IceWarp Server Setup Guide India — Install, Configure and Secure

IceWarp is one of the most capable self-hosted email servers available for Indian organisations — but like any server software, the initial setup requires careful attention to DNS, security and network configuration. A correctly configured IceWarp server delivers years of reliable email service. A misconfigured one can result in mail delivery failures, spam blacklisting or data exposure.

This guide covers the complete IceWarp setup process — from server selection to production-ready deployment — as Cloudfy executes it for Indian clients.

Note: This is a technical guide for IT administrators and implementation partners. If you want Cloudfy to handle IceWarp installation and setup for your organisation, contact us here. We provide on-site and remote implementation across India.

Server Requirements

Minimum Specifications (Up to 100 Users)

For 500+ users, scale CPU and RAM proportionally. Mail storage depends on your per-user quota and retention policy.

Network Requirements

• Static public IP address (essential for PTR/reverse DNS)
• Ports: 25 (SMTP), 143/993 (IMAP), 587 (SMTP submission), 443 (webmail/admin/TeamChat), 80 (redirect to 443)
• Firewall: Open inbound on the ports above; restrict outbound SMTP to port 25 only from server IP

Choosing Between Windows and Linux

IceWarp runs on both. For Indian organisations:

• Windows Server: Easier for IT teams familiar with Windows. Active Directory integration is simpler. Commercial support is required from Microsoft.
• Linux (Ubuntu/CentOS): Lower OS cost, better performance per core, preferred by Cloudfy for most deployments. Requires Linux administration capability.

Step 1 — DNS Preparation

Before installing IceWarp, your DNS must be ready. All DNS changes take time to propagate — configure these first.

Required DNS Records

MX Record — points your domain's mail to IceWarp:

yourdomain.com  MX  10  mail.yourdomain.com

A Record — resolves your mail server hostname:

mail.yourdomain.com  A  [YOUR-SERVER-PUBLIC-IP]

PTR/Reverse DNS — the most critical record for mail deliverability. Ask your ISP or cloud provider to set this:

[YOUR-SERVER-PUBLIC-IP]  PTR  mail.yourdomain.com

Without a correct PTR record, a large percentage of receiving mail servers will reject or spam-folder your outgoing email.

SPF Record — tells other mail servers your domain sends mail from your IceWarp IP:

yourdomain.com  TXT  "v=spf1 ip4:[YOUR-SERVER-PUBLIC-IP] ~all"

DKIM and DMARC are configured after IceWarp installation (IceWarp generates the DKIM key pair during setup).

Step 2 — IceWarp Installation

Linux (Ubuntu 22.04)

# Download the IceWarp Linux installer (get the latest URL from IceWarp's website)
wget https://download.icewarp.com/linux/icewarp-latest-linux64.bin
chmod +x icewarp-latest-linux64.bin
sudo ./icewarp-latest-linux64.bin

The installer is interactive. Accept the licence agreement, choose the installation path (/opt/icewarp is standard) and enter your domain name when prompted.

After installation, IceWarp starts automatically. Access the web admin console at:

https://[SERVER-IP]/admin

Default credentials are set during installation. Change the admin password immediately.

Windows Server

1. Download the IceWarp Windows installer from the IceWarp website
2. Run as Administrator
3. Follow the installation wizard — accept defaults unless you have specific requirements
4. After installation, IceWarp starts as a Windows service
5. Access admin console at https://[SERVER-IP]/admin

Step 3 — Initial Admin Console Configuration

The IceWarp admin console (/admin) is where all server configuration happens.

Domain Setup

1. Navigate to Mail → Domains
2. Click Add Domain
3. Enter your domain name (e.g., yourdomain.com)
4. Set the domain type to Standard
5. Set the postmaster email address

SSL Certificate Installation

Email clients and webmail require a valid SSL certificate. IceWarp supports Let's Encrypt (free) and commercial SSL certificates.

Let's Encrypt (recommended for most deployments):

1. In admin console, go to Web Services → Security
2. Enable Let's Encrypt
3. Enter your server hostname (e.g., mail.yourdomain.com)
4. Click Request Certificate

IceWarp automatically renews the certificate every 90 days.

