Difference between revisions of "SME Server:Documentation:Administration Manual:Chapter3"

From SME Server
Jump to navigationJump to search
(Added box templates)
 
(49 intermediate revisions by 5 users not shown)
Line 1: Line 1:
 +
<noinclude>{{Languages}}</noinclude>
 
===Your Internet Service Provider (ISP)===
 
===Your Internet Service Provider (ISP)===
 
Your Internet Service Provider or ISP is your connection to the Internet - it routes Internet data packets to and from your server. It also provides other essential services. This section of the user's guide reviews what ISPs offer and what the implications are in choosing among the various options available to you. While your ISP can also assist you in selecting and arranging the right Internet services for your organization, it's important to know the general range of services available, since not all ISPs offer all services.
 
Your Internet Service Provider or ISP is your connection to the Internet - it routes Internet data packets to and from your server. It also provides other essential services. This section of the user's guide reviews what ISPs offer and what the implications are in choosing among the various options available to you. While your ISP can also assist you in selecting and arranging the right Internet services for your organization, it's important to know the general range of services available, since not all ISPs offer all services.
  
−
{{DrawBoxWarning|content=If you are operating the product in "server-only" mode, you will need to review your gateway/firewall documentation and perhaps consult with your ISP regarding your configuration. For example, depending on your plans for the server, your ISP may need to publish DNS records associating your mail and/or web servers with your firewall IP address. You may also need to configure your firewall for port forwarding of services.<br />
+
{{warning box|If you are operating the product in "server-only" mode and want to use it for email services or to provide websites accessible on the internet, you will need to review your gateway/firewall documentation and perhaps consult with your ISP regarding your configuration. For example, depending on your plans for the server, your ISP may need to publish DNS records associating your mail and/or web servers with your firewall IP address. You may also need to configure your firewall for port forwarding of services.<br />
−
In server-only mode, the single Ethernet connection to the local network is "trusted" as being secure and packet filtering is disabled. For that reason, a server-only server must always be behind a local firewall. You should not directly connect such a system to the Internet via an Internet Service Provider.}}
+
In server-only mode, the single Ethernet connection to the local network is "trusted" as being secure and packet filtering is disabled. For that reason, a server-only server must always be behind a local firewall. '''You should not directly connect such a system to the Internet via an Internet Service Provider'''.}}
  
−
====Dedicated versus dialup connectivity====
+
====Different forms of connectivity====
 
Connectivity, also referred to as Internet access type, refers to the physical connection between your site and your ISP. How you connect to your ISP affects the speed of your Internet connection, which, in turn, impacts such things as how quickly your web site is displayed to visitors.
 
Connectivity, also referred to as Internet access type, refers to the physical connection between your site and your ISP. How you connect to your ISP affects the speed of your Internet connection, which, in turn, impacts such things as how quickly your web site is displayed to visitors.
  
−
Dedicated connectivity refers to a full-time connection to your ISP. Although they are more expensive than the alternative, dedicated connections are generally faster and allow you to use the full range of services on your server. There are several common types of dedicated connectivity. ADSL provides relatively fast data transmission over phone lines. A cable connection links you to your cable company, which provides you with many (though not all) of the same services as a traditional ISP. The speed of transmission over a cable network can vary widely (from quite fast to very slow) based in part on the usage within your neighborhood.
+
Dedicated connectivity refers to a full-time connection to your ISP and this is the usual way of connecting at this time.  
  
−
If you have dialup connectivity, your server is not permanently connected to the Internet. Rather, it connects to your ISP over a phone line using a modem or ISDN adapter . Because your connection to the Internet is not permanent, some of the services on your server cannot be provided to the outside world. For example, having your server host your external company web site would create a problem because whenever your server was not connected to the Internet, the web site would not be available. (However, it could certainly host an intranet web site because the local network would always be connected.)
+
Dedicated connections are generally faster and may allow you to use the full range of services on your server. There are several common types of dedicated connectivity:
 +
 
