click on “Database” and write down the correct information for connecting the database.

The administrator has to execute two queries and he just have to exchange user@domain.com with the correct address of the user.

• 1 query: deleting from “Items” table:

DELETE i FROM item AS i INNER JOIN folder on i.folder_id = folder.folder_id

WHERE folder.account_id = 'user@domain.com'

It is very important to delete the information of the user from the table ITEM first!

This query must be fully executed without errors before executing the next query. Otherwise some  data may remain in the database and it may cause problems afterwards.

Administrator can perform the query again if it fails for some reason. When the query is executed without problems and 0 rows are affected, the administrator can be sure that no items for the account are longer cached in the database. 

• 2 query: deleting from “folder” Table

DELETE FROM folder WHERE folder.account_id = 'user@domain.com'

The administrator must check if the query finished without problems or repeat steps like with the query described above.

After these two queries are excuted all the folders and items of the user are deleted and when the users logs in webmail again the data will be re-cached.

Notice : If the user is using permanent session, that session should be deleted and the user should not be logged in webclient during whole operation.

We would appreciate any feedback on our knowledge base articles and any suggestions you might have about needed FAQ's. Please email us at

faqs@icewarp.com for any recommendations.

Thanks in advance.

Связующий ID генерируется почтовым сервером IceWarp и является уникальным для устройств, на которые он был установлен. Возможно, вам потребуется этот ключ, если вы переносите IceWarp на новый сервер, или если ваша лицензия нуждается в восстановлении.

IceWarp на Windows

Вы можете найти ваш уникальный связующий ID в консоли администрирования IceWarp, нажав на Помощь > Лицензии. Здесь находится Связующий ID.

Другой вариант - воспользоваться вебконсолью администрирования (webadmin). Для осуществления доступа, перейдите по ссылке "http://<domain:port>/admin/" и войдите в систему как администратор.

В дереве папок с левой стороны кликните на Лицензии, в открывшемся окне вы увидите связующий ID.

Icewarp на Linux

Вы можете найти ваш уникальный связующий ID в консоли удаленного администрирования IceWarp, нажав на Помощь > Лицензии (см. скриншот консоли).

Также вы можете использовать вебконсоль администрирования (webadmin). Перейдите по ссылке "http://<domain:port>/admin/" и войдите в систему как администратор.

В дереве папок с левой стороны кликните на Лицензии, в открывшемся окне вы увидите связующий ID.
Фактически, у вас есть те же возможности, что и у администратора в Windows, но вы также можете использовать Wizard, чтобы получить связующий ID.

Откройте установочную папку IceWarp (по умолчанию /opt/icewarp/) и запустите wizard.sh, нажмите enter и выберите "лицензионные действия", нажав на соответствующую цифровую клавишу. В лицензионных операциях выберите

"Показать связующий ID"

Major vulnerability CVE-2014-0160 has been discovered in the open-source OpenSSL library TLS extension, which allows attackers to obtain server private keys, and thus decrypt sensitive data in SSL communication between server and end users. IceWarp 11.0.0 for Windows and possibly all IceWarp Linux distributions are affected and can be vulnerable, unless patched with the newly released version of OpenSSL 1.0.1g.

Related OpenSSL security advisory:
https://www.openssl.org/news/secadv_20140407.txt

For detailed information see:
http://heartbleed.com

Online test for vulnerability (see also FAQ/status):
http://filippo.io/Heartbleed/

IceWarp customers should immediately apply the patch to their systems as follows.

IceWarp for Windows 11.0.0 32-bit

Please download the the latest version of IceWarp "11.0.0 build 3" from 8th April 2014 (or newer) from http://www.icewarp.com/downloads/public/ and install this version over your current installation.

Or download and apply the patch from http://www.icewarp.com/download/patches/openssl/2014/icewarp32.zip

IceWarp for Windows 11.0.0 64-bit

Please download the the latest version of IceWarp "11.0.0 build 3" from 8th April 2014 (or newer) from
http://www.icewarp.com/downloads/public/ and install this version over your current installation.

Or download and apply the patch from http://www.icewarp.com/download/patches/openssl/2014/icewarp64.zip

IceWarp for Windows 10.4.5 (and older)

These versions are NOT affected (OpenSSL 0.9.8 branch is not vulnerable).

IceWarp for Linux (all versions)

On Linux, IceWarp is using the system's own OpenSSL libraries. Ensure that OpenSSL in your operating system is updated to the latest version (already available in all distributions).

