Using secure authenticated SMTP

From OCF Help

Secure authenticated SMTP connections for sending email are required as of March 9, 2007. To enable secure SMTP authentication, connect to mail.ocf.berkeley.edu using TLS or SSL on port 587 (unless noted otherwise below); see below for client-specific instructions.

If you are having trouble sending email, please check the following:

• you are using your OCF username (not your full email address) and password to authenticate
• the option for TLS and/or SSL is checked
• the option for "Secure Authentication" or "Secure Password Authentication" is not checked

Contents 1 How to configure your client for secure authenticated SMTP 1.1 Microsoft Outlook Express and Outlook 2000 for Windows 1.2 Microsoft Outlook 2002 (XP) and 2003 for Windows 1.3 Mozilla Thunderbird 1.5 and 2.0 1.4 Mozilla Thunderbird 0.x and 1.0 1.5 Apple Mail (Mac OS X) 1.6 Microsoft Entourage for Mac OS X 1.7 Eudora 5.1 or later (Light Mode) for Windows 1.8 Eudora 5.1 or later (Paid or Sponsored Mode) for Windows

How to configure your client for secure authenticated SMTP

The following are step-by-step instructions for configuring some of the more common email clients. For information on how to configure others, see the documentation for your client, or check the documentation for CalMail or Gmail.

We use a few conventions throughout the instructions below:

• File->Exit means "from the File menu, select Exit".
• Information you should enter exactly as shown is enclosed in 'single quotes'. When entering this information, omit the quotes.

If you are having trouble following these instructions, or have a correction, suggestion, or addition, please email staff@ocf.berkeley.edu.

Microsoft Outlook Express and Outlook 2000 for Windows

1. Select Tools->Accounts.
2. In the Internet Accounts window that opens, click on the Mail tab.
3. Select the name of your OCF email account, and click the Properties button.
4. In the Properties window that opens, click on the Servers tab.
5. If the value for "Outgoing Server (SMTP)" does not end in "ocf.berkeley.edu", you are not sending your outgoing mail via the OCF. DO NOT follow the rest of these instructions. Otherwise, ensure that the value for "Outgoing Server (SMTP)" reads 'mail.ocf.berkeley.edu'.
6. If it's not already checked, click on the checkbox for the setting "My server requires authentication" under "Outgoing Mail Server".
7. In the Properties window, click on the Advanced tab.
8. Under "Outgoing Mail (SMTP)", click on the checkbox for the setting "This server requires a secure connection "(SSL)", if it's not already checked.
9. Ensure that the port number next to "Outgoing Mail (SMTP)" reads '465'.
10. Click OK to save the settings and close the Properties window.

Microsoft Outlook 2002 (XP) and 2003 for Windows

1. Select Tools->E-mail Accounts.
2. In the E-mail Accounts wizard that opens, choose "View or change existing e-mail accounts", and click Next.
3. Select the name of your OCF email account, and click on the Change button.
4. If the value for "Outgoing Server (SMTP)" does not end in "ocf.berkeley.edu", you are not sending your outgoing mail via the OCF. DO NOT follow the rest of these instructions. Otherwise, ensure that the value for "Outgoing Server (SMTP)" reads 'mail.ocf.berkeley.edu'.
5. Click the More Settings button.
6. In the Internet E-Mail Settings window that opens, click the Outgoing Server tab.
7. If it's not already checked, click on the checkbox for the setting "My outgoing server (SMTP) requires authentication".
8. Ensure that the setting "Use same settings as my incoming mail server" is selected.
9. In the Internet E-mail Settings window, click the Advanced tab.
10. If it's not already checked, click on the setting for "This server requires an SSL-secured connection" (Outlook 2002) or "This server requires an encrypted connection (SSL)" (Outlook 2003) under "Outgoing server (SMTP)".
11. Ensure that the port number next to "Outgoing server (SMTP)" reads '465'.
12. Click OK to save the settings and close the Internet E-mail Settings window.
13. In the E-mail Accounts window, click Next.
14. Click Finish.

Mozilla Thunderbird 1.5 and 2.0

1. Open the Account Settings window. On Windows and Mac OS X, this is Tools->Account Settings; on Linux and other Unix systems, Edit->Account Settings.
2. In the Account Settings window that opens, select Outgoing Server (SMTP) in the left pane (you may need to scroll down to see this). The settings for outgoing mail are displayed on the right.
3. If there is no entry ending in "ocf.berkeley.edu" in the list of outgoing servers on the right, you are not sending any of your outgoing mail via the OCF. DO NOT follow the rest of these instructions. Otherwise, select the entry ending in "ocf.berkeley.edu", and click Edit.
4. In the SMTP Server window that opens, ensure that the "Server Name" is set to 'mail.ocf.berkeley.edu', and that the "Port" is set to '587'.
5. Under "Security and Authentication", click on "Use user name and password", if it's not already checked. Enter your OCF username into the "User Name" field.
6. Under "Use secure connection", select "TLS".
7. Click OK to close the SMTP Server window.
8. Click OK to save your settings and close the Account Settings window.

Mozilla Thunderbird 0.x and 1.0

Note that if you are still using these older versions of Thunderbird, you should upgrade, as Thunderbird 0.x and 1.0 no longer receive security support and have known security issues.

1. Open the Account Settings window. On Windows and Mac OS X, this is Tools->Account Settings; on Linux and other Unix systems, Edit->Account Settings.
2. In the Account Settings window that opens, select Outgoing Server (SMTP) in the left pane (you may need to scroll down to see this). The settings for outgoing mail are displayed on the right.
3. If the value of "Server Name" does not end in "ocf.berkeley.edu", you are not sending your outgoing mail via the OCF. DO NOT follow the rest of these instructions. Otherwise, ensure that the "Server Name" is set to 'mail.ocf.berkeley.edu', and that the "Port" is set to '587'.
4. If it's not already checked, click on "Use user name and password". Enter your OCF username into the "User Name" field.
5. Under "Use secure connection", select "TLS".
6. Click OK to save your settings and close the Account Settings window.

Apple Mail (Mac OS X)

1. Select Mail->Preferences.
2. In the window that opens, select the Accounts icon at the top.
3. In Mac OS X 10.3 and 10.4, select the name of your OCF email account in the Accounts list at the left. In Mac OS X 10.2, select the name of your OCF email account in the Description field, and click Edit; this opens an Accounts window.
4. If the value of "Outgoing Mail Server" does not end in "ocf.berkeley.edu", you are not sending your outgoing mail via the OCF. DO NOT follow the rest of these instructions. Otherwise, click the "Server Settings" or "Options" button below "Outgoing Mail Server".
5. In the SMTP Server Options window that opens, ensure that the value of "Outgoing Mail Server" is 'mail.ocf.berkeley.edu', and that the "Server port" is set to '587'.
6. If it's not already checked, click on the setting for "Use Secure Sockets Layer (SSL)". For the "Authentication" setting, select "Password", and enter your OCF username and password in the "User Name" and "Password" fields.
7. Click OK to close the SMTP Server Options window.
8. On Mac OS X 10.2, click OK to close the Accounts window.
9. Close Mail's Preferences window (use the red button at the top left of the window, or select File->Close).

Microsoft Entourage for Mac OS X

1. Select Tools->Account Settings (Entourage X) or Tools->Accounts (Entourage 2004).
2. In the window that opens, select the Mail tab.
3. Select the name of your OCF email account, and click Edit; this opens an "Edit Account" window.
4. If the value of "SMTP server" or "Outgoing Mail Server" under the "Sending mail" heading does not end in "ocf.berkeley.edu", you are not sending your outgoing mail via the OCF. DO NOT follow the rest of these instructions. Otherwise, ensure that the value of "SMTP server" or "Outgoing Mail Server" is 'mail.ocf.berkeley.edu'.
5. Click on the button "Click here for advanced sending options".
6. In the window that appears, click on the settings "SMTP service requires secure connection (SSL)", "Override default SMTP port", and "SMTP server requires authentication", if they're not already checked.
7. Ensure that the value next to "Override default SMTP port" reads '465' (Entourage X) or '587' (Entourage 2004).
8. Either ensure that, under "SMTP server requires authentication, "Use same settings as receiving mail server" is selected, or select "Log on using" and enter your OCF username and password in the "Account ID" and "Password" fields.
9. Click the small box in the upper left hand corner of the advanced sending options window to close it.
10. Click OK to save your settings and close the "Edit Account" window.
11. Close the "Accounts" window (use the red button at the top left of the window).

Eudora 5.1 or later (Light Mode) for Windows

1. Select Tools->Options.
2. In the "Options" window that opens, select "Getting Started" from the "Category" list at the left.
3. If the value of "SMTP Server (Outgoing)" on the right does not end in "ocf.berkeley.edu", you are not sending your outgoing mail via the OCF. DO NOT follow the rest of these instructions. Otherwise, ensure that the value of "SMTP Server (Outgoing)" is 'mail.ocf.berkeley.edu'.
4. Select "Sending Mail" from the "Category" list at the left.
5. If it's not already checked, click on the option "Allow authentication".
6. If an option for "Use submission port (587)" is available, ensure that it is checked, and from the drop-down box under "Secure Sockets when Sending", select "Required, STARTTLS". Otherwise, from the drop-down box under "Secure Sockets when Sending", select "Required, Alternate Port".
7. Click OK to save your settings and close the "Options" window.

Eudora 5.1 or later (Paid or Sponsored Mode) for Windows

1. Select Tools->Personalities. The Personalities pane will be selected at the left of the application window.
2. Right-click the personality corresponding to your OCF account, and select Properties.
3. In the Account Settings window that opens, if the value of "SMTP Server" on the right does not end in "ocf.berkeley.edu", you are not sending your outgoing mail via the OCF. DO NOT follow the rest of these instructions. Otherwise, ensure that the value of "SMTP Server" is 'mail.ocf.berkeley.edu'.
4. If an option for "Use submission port (587)" is available, ensure that it is checked, and from the drop-down box under "Secure Sockets when Sending", select "Required, STARTTLS". Otherwise, from the drop-down box under "Secure Sockets when Sending", select "Required, Alternate Port".
5. Click OK to save your settings and close the Account Settings window