 +
*ADSL(2) provides relatively fast data transmission over phone lines.
 +
*FTTC (fibre to the cabinet) provides potentially very fast conenction via optical cables to the street cabinet and copper phone wires to the dwelling/office.
 +
*FTTP (fibre to the premises) where available offers very fast direct-to-premises optical connections which may be shared amongst dwellings/offices.
 +
*Direct optical connection via suppliers will have a terminator in the premises and can offer gigabit speeds or above.
 +
*Cable connection links you to your cable company, which provides you with many (though not all) of the same services as a traditional ISP. The speed of transmission over a cable network can vary widely (from quite fast to very slow) based in part on the usage within your neighborhood.
 +
*4G and soon 5G connection over the mobile network is an option in some rural situations that are outside the reach of fast physical connections.
 +
*Satellite connectivity: connection either one way (down only, with up over a physical link) or more commonly now two-way. This has had the problem of high latency when used with geo-stationary satellites. New low-earth satellite constellations are becoming available that solve this issue.
 +
 
 +
'''Dial-up'''
 +
 
 +
* Where all else fails, connection can be via dialup modems. With dialup connectivity, your server is not usually permanently connected to the Internet. Rather, it connects to your ISP over a phone line using a modem or ISDN adapter . Because your connection to the Internet is not permanent, some of the services on your server cannot be provided to the outside world. For example, having your server host your external company web site would create a problem because whenever your server was not connected to the Internet, the web site would not be available. (However, it could certainly host an intranet web site because the local network would always be connected.)
  
 
====The IP address====
 
====The IP address====
 
An IP address is an identifying number assigned to all devices connected to the Internet, and is used in routing information from one device to another. Like your phone number, your IP address enables other people to reach you. In our standard configuration, your ISP only needs to allocate one IP address for your network. It is assigned to your server, which will accept all the Internet data packets intended for your network and distribute them to the appropriate computer - much like an office receptionist is able to accept incoming calls and direct them to the appropriate extension.
 
An IP address is an identifying number assigned to all devices connected to the Internet, and is used in routing information from one device to another. Like your phone number, your IP address enables other people to reach you. In our standard configuration, your ISP only needs to allocate one IP address for your network. It is assigned to your server, which will accept all the Internet data packets intended for your network and distribute them to the appropriate computer - much like an office receptionist is able to accept incoming calls and direct them to the appropriate extension.
 +
 +
====IPv4 and IPv6 addressing====
 +
Everything in this manual to date refers to IPv4 (IP version 4) addressing. The world is running out -- well, technically-speaking ''has'' run out -- of IPv4 addresses. Various strategies have been adopted by ISPs to obscure and work-round this issue and much of the world is still running on IPv4.
 +
 +
Nonetheless IPv6 addresses will have to be used at some future point, although few ISPs offer direct IP6 connectivity even in 2021. For now, all in this manual concerns IPv4 -- the underlying system is however fully IPv6 capable. Considerable extra work is called for, so as to integrate that support into the system, and this is not a priority for now; eventually of course it will be. If you wish to contribute to this work, please consider volunteering or offering code.
 +
  
 
=====Static versus dynamic IP addressing=====
 
=====Static versus dynamic IP addressing=====
 
A static IP address never changes. It is permanently assigned to your server by your ISP.
 
A static IP address never changes. It is permanently assigned to your server by your ISP.
  
−
{{DrawBoxNote|content=Static IP addressing is preferable to dynamic IP addressing because it makes it easier for users on the Internet to connect to your services.}}
+
{{Note box|Static IP addressing is preferable to dynamic IP addressing because it makes it easier for users on the Internet to connect to your services.}}
  
 
Dynamic IP address assignment means that your IP address is assigned to you only temporarily and may be changed by your ISP. This makes it more difficult to ensure continuity of service to your network. Consider again our telephone number analogy. When your telephone number changes, you are able to place outgoing calls. However, until your new phone number is registered with Directory Services, other people are unable to look up your new number and place calls to you. Similarly, whenever your IP address changes, a record associating your server with its new IP address must be published with the equivalent of Directory Services (known as Domain Name Service or DNS) before incoming traffic can find you.
 
Dynamic IP address assignment means that your IP address is assigned to you only temporarily and may be changed by your ISP. This makes it more difficult to ensure continuity of service to your network. Consider again our telephone number analogy. When your telephone number changes, you are able to place outgoing calls. However, until your new phone number is registered with Directory Services, other people are unable to look up your new number and place calls to you. Similarly, whenever your IP address changes, a record associating your server with its new IP address must be published with the equivalent of Directory Services (known as Domain Name Service or DNS) before incoming traffic can find you.
  