Installing the patch for Windows

1. Download the patch (32-bit or 64-bit version) from the link above.

2. Stop all IceWarp services.

3. Extract the dll files and copy them to the root folder of your IceWarp installation.

4. Start all IceWarp services.

Regenerating SSL Certificates

There is theoretical possibility the server's private key could have been read by an attacker. Customers who were vulnerable should therefore replace their server SSL certificate. If you are using a self-signed certificate, just generate a new one in console - Certificates - Create CSR/Certificate and set it as the default one. If you have a CA-issued certificate, please contact your CA, most offer a free replacement. If you have IceWarp CA issued certificate (paid for), please contact licensing@icewarp.com and we will issue a free replacement with the same validity.

Instructions for non-IceWarp users

Before the OpenSSL libraries are updated in other Windows programs, IceWarp provides a patch version of OpenSSL 1.0.1g library for Windows (libeay32.dll, ssleay32.dll) to general public as a courtesy to all internet users:

• Windows 32-bit http://www.icewarp.com/download/patches/openssl/2014/general32.zip
• Windows 64-bit http://www.icewarp.com/download/patches/openssl/2014/general64.zip

This guide will walk you through choosing, ordering, configuring, and installing the certificate using Icewarp. This guide mainly only provides information based on the individual using a Icewarp signed certificate.

OS: Windows/Linux; IceWarp Server Version: 11

Shortcuts in WebMail

This article lists available shortcuts you can use in WebMail and when it's possible to use them.

There are several short-cuts useable in WebMail but they have two restrictions:

Here is a list of possible short-cuts:

Note:
Keyboard shortcuts work only if message list is focused. Sometimes you need to click a message in the list first.

OS: Windows/Linux; IceWarp Server Version: 11/10

Summary

This article explains what to do when you get the '451 4.3.5 Requested action aborted: local error processing' error message.

Workaround

This error occurs when Icewarp Email Server is trying to read or write to disk and fails.

The most probable causes of this problem are listed below:

1. The directories set in the System > Storage > Directories tab do not exist.

2. The Icewarp service does not have the correct access permissions to the above directories.

3. A disk drive is full.

4. Your disk is somehow corrupted.

5. A user is very close to exceeding the mailbox size limit and he/she tries to send a message via WebMail and save such message to Sent folder.

Updated 30.06.2014, by Valentin

OS: Windows; IceWarp Server Version: 11

Services can be enabled or disabled  by user, group,mailing list or even per domainusing the IceWarp Admin Console (GUI).

However, it is sometimes easier to use the tool command line to fine tune or automatize service activation or desactivation.

To do global changes, you can use the command line tool.exe, found in Icewarp's root directory, which lets you access the API directly. You can look at the option list in the IceWarp Server API Reference manual . Look for the desired constant you want to change, for example the option where you can enable or disable Anti-Spam is called U_AS and the service for quarantine is U_Quarantine.

So if you want to disable quarantine for all users, you can run the following command :

tool Modify account *@* U_Quarantine 0

Or for a specific domain, tool Modify account *@domain.com U_Quarantine 0

OS: Windows/Linux; IceWarp Server Version: 11/10

If you have problems with SMTP sessions staying open too long,  hanging your server, then follow those instructions:

Enable mail queue logging via command line
Linux : sh tool.sh modify system C_System_Log_MailQueue 1
Windows : tool.exe modify system C_System_Log_MailQueue 1

It will start logging the processing logs in Icewarp\logs\queue\date.log file. Then you can find out at which stage of processing the session is locked. The logs look like:

SYSTEM [165C] 11:36:48 Message JOO40048 127.0.0.1
SYSTEM [165C] 11:36:48 Size filters end [00]
SYSTEM [165C] 11:36:48 Antivirus begin
SYSTEM [165C] 11:36:51 Antivirus end [00]
SYSTEM [165C] 11:36:51 Antispam begin
SYSTEM [165C] 11:36:51 Antispam end
SYSTEM [165C] 11:36:51 Content filters begin
SYSTEM [165C] 11:36:51 Content filters end [00]
SYSTEM [165C] 11:36:51 Rules begin
SYSTEM [165C] 11:36:51 Rules end [00]
SYSTEM [165C] 11:36:51 Antispam finalization begin
SYSTEM [165C] 11:36:51 Antispam finalization end
SYSTEM [165C] 11:36:51 Delivery
SYSTEM [165C] 11:36:51 Done

Once you see a long-lasting session in Session monitor, just find the thread ID (165C in the example above) and find it in the logs. That way we can troubleshoot where the processing hanged.

OS: Windows; IceWarp Server Version: 11/10

PSI account setup:

Download the PSI client from  http://psi-im.org/download and install it

To successfully setup an account in PSI, please ensure that the Icewarp Control and Instant Messaging services are running.

After installation will be PSI client will automatically start.

The following pop-up will appear:

Click on Use existing account

Fill XMPP Address and Password fields with the appropriate account details.

Now click on the Connection tab

Tick the box Manually Specify Server Host/Port:

Specify your server name or IP and the associated port used for Instant Messaging.

Then click on Save.

Now you should be able to start a comunication with your PSI client.

OS: Windows; IceWarp Server Version: 11/10

Introduction

When attempting to update the software, it is common for people to encounter the following error: "Cannot copy Config.exe". This error indicates that the Icewarp Control Console is still running somewhere on the machine.

Solution

In order to run the upgrade, the console must be closed.

If you cannot actually see the console, you can open up the Windows Task Manager, look for the process Config.exe and manually close it there.

OS: Windows; IceWarp Server Version: 11/10

Password change using the Tool command line

If you have required the console to authenticate and have forgotten the password you will need to either add a new user or change the password of an existing user. This can be done using the tool.exe program.

You will need to open a command prompt in Windows.

Once the DOS window loads please go to to the Program Files > IceWarp directory. You should see this in the DOS window, C:\Program Files\Icewarp, if not then you are not in the right directory.

If this is what you see then type Tool the command line. This should then populate options to use the tool.exe with. From here you can add a user or change the password for an existing user among other things. You can look over these variables and switches to build the command for what ever it is you are trying to do. In your case you want to change a users properties so the command would be as follow :

tool modify account user@domain.com u_password password

This will change the users password you specify.

The command below will make the user an administrator if he is not already.

tool modify account user@domain.com u_admin 1

Please change your password and you should be able to access the console once again.

To create a new user please use the command below, this will create a new administrator account that you could login with.

tool create account user@domain.com u_admin 1 u_password password

OS: Windows/Linux; IceWarp Server Version: 11/10

Configuring Pidgin

Once you download and install Pidgin, you'll need to configure your client to connect to your Icewarp Mail Server. Here's how:

1. Open Pidgin
   
   
2. A wizzard window will open, click on Add
   
   
   
   
3. • Protocol: XMPP
   • User Name: Joe (name)
   • Server: domain.com (This must be the email domain as listed in Icewarp Mail Server)
   • Resource: Pidgin (This is basically a profile name, as you can have multiple connections to the IM service with the same Account.
   • Password: Enter your password
   • Local alias: Put your Screen Name in this field
   • Remember password: check the box if you'd like Pidgin to remember your password (you won't be prompted to enter it each time you log in, if you select this option)Enter the following information in the Add Account window:
     
     
     
   
   
   
   
4. Click Add.

If you have questions about Pidgin, visit their FAQs.

OS: Windows/Linux; IceWarp Server Version: 11/10

Displaying Shared Calendars

This procedure is used to display the Calendar of a user who Shared it with "Everyone", or if you removed a Shared Calendar by accident.

To add a Shared Calendar to the Shared Calendars list, right click anywhere on the webmail browsing tree and select Add Shared Account

Select the user(s) who shared their calendars and click on Selected button for each user you want to select.

Then click OK.

Now if you browse to the Calendar section, the shared Calendar should be displayed.

OS: Windows; IceWarp Server Version: 11

Introduction

If you are using Microsoft SQL Server, you will need to setup a ODBC DSN (Data Source Name) manually. It will store the information  to connect to the database server.

Creating the ODBC link

On the machine hosting your IceWarp server. You MUST configure it twice in the exact same way for 32 and 64 bits.

Path for the 32 bits versions : C:\Windows\System32\odbcad32.exe

Path for the 64 bits version : C:\Windows\SysWOW64\odbcad32.exe

Run them as Administrator.

Choose the System DSN tab and click Add.

Select SQL Server

Click the Finish button.

Enter a name in the Name box (you will need to remember this for the configuration of Icewarp)

Type the server name or IP address in the Server box, then click Next

Then select With SQL Server authentication using a login ID and password entered by the user.

Enter your Login ID and the associated password

Then click on Client configuration...

Untick the box Dynamically determine port and make sure the port is 1433. Make sure this port is opened in your FireWall.