Commercial SSL (if you have one):

1. Upload your certificate file (.crt), private key (.key) and CA bundle
2. Navigate to Web Services → Security → SSL Certificates
3. Import and assign to all services

Creating User Accounts

Navigate to Accounts → Users → New User:

• Username (the part before the @)
• Password
• Display name
• Mailbox quota (e.g., 10GB)

For bulk creation, IceWarp supports CSV import. Cloudfy uses this for migrations with 50+ users.

Step 4 — DKIM Configuration

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outgoing email, allowing receiving servers to verify the email genuinely came from your server.

Generate DKIM Keys in IceWarp

1. In admin console, go to Mail → Domains → select your domain
2. Click DKIM
3. Click Generate New Key
4. IceWarp generates a 2048-bit RSA key pair
5. Copy the DNS TXT record value shown on screen

Publish DKIM Key in DNS

Add this TXT record to your DNS:

default._domainkey.yourdomain.com  TXT  "v=DKIM1; k=rsa; p=[YOUR-PUBLIC-KEY]"

After DNS propagation (15–60 minutes), verify with:

nslookup -type=TXT default._domainkey.yourdomain.com

Verify DKIM Signing

Send an email to a Gmail address and click Show original in Gmail. Look for:

dkim=pass header.i=@yourdomain.com

Step 5 — DMARC Configuration

DMARC ties together SPF and DKIM, telling receiving servers what to do if an email fails both checks.

Start with a monitoring-only policy:

_dmarc.yourdomain.com  TXT  "v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com"

After 30 days of monitoring reports (check that all legitimate mail is passing SPF and DKIM), move to:

"v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com"

And eventually:

"v=DMARC1; p=reject; rua=mailto:dmarc@yourdomain.com"

Never jump straight to p=reject without 30+ days of monitoring data. Premature rejection policies cause legitimate mail to be lost.

Step 6 — Anti-Spam Configuration

IceWarp includes a multi-layer anti-spam engine. The default configuration catches most spam, but tuning improves accuracy.

Key Anti-Spam Settings (Admin Console → Anti-Spam)

• Bayesian Filter: Enable and train with your organisation's spam (IceWarp learns from user-marked spam over time)
• DNSBL (DNS Blackhole Lists): Enable Spamhaus ZEN — the most effective DNSBL for India
• Greylisting: Enable for new senders (adds a 10-minute delay on first email from unknown senders; eliminates most bot spam)
• SPF Check: Set to reject mail that hard-fails SPF (-all)
• DKIM Verification: Enable verification of incoming DKIM signatures

Anti-Virus Integration

IceWarp integrates with ClamAV (open source) for attachment scanning. On Linux:

sudo apt install clamav clamav-daemon
sudo systemctl enable clamav-daemon

In IceWarp admin console, enable Anti-Virus → ClamAV and point to the ClamAV socket.

Step 7 — TeamChat and Video Setup

TeamChat (IceWarp's instant messaging system) and video meetings run on the same server as email but require HTTPS to work correctly.

In admin console:

1. Go to Web Services → TeamChat
2. Verify SSL is enabled (required for TeamChat to function)
3. Enable Video Meetings
4. Set the TURN server — IceWarp includes a built-in TURN server for NAT traversal

For external users to join video meetings, the TURN server must be accessible from the internet on UDP port 3478 and TCP port 443.

Step 8 — Mobile ActiveSync

IceWarp supports Exchange ActiveSync, which allows any ActiveSync-compatible mobile device to sync email, calendar and contacts natively.

In admin console → ActiveSync:

• Enable ActiveSync
• Set policies (password requirements, remote wipe capability)
• Verify the ActiveSync URL: https://mail.yourdomain.com/ews/exchange.asmx

Users configure their mobile device using the Exchange account type and the above URL.

Post-Setup Verification Checklist

• MX record resolves correctly (nslookup -type=MX yourdomain.com)
• PTR record set (nslookup [SERVER-IP] returns mail.yourdomain.com)
• SPF record published and valid (use MXToolbox SPF checker)
• DKIM record published and signing verified (send to Gmail, check headers)
• DMARC record published (p=none for first 30 days)
• SSL certificate valid (no browser warnings at https://mail.yourdomain.com)
• