1
SmarterMail 9032 and Windows Server 2022 Std with RDS
Question asked by Bretislav Duda - 9/25/2024 at 1:15 PM
Unanswered
I can't get SmarterMail up and running on a new server with AD and RDS

I installed a server with AD, then added RDS, which installed IIS and RDWeb in the Default Web Site with ports 80 and 443
I changed the bindings to 8080 and 4443, everything was ok
Then I installed SmarterMail, it looked ok on port 17017, but I can't get webmail on port 80. It shows a page error and won't open.

I can change the DNAT from 80 to 17017 on the router, but that's not a solution, automatic certificates don't work.

Has anyone solved it? What am I doing wrong?
Thanks

10 Replies

Reply to Thread
0
Zach Sylvester Replied
Employee Post
Hello,

Thank you for your question.

Please try accessing localhost:9998 and see if it works. If it does, it's likely that the bindings on the default website were changed.

To resolve this, I recommend deleting the default website and using the SmarterMail site that should have been created during installation. You may also need to update the ports for the SmarterMail site accordingly.

I hope this helps!

Best regards,
Zach Sylvester Software Developer SmarterTools Inc. www.smartertools.com
0
Bretislav Duda Replied
9998 doesn't work either, only 17017 works

I tried completely uninstalling RDWEB and ISS and then reinstalling SmarterMail and it still doesn't work 9998 even after changing to 80 bindings 80 doesn't work. I will not create Let Enscrypt certificates without 80

It's the first installation on server 2022, so I don't know if it's IIS 10 or AD, I can already rule out RDWEB
I sell pictures

17017 ok

9998 not work






80 not work

0
Bretislav Duda Replied
after completely uninstalling RDS, the situation is the same.
Clean installation of SmarterMail does not work


RDS none!

0
Youre doing it wrong. :)

Bind port 80,443 to your local servername in IIS.
Bind port 9998 to localhost in IIS.

On 443 bind your local certificate to your servername.
0
Bretislav Duda Replied
It doesn't work

I deleted the default website and the Smartermail website,
uninstalled smartermail, deleted the folders after installation, and after reboot started a new clean installation

localhost:17017 - OK
localhost:9998 - doesn't work

error

-------

to Brian Bjerring-Jensen 

I don't understand the exact recommendation of what to do
do you have a link with a description or pictures of exactly where I should set it?

I need to have a functional RDS, so I have to have an Active directory.
RDS - RDWeb has * 80 and * 443 connection under Default web server

After SmarterMail is installed, the SmarterMail website is added to IIS with binding *9998
1
Its not recommended to have RDS installed on a service running a mailserver.

Loads of cybersec issues in that constellation
0
Jay Dubb Replied
I know this is a kindergarten level question, but since SM was installed when there was another IIS instance running...... is the Smartermail site (as shown inside IIS manager) in the stopped or running state?

We've hit that snag a few times over the years.
 
2
John Quest Replied
Security 101: STEP1: Do not run IIS and non-AD required websites on a DC.
STEP2: See step 1.

0
HI !  
1) Are you using a Firewall in front of the 2022 server, or is the 2022 servers exposed directly to a public IP Address ?  If you are using a firewall then do you have the ports open in that firewall ? If you do not have a firewall, I would recommend pfSense in front of that server.

2) Just FYI, When Zach is referring to a "site" he is talking about the "sites" inside of the IIS Settings. When I first heard sites i thought they were talking about websites. When Smarter Mail is installed, you may have to manually create an IIS "Site" called "webmail" or "SmarterMail". On our server with an older version of SmarterMail, the "Sites" were not automatically created and i had to manually create them.



www.HawaiianHope.org - Providing technology services to non profit organizations, low income families, homeless shelters, clean and sober houses and prisoner reentry programs. Since 2015, We have refurbished over 11,000 Computers !
0
Opnsense is a lot better than pfsense in the current state.

Just FYI. Much better support and a real opensource project.

Reply to Thread