.You get to this window by going to the Services -> Web Mail page in the VPOP3 settings
.
The Logon Idle Timeout option tells VPOP3 how long it should wait before removing a user's login session if that user doesn't do anything in the meantime.
The Allow
Password in URL option allows you to define a URL to log onto your
Web Mail page automatically as below:
http://192.168.57.1:5108/home.html?user=username&password=password
If you use this option, then you should be aware of the security implications
(the username & password will be visible in plain text) but it may
make it easier for some people.
The Allow different client addresses for a Web Mail session option tells VPOP3 to ignore the web browser's IP address when validating a session ID. This is slightly less secure as it means that a person on another computer could copy a user's authentication details and gain access to their web mail (but only until that user "logs off" web mail). However, it is necessary if clients are connecting through an ISP 'proxy server farm' where the client's IP address may change frequently during a single user session.
The Have "Connect Now" button for anyone, makes the 'Login' page on the Web Mail interface will allow users to make VPOP3 Connect to the ISP. You should not enable this option unless you also have set Access Restrictions (see below) because no authentication is needed to make VPOP3 connect when this option is enabled.
The Mail HTML Pages setting tells VPOP3 where to look for the HTML pages which contain the Web Mail information.
The Apply account lockout policy to WebMail/Admin even when connecting from 127.0.0.1 option means that the VPOP3 security policy will get applied to all WebMail access. This is usually turned off, so that the administrator account cannot get locked out from access using the 127.0.0.1 IP address. Usually this is OK, but if the VPOP3 server is in a public area it may be sensible to turn this option on.
Access Restrictions are used to limit who can use the VPOP3 Web Mail server. You can restrict access to a certain range of IP addresses. The format of the restriction definitions is described here.