−
If your IP address is dynamically assigned and you have a dedicated connection to your ISP (for example, with a typical cablemodem), you may find it helpful to use a dynamic DNS service . We strongly recommend you review Appendix B: Dynamic DNS services for more information about this worthwhile option.
+
If your IP address is dynamically assigned and you have a dedicated connection to your ISP (for example, with a typical cablemodem), you may find it helpful to use a dynamic DNS service . We strongly recommend you review [[SME_Server:Documentation:Administration_Manual:Appendix#Appendix_B._Dynamic_DNS_Services|Appendix B]]: Dynamic DNS services for more information about this worthwhile option.
  
 
=====Routable versus non-routable IP addresses=====
 
=====Routable versus non-routable IP addresses=====
 
If an IP address is analogous to your phone number, then a routable IP address is the equivalent of a full telephone number complete with country code and area code such as +1-613-555-1234. Using the same analogy, a non-routable address is the equivalent of an office extension. If your server is assigned a non-routable address, it cannot directly receive incoming Internet connections, which limits the services that it can provide to your site.
 
If an IP address is analogous to your phone number, then a routable IP address is the equivalent of a full telephone number complete with country code and area code such as +1-613-555-1234. Using the same analogy, a non-routable address is the equivalent of an office extension. If your server is assigned a non-routable address, it cannot directly receive incoming Internet connections, which limits the services that it can provide to your site.
 +
 +
The following three groups of IPv4 addresses are reserved for non-routeable use:
 +
 +
10.0.0.0 - 10.255.255.255 </br>
 +
172.16.0.0 - 172.31.255.255 </br>
 +
192.168.0.0 - 192.168.255.255 </br>
 +
 +
 +
The first and last of these groups are preferred for private networks:
 +
 +
"In August 2012, ARIN began allocating “172” address space to internet service, wireless, and content providers. There have been reports from the community that many network operators are denying access to devices having IP addresses from within the entire 172 /8 range. As a result, any device with a 172.x.x.x IP address may have difficulty reaching some sites on the global Internet." See [https://www.arin.net/reference/research/statistics/address_filters/ ARIN] for more on this.
 +
 +
{{warning box|If you wish to join two networks via VPN is is IMPERATIVE that they are on different IP blocks, e.g 192.168.100.0 and 192.168.200.0, for trafic to be routed between them.}}
  
 
====Arranging connectivity with your ISP====
 
====Arranging connectivity with your ISP====
Line 36: Line 68:
  
 
[[Image:Network1.png]]
 
[[Image:Network1.png]]
 +
 
Information provided to you by your ISP:
 
Information provided to you by your ISP:
 
* static IP address (or block of addresses from which you choose one)
 
* static IP address (or block of addresses from which you choose one)
Line 47: Line 80:
 
[[Image:Network2.png]]
 
[[Image:Network2.png]]
  
−
{{DrawBoxNote|content=In the tables below, please keep the following information in mind:
+
{{Note box|In the tables below, please keep the following information in mind:
 
* ISPs often supply the items marked * to your server by DHCP.
 
* ISPs often supply the items marked * to your server by DHCP.
 
* Some ISPs block outgoing HTTP connections, forcing you to use their proxy server. This interferes in a few minor ways with your server (e.g., the test for Internet connectivity will fail erroneously). However, using the ISP's proxy server will normally work fine.
 
* Some ISPs block outgoing HTTP connections, forcing you to use their proxy server. This interferes in a few minor ways with your server (e.g., the test for Internet connectivity will fail erroneously). However, using the ISP's proxy server will normally work fine.
 
}}
 
}}
  
−
1. You receive a routable, static IP address
+
1. You receive a routable, static IP address<br />
 +
 
 
Information provided to you by your ISP:
 
Information provided to you by your ISP:
 
* static IP address
 
* static IP address
Line 59: Line 93:
 
Order services from: Service List A
 
Order services from: Service List A
  
−
2. You receive a routable, dynamically assigned IP address and you elect to use a dynamic DNS service (We encourage you to review Appendix B: Dynamic DNS Services for a discussion of dynamic DNS services.)
+
2. You receive a routable, dynamically assigned IP address and you elect to use a dynamic DNS service (We encourage you to review [[SME_Server:Documentation:Administration_Manual:Appendix#Appendix_B._Dynamic_DNS_Services|Appendix B]]: Dynamic DNS Services for a discussion of dynamic DNS services.)<br />
 +
 
 
Information provided to you by your ISP:
 
Information provided to you by your ISP:
 
* gateway IP address*
 
* gateway IP address*
Line 68: Line 103:
 
Order services from: Service List B
 
Order services from: Service List B
  
−
3. You receive a routable, dynamically assigned IP address and you elect not to use a dynamic DNS service OR your IP address is non-routable.
+
3. You receive a routable, dynamically assigned IP address and you elect not to use a dynamic DNS service OR your IP address is non-routable.<br />
 +
 
 
Information provided to you by your ISP:
 
Information provided to you by your ISP:
 
* IP address of cablemodem or ADSL router ("gateway IP address")*
 
* IP address of cablemodem or ADSL router ("gateway IP address")*
Line 78: Line 114:
  
 
[[Image:Network3.png]]
 
[[Image:Network3.png]]
 +
 
Your ISDN adapter will connect to the ISDN connection installed by your ISP or local telecommunications provider. The software can work with external ISDN adapters and includes support for passive ISDN cards.
 
Your ISDN adapter will connect to the ISDN connection installed by your ISP or local telecommunications provider. The software can work with external ISDN adapters and includes support for passive ISDN cards.
  
−
{{DrawBoxWarning|content=While the software includes experimental support for ISDN cards, we do not provide technical support for the use of these cards as they have not yet been tested in a wide enough variety of environments.}}
+
{{Warning box|While the software includes experimental support for ISDN cards, we do not provide technical support for the use of these cards as they have not yet been tested in a wide enough variety of environments.}}
 +
 
 +
There are two possible configurations with dialup service:<br />
  
−
There are two possible configurations with dialup service:
 
 
1. Your ISP is able to meet all of the following three conditions:
 
1. Your ISP is able to meet all of the following three conditions:
 
* you receive a routable, static IP address
 
* you receive a routable, static IP address
Line 94: Line 132:
 
Order services from: Service List C
 
Order services from: Service List C
  
−
2. Your ISP is unable to meet all three of the above conditions
+
2. Your ISP is unable to meet all three of the above conditions<br />
 +
 
 
Information provided to you by your ISP:
 
Information provided to you by your ISP:
 
* dialup access number
 
* dialup access number
Line 138: Line 177:
 
* Internet news server (optional)
 
* Internet news server (optional)
  
−
{{DrawBoxWarning|content='''Note on Service List D (Multidrop Mail)'''<br>Service list D is applied to configurations where the publication of DNS records is not practical either because your IP address changes frequently or because it is non-routable. Because there is no published address receiving incoming network connections, this configuration does not allow you to host a web page or FTP site using your SME Server.
+
{{Warning box|'''Note on Service List D (Multidrop Mail)'''<br>Service list D is applied to configurations where the publication of DNS records is not practical either because your IP address changes frequently or because it is non-routable. Because there is no published address receiving incoming network connections, this configuration does not allow you to host a web page or FTP site using your SME Server.
  
 
In this case, e-mail is handled using a method called "multidrop", which involves temporarily storing all e-mail messages addressed to your domain in a POP mailbox at your ISP until your server connects and fetches them. Your POP mailbox must be large enough to hold the e-mail for your organization until it is fetched. If your primary ISP cannot supply this, you can use another ISP for your e-mail hosting.
 
In this case, e-mail is handled using a method called "multidrop", which involves temporarily storing all e-mail messages addressed to your domain in a POP mailbox at your ISP until your server connects and fetches them. Your POP mailbox must be large enough to hold the e-mail for your organization until it is fetched. If your primary ISP cannot supply this, you can use another ISP for your e-mail hosting.
Line 149: Line 188:
 
}}
 
}}
  
−
Service list D is applied to configurations where the publication of DNS records is not practical either because your IP address changes frequently or because it is non-routable. Because there is no published address receiving incoming network connections, this configuration does not allow you to host a web page or FTP site using your SME Server.
+
====Terms used in ordering connectivity and services====
−
 
 
−
In this case, e-mail is handled using a method called "multidrop", which involves temporarily storing all e-mail messages addressed to your domain in a POP mailbox at your ISP until your server connects and fetches them. Your POP mailbox must be large enough to hold the e-mail for your organization until it is fetched. If your primary ISP cannot supply this, you can use another ISP for your e-mail hosting.
 
  
−
As e-mail messages are delivered into the POP mailbox at your ISP, some of the addressee information is removed. To determine to whom the e-mail message is addressed, your server uses several heuristics. This works very well for normal person-to-person e-mail. However, messages from mailing lists (and other sources where the user's account name is not present in the headers) cannot be delivered. Any e-mail that cannot be delivered will be returned to the sender. If the e-mail cannot be returned to sender, it will be directed to the system administrator.
+
<!--'''ADSL (or DSL)'''
−
 
+
ADSL is a type of high-speed Internet access that uses regular phone lines  
−
Some ISPs add a header to each e-mail message as it enters the POP mailbox to assist in determining the addressee. One common header tag is: "X-Delivered-To". If your ISP does this, make note of the header tag used so that you can configure your server to look for it (explained in a later section).
+
and is available in many metropolitan areas.
−
 
 
−
Because of the potential problems involved with delivery of e-mail to multidrop mailboxes, we strongly encourage you to consider other means of mail delivery before resorting to using multidrop.||
 
−
|}
 
−
 
 
−
====Terms used in ordering connectivity and services====
 
−
'''ADSL (or DSL)'''
 
−
  ADSL is a type of high-speed Internet access that uses regular phone lines and is available in many metropolitan areas.
 
 
'''Domain Name'''
 
'''Domain Name'''
−
  This refers to theunique name attached to your organization on the Internet. For example, "tofu-dog.com" or "e-smith.com". If you don't have a domain name, your ISP can help you select one, ensure it is available, and register it.
+
This refers to the unique name attached to your organization on the Internet.  
 +
For example, "tofu-dog.com" or "e-smith.com". If you don't have a domain name,  
 +
your ISP can help you select one, ensure it is available, and register it.
 
'''DNS (Domain Name Service)'''
 
'''DNS (Domain Name Service)'''
−
  DNS, or Domain Name Service, refers to the software and protocols involved in translating domain names to IP addresses. Your server provides DNS lookup services for your local network, and your ISP typically also provides you with the IP addresses of DNS servers. These servers do not need to be configured into your server as the DNS server that is provided with your server will correctly resolve all local and Internet names.
+
DNS, or Domain Name Service, refers to the software and protocols involved  
 +
in translating domain names to IP addresses. Your server provides DNS lookup services  
 +
for your local network, and your ISP typically also provides you with the IP addresses  
 +
of DNS servers. These servers do not need to be configured into your server as the DNS
 +
server that is provided with your server will correctly resolve all local and Internet
 +
names.
 
'''DNS: Publication of DNS Address Records'''
 
'''DNS: Publication of DNS Address Records'''
−
  The publication of DNS address information allows other DNS servers to look up your domain information. Your ISP must publish DNS address records associating the name of your web server ("www.domain.xxx"), FTP server ("ftp.domain.xxx") and e-mail server ("mail.domain.xxx") with the IP address of your server.
+
The publication of DNS address information allows other DNS servers to look up  
 +
your domain information. Your ISP must publish DNS address records associating the  
 +
name of your web server ("www.domain.xxx"), FTP server ("ftp.domain.xxx") and e-mail  
 +
server ("mail.domain.xxx") with the IP address of your server.
 
'''DNS: Publication of DNS Mail (MX) Records'''
 
'''DNS: Publication of DNS Mail (MX) Records'''
−
  The publication of DNS mail (MX) records is the method used to inform Domain Name Services worldwide that all e-mail to your domain ("yourdomain.xxx") should be delivered to your e-mail server ("mail.yourdomain.xxx").
+
The publication of DNS mail (MX) records is the method used to inform Domain Name Services
 +
worldwide that all e-mail to your domain ("yourdomain.xxx") should be delivered to  
 +
your e-mail server ("mail.yourdomain.xxx").
 
'''ETRN'''
 
'''ETRN'''
−
  ETRN is a command used for dialup solutions in order to retrieve e-mail temporarily stored at your ISP
+
ETRN is a command used for dialup solutions in order to retrieve e-mail  
 +
temporarily stored at your ISP
 
'''Gateway IP Address'''
 
'''Gateway IP Address'''
−
   A gateway is the device on your network that forwards packets to and from the Internet.
+
   A gateway is the device on your network that forwards packets to and from the Internet.-->
 +
 
 +
[[Category:SME Server]] [[Category:Administration]]
 +
 
 +
See [https://wiki.koozali.org/SME_Server:Documentation:Glossary#Glossary Glossary]

Latest revision as of 09:43, 27 April 2021

Geographylogo.png Languages: 

English  • Deutsch  • français


Your Internet Service Provider (ISP)

Your Internet Service Provider or ISP is your connection to the Internet - it routes Internet data packets to and from your server. It also provides other essential services. This section of the user's guide reviews what ISPs offer and what the implications are in choosing among the various options available to you. While your ISP can also assist you in selecting and arranging the right Internet services for your organization, it's important to know the general range of services available, since not all ISPs offer all services.


Warning.png Warning:
If you are operating the product in "server-only" mode and want to use it for email services or to provide websites accessible on the internet, you will need to review your gateway/firewall documentation and perhaps consult with your ISP regarding your configuration. For example, depending on your plans for the server, your ISP may need to publish DNS records associating your mail and/or web servers with your firewall IP address. You may also need to configure your firewall for port forwarding of services.

In server-only mode, the single Ethernet connection to the local network is "trusted" as being secure and packet filtering is disabled. For that reason, a server-only server must always be behind a local firewall. You should not directly connect such a system to the Internet via an Internet Service Provider.


Different forms of connectivity

Connectivity, also referred to as Internet access type, refers to the physical connection between your site and your ISP. How you connect to your ISP affects the speed of your Internet connection, which, in turn, impacts such things as how quickly your web site is displayed to visitors.

Dedicated connectivity refers to a full-time connection to your ISP and this is the usual way of connecting at this time.

Dedicated connections are generally faster and may allow you to use the full range of services on your server. There are several common types of dedicated connectivity:

  • ADSL(2) provides relatively fast data transmission over phone lines.
  • FTTC (fibre to the cabinet) provides potentially very fast conenction via optical cables to the street cabinet and copper phone wires to the dwelling/office.
  • FTTP (fibre to the premises) where available offers very fast direct-to-premises optical connections which may be shared amongst dwellings/offices.
  • Direct optical connection via suppliers will have a terminator in the premises and can offer gigabit speeds or above.
  • Cable connection links you to your cable company, which provides you with many (though not all) of the same services as a traditional ISP. The speed of transmission over a cable network can vary widely (from quite fast to very slow) based in part on the usage within your neighborhood.
  • 4G and soon 5G connection over the mobile network is an option in some rural situations that are outside the reach of fast physical connections.
  • Satellite connectivity: connection either one way (down only, with up over a physical link) or more commonly now two-way. This has had the problem of high latency when used with geo-stationary satellites. New low-earth satellite constellations are becoming available that solve this issue.

Dial-up

  • Where all else fails, connection can be via dialup modems. With dialup connectivity, your server is not usually permanently connected to the Internet. Rather, it connects to your ISP over a phone line using a modem or ISDN adapter . Because your connection to the Internet is not permanent, some of the services on your server cannot be provided to the outside world. For example, having your server host your external company web site would create a problem because whenever your server was not connected to the Internet, the web site would not be available. (However, it could certainly host an intranet web site because the local network would always be connected.)

The IP address

An IP address is an identifying number assigned to all devices connected to the Internet, and is used in routing information from one device to another. Like your phone number, your IP address enables other people to reach you. In our standard configuration, your ISP only needs to allocate one IP address for your network. It is assigned to your server, which will accept all the Internet data packets intended for your network and distribute them to the appropriate computer - much like an office receptionist is able to accept incoming calls and direct them to the appropriate extension.

IPv4 and IPv6 addressing

Everything in this manual to date refers to IPv4 (IP version 4) addressing. The world is running out -- well, technically-speaking has run out -- of IPv4 addresses. Various strategies have been adopted by ISPs to obscure and work-round this issue and much of the world is still running on IPv4.

Nonetheless IPv6 addresses will have to be used at some future point, although few ISPs offer direct IP6 connectivity even in 2021. For now, all in this manual concerns IPv4 -- the underlying system is however fully IPv6 capable. Considerable extra work is called for, so as to integrate that support into the system, and this is not a priority for now; eventually of course it will be. If you wish to contribute to this work, please consider volunteering or offering code.


Static versus dynamic IP addressing

A static IP address never changes. It is permanently assigned to your server by your ISP.


Important.png Note:
Static IP addressing is preferable to dynamic IP addressing because it makes it easier for users on the Internet to connect to your services.


