Repository navigation
Control Panel Pages
This page began as a chapter of the 6.2.10 manual and has been corrected for 6.2.24. The Control Panel's pages are grouped differently now, so the paths below use today's groups; the TLS ports 465, 993 and 995 exist only after you create them on the TCP/IP ports page (a fresh install seeds 25, 587, 110 and 143); and everything added since 6.2.10 is in Changes Since 6.2.10. Where a value here disagrees with the Settings Reference, which is generated from the code, the reference is right.
| Page | What it is for |
|---|---|
| Welcome | Quick-action tiles for the common jobs |
| Dashboard | Live counters and charts for processed mail, spam, viruses and sessions — Live, 24 hours, 7 days or 30 days — and a summary of what still needs doing outside the server |
| Monitoring & troubleshooting → Server status | Version, state (Pause/Resume), uptime, database, session and message counters, configuration warnings; in the tree after 6.2.27 (not yet released) the update check, download and install buttons |
| Monitoring & troubleshooting → Delivery queue | Outbound mail waiting; retry or delete individual messages |
| Monitoring & troubleshooting → Live logs | Real-time colour-coded log tail |
| Monitoring & troubleshooting → Diagnosing stalled mail | Which half stalled (accepting or delivering), debug logging on and off, the settings that bound a session |
| Monitoring & troubleshooting → Message trace | What happened to one message, by sender or recipient (needs MessageTraceEnabled) |
| Monitoring & troubleshooting → External setup | Everything this server needs done outside it — DNS records, key files, trusted lists — and the state of each |
| Monitoring & troubleshooting → DNS records | The SPF, DKIM, DMARC, MTA-STS and TLS-RPT records each domain should publish, with a live check |
| Monitoring & troubleshooting → REST API keys | Scoped, expiring credentials for the REST API |
| Accounts & domains → Domains (on-screen "Domains & accounts") | Domains, accounts, aliases, distribution lists, domain aliases, DKIM |
| Mail flow & delivery → Rules (on-screen "Global rules") | Server-wide mail rules |
| Connections & protocols → Protocols | Enable/disable SMTP, IMAP, POP3 and their behaviour |
| Mail flow & delivery → Delivery of e-mail | Retry schedule and delivery limits, the smart-host relayer and its OAuth2, rule loop limit; in the tree after 6.2.27 (not yet released) PIPELINING, CHUNKING and hard-linked local copies |
| Mail flow & delivery → Routes | Per-domain delivery overrides |
| Accounts & domains → Public folders | Shared IMAP folders and their permissions |
| Spam & virus filtering → Spam filtering overview | Read-only judgement of the whole spam pipeline, each row linking to its page |
| Spam & virus filtering → Quarantine | Messages held as suspected spam: release, delete, expire (needs QuarantineEnabled) |
| Spam & virus filtering → Anti-spam settings | Thresholds, quarantine, SPF/DKIM/DMARC/ARC, host checks, greylisting, SpamAssassin, external filter engine, recipient tarpit |
| Spam & virus filtering → SURBL servers | URL blocklists checked against message bodies |
| Spam & virus filtering → DNS blacklists | IP blocklists checked against connecting servers |
| Spam & virus filtering → White list | Senders exempt from spam checking |
| Spam & virus filtering → Blocked senders | Claimed sender addresses and domains refused with a score |
| Spam & virus filtering → Greylisting white list | Senders exempt from greylisting only |
| Spam & virus filtering → Virus scanning overview | Read-only judgement of whether the configured scanners can actually run |
| Spam & virus filtering → Anti-virus settings | ClamAV, ClamWin or a custom scanner; action on detection; what to do when a scanner cannot run |
| Spam & virus filtering → Blocked attachments | Attachment-name wildcards (*.exe) to strip — only when attachment blocking is on in Anti-virus settings |
| Monitoring & troubleshooting → Logging | Log level, format, retention, JSON output |
| Access & abuse protection → Authentication | OAuth2/XOAUTH2 token authentication, password hashing and pepper, ports without AUTH |
| Access & abuse protection → Directory authentication (LDAP) | Authenticate mailbox passwords against a directory |
| Access & abuse protection → Directory synchronisation | Provision mailboxes from the directory, preview then apply |
| Access & abuse protection → Administrative access | Administrator password, mailbox password policy, two-factor authentication |
| Access & abuse protection → Auto-ban | Failed-logon banning, per-name lockout, logon tarpit |
| Access & abuse protection → IP ranges | Who may connect, authenticate and relay |
| TLS & certificates → SSL certificates | Certificates available to TLS ports |
| TLS & certificates → SSL/TLS | TLS versions, ciphers, key-exchange groups, session resumption |
| TLS & certificates → Transport encryption overview | Read-only judgement of TLS versions, ciphers, ports and certificates |
| TLS & certificates → Transport security | MTA-STS, DANE, DNSSEC, ARC, TLS-RPT |
| TLS & certificates → Certificates (ACME) | Automatic Let's Encrypt issuance and renewal |
| Maintenance → Server limits & expert settings | DPAPI secrets, fsync, consistency checking, limits |
| Connections & protocols → TCP/IP ports | Listening ports and their SSL bindings |
| Connections & protocols → Web services & autoconfiguration | The HTTP/HTTPS listener for Thunderbird/Outlook autoconfiguration and MTA-STS policy hosting |
| Connections & protocols → DNS resolver | Name servers, the Windows DNS cache, when DNSBL checks run |
| Mail flow & delivery → Incoming relays | Upstream gateways (spam filters, load balancers) whose IP addresses should not count as the connecting client in anti-spam host checks |
| Monitoring & troubleshooting → API & monitoring | REST API and the browser Control Deck, Prometheus/OpenTelemetry monitoring and metric history, Windows Event Log, ManageSieve, shutdown drain; in the tree after 6.2.27 (not yet released) the live-update settings |
| Maintenance → Performance | Caching, connection and thread tuning |
| Maintenance → Advanced | Default domain, IPv6 preference, mirroring and archiving, disk-space limits, the scripting engine |
| Maintenance → Event scripts | VBScript/JScript event handlers |
| Mail flow & delivery → Server messages | The text of bounces and system messages |
| Accounts & domains → Groups | Account groups, used for public-folder permissions |
| Maintenance → Backup & restore | Backup configuration and scheduling |
| Monitoring & troubleshooting → MX query | Look up any domain's MX records from this server |
| Mail flow & delivery → Server sendout | Send a message to every account (maintenance notices) |
| Monitoring & troubleshooting → Diagnostics | Built-in self-test |
| About | Version, licence, build information |
The remaining pages are shown here for completeness. The screenshots were captured from a 6.2.10 build: the sidebar they show is the older tree, and the page pictured as "Advanced and scripting" is now titled "Advanced". Today's tree is the one in Control Panel Reference, section 5.
Connections & protocols → Protocols — enable or disable SMTP, IMAP and POP3 and tune their behaviour:
Maintenance → Performance — caching, connection and thread tuning:
Maintenance → Advanced — default domain, mirroring and archiving, disk-space limits, the scripting engine:
Mail flow & delivery → Server messages — the text of bounces and system messages:
Accounts & domains → Groups — account groups, used for public-folder permissions:
Mail flow & delivery → Server sendout — send a message to every account, for maintenance notices:
About — version, licence and build information:
