Check the server requirements and create virual machine (VM)

Check firewall rules requirements and configure your firewall according to these rules. If you can’t create all the needed firewall rules, please contact Cyfox support team. STRONGLY ADVISED TO CREATE FIREWALL RULES AND ALLOW MONITORING AT LEAST FOR THE FIRST 2 WEEKS.

Download ISO and install a virtual machine. Follow the current guide and proceed with Mailsecure installation.

Whitelist Mailsecure VM in your email server, so your email server will accept all messages from Mailsecure VM.

If necessary, ask support team to make a migration form Pineapp server.

Proceed to step 9.

If there was no data migration from Pineapp server, then ask Mailsecure support team to add Customer and define username and password so you could login Mailsecure web panel.

Connect to the Mailsecure VM using a web panel and configure local domains.

Use this guide: add new local domain

Add at least one user to Mailsecure system

Use this guide: add new user

Connect to the Mailsecure VM using a web panel and configure LDAP and/or Office 365 connectors, so LDAP or Office 365 users will be automatically added to the Mailsecue VM database.
Use the next guides:
​Office 365: Create App and sync users
​Office 365: Create a new App secret key
If you are not using connectors, please add users manually.

Connect to the Mailsecure VM using a web panel and configure Smarthost (sending emails from your server to Mailsecure VM).

Test Smarthost (local to remote): send a test message from your smarhost to exernal email address and check if the message is visible in Mail Traffic Manager.
​
For example your Mailsecure host IP is 1.2.3.4. You configured smarthost.com domain as smarthost, external recepient mailbox is [email protected] and the sender smarthost mailbox is [email protected]
- Use telnet command to connect to your host telnet 1.2.3.4 25
- Identify yourself to the SMTP host EHLO smarthost.com
- Send command MAIL FROM: <[email protected]>
- Send command RCPT TO: <[email protected]>

- Type Data and press Enter

- Send command Subject: Test

- Type . and press Enter
- If you got the confirmation of successfully sent email, like 250 2.0.0 Ok: queued as ABC123456789 you can close telnet connection with the command QUIT
- Check if just sent message is present in your mailbox
​
A complete sample of your telnet session will look something like this:
​

If you got a response like 5.8.1 Domain auth for domain smarthost.com failed. Please add 1.1.1.1 to SPF or wait 1 hour for SPF resync. Or add 1.1.1. to manual allow record, or SASL LOGIN authentication failed: authentication failure please check your smarthost settings.

Test remote to local.

Send a test message to one of the mailboxes in Mailsecure VM and check if the message is visible in Mail Traffic Manager.

​

For example your Mailsecure host name IP is 1.2.3.4, remote host in your local network is example.com, recepient mailbox is [email protected] and the sender mailbox is [email protected]

- Use telnet command to connect from any host in your local network to your Mailsecure host telnet 1.2.3.4 25

- Identify yourself to the SMTP host EHLO example.com

- Send command MAIL FROM: <[email protected]>

- Send command RCPT TO: <[email protected]>

- Type Data and press Enter

- Send command Subject: Test

- Type . and press Enter

- If you got the confirmation of successfully sent email, like 250 2.0.0 Ok: queued as ABC123456789 you can close telnet connection with the command QUIT

- Check if just sent message is present in your mailbox

​

A complete sample of your telnet session will look something like this:

Change the MX record to Mailsecure VM.

Create SPF record pointing to Mailsecure server IP address.

!!! Important!!!

To avoid "TLS handshakes" failures between sending and receiving mail servers, please create reverse DNS record for the server IP address, pointing to the domain name in used TLS certificate.

Wait for installation to begin.