Dynamic IP address assignment means that your IP address is assigned to you only temporarily and may be changed by your ISP. This makes it more difficult to ensure continuity of service to your network. Consider again our telephone number analogy. When your telephone number changes, you are able to place outgoing calls. However, until your new phone number is registered with Directory Services, other people are unable to look up your new number and place calls to you. Similarly, whenever your IP address changes, a record associating your server with its new IP address must be published with the equivalent of Directory Services (known as Domain Name Service or DNS) before incoming traffic can find you.

If your IP address is dynamically assigned and you have a dedicated connection to your ISP (for example, with a typical cablemodem), you may find it helpful to use a dynamic DNS service . We strongly recommend you review Appendix B: Dynamic DNS services for more information about this worthwhile option.

Routable versus non-routable IP addresses

If an IP address is analogous to your phone number, then a routable IP address is the equivalent of a full telephone number complete with country code and area code such as +1-613-555-1234. Using the same analogy, a non-routable address is the equivalent of an office extension. If your server is assigned a non-routable address, it cannot directly receive incoming Internet connections, which limits the services that it can provide to your site.

The following three groups of IPv4 addresses are reserved for non-routeable use:

10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255


The first and last of these groups are preferred for private networks:

"In August 2012, ARIN began allocating “172” address space to internet service, wireless, and content providers. There have been reports from the community that many network operators are denying access to devices having IP addresses from within the entire 172 /8 range. As a result, any device with a 172.x.x.x IP address may have difficulty reaching some sites on the global Internet." See ARIN for more on this.


Warning.png Warning:
If you wish to join two networks via VPN is is IMPERATIVE that they are on different IP blocks, e.g 192.168.100.0 and 192.168.200.0, for trafic to be routed between them.


Arranging connectivity with your ISP

If you are going to be using your server in "server and gateway" mode, you will need to arrange for a connection to the Internet. Your ISP will help you connect your site and provide you with services that enable you to take advantage of the Internet (e.g. e-mail delivery). To some extent, the type of connection used determines the services needed. Therefore, we guide you first through arranging connectivity and then direct you to the appropriate list of services for each type of connection. The terms used in the following sections are defined at the end of this chapter.

To connect your site to the Internet, you not only need to arrange your physical connection (modem, ISDN, DSL, cable modem, etc.), but you also need to ensure that your server can locate the appropriate devices at your ISP's site. Your ISP will give you this information (e.g. IP addresses for their devices) which must eventually be entered into your server console (a straightforward process covered in a later chapter). Many ISPs use a DHCP server which can directly configure your server with some or all of these parameters.

Ordering a corporate ADSL or other commercial dedicated connection

Typically, your ISP will arrange for and configure your external hub and router. Alternatively, you may be required to install that hardware yourself under their direction. If a special phone line is required, the ISP will typically arrange that. It is most typical with corporate service that you receive a routable, static IP address. In fact, usually you will be allocated a block of routable, static IP addresses for your corporation - you will need only one for your server.

Network1.png

Information provided to you by your ISP:

  • static IP address (or block of addresses from which you choose one)
  • IP address of router ("gateway IP address")
  • subnet mask

Order services from: Service List A

Ordering cablemodem or residential ADSL service

Typically, your cable company or ADSL provider will install a configured cablemodem or ADSL router at your site. If you do not have cable access, your cable company will install it for you. ADSL connects to the ISP via a conventional phone line. If you require an additional phone line, it is typical for you to arrange that yourself. There are three possible configurations when ordering cablemodem or residential ADSL services.

Network2.png


Important.png Note:
In the tables below, please keep the following information in mind:
  • ISPs often supply the items marked * to your server by DHCP.
  • Some ISPs block outgoing HTTP connections, forcing you to use their proxy server. This interferes in a few minor ways with your server (e.g., the test for Internet connectivity will fail erroneously). However, using the ISP's proxy server will normally work fine.


1. You receive a routable, static IP address

Information provided to you by your ISP:

  • static IP address
  • IP address of cablemodem or ADSL router ("gateway IP address")
  • subnet mask

Order services from: Service List A

2. You receive a routable, dynamically assigned IP address and you elect to use a dynamic DNS service (We encourage you to review Appendix B: Dynamic DNS Services for a discussion of dynamic DNS services.)

Information provided to you by your ISP:

  • gateway IP address*
  • subnet mask*

Information provided by dynamic DNS service:

  • DNS service account name
  • DNS service password

Order services from: Service List B

3. You receive a routable, dynamically assigned IP address and you elect not to use a dynamic DNS service OR your IP address is non-routable.