Click OK then Next

Tick the box Change the default database to and select the database you want to use, then click Next

On next screen click on Finish

Now time to Test the connection, so click on Test Data Source...

You should get the following screen :

Click on OK then OK

Reminder : those steps should be done twice

Configuring Groupware database settings

Go to the Administration console. Groupware > General and click on DB Settings...

• In Driver, select ODBC
• in Syntax select Microsoft SQL
• In Primary connection, enter your database server IP or name, username, password and select the database then test the connection by clicking on Test Connection to make sure it will work fine.
• Click on Create Tables then OK.

OS: Windows/Linux; IceWarp Server Version: 11/10

Auto-Responder

Icewarp allows users to define their own auto-responder via the WebMail interface. However only simple and static text messages can be designed there.

But you can use variables and commands which can make the auto-responder a very powerful feature.

The variables which can be used are:

%%From%%

%%From_Email%%

%%From_Alias%%

%%From_Domain%%

%%From_Name%%

%%To%%

%%To_Email%%

%%To_Alias%%

%%To_Domain%%

%%To_Name%%

%%Sender%%

%%Sender_Email%%

%%Sender_Alias%%

%%Sender_Domain%%

%%Recipient%%

%%Recipient_Email%%

%%Recipient_Alias%%

%%Recipient_Domain%%

%%Subject%%

%%Message-ID%%

%%Date%%

%%Time%%

%%Header%%

%%Body%%

%%Body_HTML%%

%%Size%%

%%IP%%

%%RFC822_Date%%

%%Header HeaderItem%%

Each of these variables returns actual values according to the message which was received.

The next powerful feature are the commands. You can set headers of messages by using these commands.

$$SetSender Sender$$

$$SetRecipient Recipient$$

$$SetActualTo To$$

$$SetActualFrom From$$

$$SetSubject Subject$$

$$SetReplyTo ReplyTo$$

$$SetMessageID MessageID$$

$$SetHeader Header$$

Example #1 (Simple Auto Responder):

Hello, I received your message at %%Time%% on the %%Date%% and the size was %%Size%% kB.

Example #2 (Advanced Auto Responder):

$$SetSubject Message Subject: %%Subject%%$$

$$SetSender autoresponder@yourdomain.com$$

Hello %%From_Name%%,

this is an automatically generated auto-responder message. I will answer your message as soon as possible.

Example #3 (Virus Warning):

Warning: Virus '%%VirusName%%' detected. Message was rejected.

Message's header:

%%Header%%

Why there is an attachment called winmail.dat included in the received mail?

Applicable only with Outlook 2007 and older versions

This is a feature of older versions of Outlook and Outlook Express. The winmail.dat file contains data to preserve message formatting. It applies only if e-mail is sent in RTF format (Outlook Rich Text format)

Further details can be found in the Microsoft knowledge base at http://support.microsoft.com/default.aspx?scid=kb;us-en;278061

This filter is not recommended because most notification messages and some messages from mailing lists are sent with an empty Mail From.

To reject such messages you have to create a Content Filter which will match these messages.

Go to the Mail Service  > Rules > Content Filters tab > Add button. Choose the Where Sender Matches some words condition and Reject/Accept/Delete message action.

Click on some word link and choose Matches (RegEx) in the Function pull-down menu. Now fill ^$ in the String text field (explanation - ^ denotes the start of the string and $ denotes the end so here you are looking for a string with nothing between the start and the finish, an empty string).

Confirm it by clicking OK. Reject action is chosen by default so you do not have to change that. Don't forget to give a  titile to the Content Filter if not done  already. Finish it by clicking OK again and the filter will be set properly.

Tip: You can set the action to copy to email address so you can audit the rejected messages.

 Author : Said Khammar

There are three colors and two letters which can be shown in icons in the Session History.

S means the Server session (Icewarp acts as receiver)

C means the Client session (Icewarp acts as sender)

Yellow denotes an Active session

Green denotes a Success

Red denotes a Failed session

You can view the commands being sent to the server and also the responses. If you have the service logging on, you can double click on the particular session and the whole history of the session protocol (log) will be displayed or can be saved into a file.

Server session

This type of session means that Icewarp Mail Server acts as Server in the Client/Server model. In other words, Icewarp Mail Server is the receiver of a message in this case. It can occur when:

• a client wants to send a message through the Icewarp Mail Server
• another server sends a message to Icewarp Mail Server because it is e.g. for users on Icewarp Mail Server

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:42 +0200 Connected

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:42 +0200 >>> 220-195.122.222.29 ESMTP to je gol; Thu, 22 Apr 2004 22:01:42 +0200

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:42 +0200 <<< HELO localhost

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:42 +0200 >>> 250 195.122.222.29 Hello localhost [127.0.0.1], pleased to meet you.

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:42 +0200 <<< MAIL From:<admin@Icewarpdemo.com>

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:42 +0200 >>> 250 2.1.0 <admin@Icewarpdemo.com>... Sender ok

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:42 +0200 <<< RCPT To:<ernekerzbynek@seznam.cz>

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:42 +0200 >>> 250 2.1.5 <ernekerzbynek@seznam.cz>... Recipient ok; will forward

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:42 +0200 <<< DATA

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:42 +0200 >>> 354 Enter mail, end with '.' on a line by itself

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:43 +0200 *** <admin@Icewarpdemo.com> <ernekerzbynek@seznam.cz> 1 348 00:00:00 OK

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:43 +0200 >>> 250 2.6.0 348 bytes received in 00:00:00; Message accepted for delivery

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:43 +0200 <<< QUIT

127.0.0.1 [00000A1C] Thu, 22 Apr 2004 22:01:43 +0200 >>> 221 2.0.0 195.122.222.29 closing connection

SYSTEM [00000A1C] Thu, 22 Apr 2004 22:01:43 +0200 Disconnected

This is a session when client on the server sends a message from Mail Client to the Icewarp Mail Server - it was received by Icewarp.

Client session

This type of session occurs only when Icewarp Mail Server sends along an already received message to another Mail Server.

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:50 +0200 Client session Connected

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:50 +0200 Client session <<< 220 email.seznam.cz - Email zdarma na cely zivot ESMTP

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:50 +0200 Client session >>> EHLO 195.122.222.29

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:50 +0200 Client session <<< 250 8BITMIME

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:50 +0200 Client session >>> MAIL From:<admin@Icewarpdemo.com>

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:50 +0200 Client session <<< 250 ok

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:50 +0200 Client session >>> RCPT To:<ernekerzbynek@seznam.cz>

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:50 +0200 Client session <<< 250 ok

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:50 +0200 Client session >>> DATA

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:50 +0200 Client session <<< 354 go ahead

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:51 +0200 Client session <<< 250 ok 1082664147 qp 10068

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:51 +0200 Client session *** <admin@Icewarpdemo.com> <ernekerzbynek@seznam.cz> 1 521 00:00:00 OK

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:51 +0200 Client session >>> QUIT

212.80.76.44 [00000F6C] Thu, 22 Apr 2004 22:01:51 +0200 Client session <<< 221 email.seznam.cz

SYSTEM [00000F6C] Thu, 22 Apr 2004 22:01:51 +0200 Client session Disconnected

This is a session where Icewarp Mail Server sends along the message which was received in previous Server session.

Important notes

Session history is stored just in the service memory. Only the last 100 sessions are stored in the memory, this memory is cleared with every single restart – this applies for all the services except for WebClient. WebClient runs PHP sessions and only the ones which are not active anymore are visible in the history.

For WebClient, the history shows all sessions which were not properly closed with a logout – so the session file exists in php\temp and because of this file, the entry shows up in history.

Also note that if you close WebClient by closing the browser, the corresponding session remains active for 15 minutes after browser shutdown and then shifts into history.

Author : Said Khammar

Symptoms:

You have installed Windows 2003 SP2 32-bit version and during installation process of IceWarp server you’ll get this error message:

"The digital signature verification failed. Please make sure you have the complete executable."

Cause:

Installer is not able to retrieve embedded certificate.

Solutions:

1.      Install required hotfixes from Microsoft site.

You will need at least two Hotfixes from MS update site, KB2893294 (http://www.microsoft.com/en-US/download/details.aspx?id=41221) and KB2808679 (http://www.microsoft.com/en-US/download/details.aspx?id=43765). Our recommendation is to always keep your Operating system updated with the latest patches and updates from your OS vendor.

2.      Unpack Installer and run setup.exe directly

You will need a program called 7-zip (http://www.7-zip.org/). Download and install it then rename Installer package to have .7z extension (e.g. IceWarpServer-11.1.2.7z) and open it. Extract the content of this archive somewhere and run setup.exe to start installation.

Applies to:

-          Microsoft Windows 2003 SP2 32-bit (x64 installations are NOT affected).

-          Microsoft Windows XP SP2 32-bit (x64 installations are NOT affected).

-          IceWarp Server 11.1.1 and later.