Pop3

[farmeed]

What are the risks of running POP on the Zimbra server? I have a couple of users that want to be able to POP their email so they can continue to use GMail or Yahoo as their mail client.

I know that Zimbra has a great Webmail interface, but some users have a lot of historical mail and shared files and they just don't want to move.

[phoenix]

Originally Posted by farmeed

What are the risks of running POP on the Zimbra server? I have a couple of users that want to be able to POP their email so they can continue to use GMail or Yahoo as their mail client.

The 'risk' is that one day they'll tell you they've got their mail from the server and it's been lost , deleted or the PC has burst into flames (or some other disaster) and they've lost it all, they'll want you to recover their email for them. As they have used POP3 the email will no longer exist on your server and you'll have to give them the bad news that it's all gone. My strong recommendation would be to only allow them to use secure IMAP for email access if they're not going to use the Web UI.

Originally Posted by farmeed

I know that Zimbra has a great Webmail interface, but some users have a lot of historical mail and shared files and they just don't want to move.

They need to be re-educated.

[farmeed]

Thanks, I am more concerned with risk at the server level, but your point is well made.

Originally Posted by phoenix

The 'risk' is that one day they'll tell you they've got their mail from the server and it's been lost , deleted or the PC has burst into flames (or some other disaster) and they've lost it all, they'll want you to recover their email for them. As they have used POP3 the email will no longer exist on your server and you'll have to give them the bad news that it's all gone. My strong recommendation would be to only allow them to use secure IMAP for email access if they're not going to use the Web UI.

They need to be re-educated.

[phoenix]

If they're insistent on using POP3 then make sure its POP3S and not plain old POP3, and I'd also inform them of the risk of not being able to retrieve their email from you if they 'lose' it somehow.