Information provided to you by your ISP:

  • IP address of cablemodem or ADSL router ("gateway IP address")*
  • subnet mask*

Order services from: Service List D

Ordering a dialup connection

It is typical for you to purchase and install your own modem or ISDN adapter for your dialup connection. (Be sure to use a Linux-compatible modem - ~WinModems will not work.) Your modem connects to your ISP over a conventional phone line. If you require an additional phone line, it is typical for you to arrange that yourself.

Network3.png

Your ISDN adapter will connect to the ISDN connection installed by your ISP or local telecommunications provider. The software can work with external ISDN adapters and includes support for passive ISDN cards.


Warning.png Warning:
While the software includes experimental support for ISDN cards, we do not provide technical support for the use of these cards as they have not yet been tested in a wide enough variety of environments.


There are two possible configurations with dialup service:

1. Your ISP is able to meet all of the following three conditions:

  • you receive a routable, static IP address
  • your ISP will provide a secondary mail server for your domain, which receives e-mail when your server is not connected.
  • your ISP is able to accept the "ETRN command". (This command is used by the server to retrieve the mail held by the ISP's secondary mail server.)

Information provided to you by your ISP:

  • static IP address
  • dialup access number
  • dialup account name
  • dialup account password

Order services from: Service List C

2. Your ISP is unable to meet all three of the above conditions

Information provided to you by your ISP:

  • dialup access number
  • dialup account name
  • dialup account password

Order services from: Service List D

Arranging Services From Your ISP

In each of the previous sections on connectivity, we direct you to the appropriate list of services that should be ordered from your ISP.

Service List A
  • domain name set up and hosting
  • publication of DNS address records for your web server, FTP server and e-mail server
  • publication of DNS mail (MX) records
  • secondary mail server (optional)
  • Internet news server (optional)
Service List B

Services to order from ISP:

  • secondary mail server (optional)
  • Internet news server (optional)

Services From Dynamic DNS Service

  • domain name (depending on the service purchased, your dynamic DNS service may restrict what your domain name can be)
  • publication of DNS address records for your web server, FTP server and e-mail server
  • publication of DNS mail (MX) records
Service List C
  • PPP dialup access (with static IP)
  • domain name
  • publication of DNS address records for your e-mail server*
  • publication of DNS mail (MX) records
  • secondary mail server (ETRN must be supported)
  • Internet news server (optional)

Your web and FTP servers are available to the external world only when your server is connected to the Internet. DNS address records for web and FTP servers only need to be published if it is likely that someone external to your site will need to connect to them for a particular reason.

Service List D

Please read the important notes (below) on the limitations of this configuration.

  • PPP dialup access (if you are using dialup connectivity)
  • POP mailbox (with generous size limitation)
  • domain name - route all mail for domain name to the single POP mailbox
  • Internet news server (optional)


Warning.png Warning:
Note on Service List D (Multidrop Mail)
Service list D is applied to configurations where the publication of DNS records is not practical either because your IP address changes frequently or because it is non-routable. Because there is no published address receiving incoming network connections, this configuration does not allow you to host a web page or FTP site using your SME Server.

In this case, e-mail is handled using a method called "multidrop", which involves temporarily storing all e-mail messages addressed to your domain in a POP mailbox at your ISP until your server connects and fetches them. Your POP mailbox must be large enough to hold the e-mail for your organization until it is fetched. If your primary ISP cannot supply this, you can use another ISP for your e-mail hosting.

As e-mail messages are delivered into the POP mailbox at your ISP, some of the addressee information is removed. To determine to whom the e-mail message is addressed, your server uses several heuristics. This works very well for normal person-to-person e-mail. However, messages from mailing lists (and other sources where the user's account name is not present in the headers) cannot be delivered. Any e-mail that cannot be delivered will be returned to the sender. If the e-mail cannot be returned to sender, it will be directed to the system administrator.

Some ISPs add a header to each e-mail message as it enters the POP mailbox to assist in determining the addressee. One common header tag is: "X-Delivered-To". If your ISP does this, make note of the header tag used so that you can configure your server to look for it (explained in a later section).

Because of the potential problems involved with delivery of e-mail to multidrop mailboxes, we strongly encourage you to consider other means of mail delivery before resorting to using multidrop.


Terms used in ordering connectivity and services

See Glossary

Retrieved from "https://wiki.koozali.org/index.php?title=SME_Server:Documentation:Administration_Manual:Chapter3&oldid=40168"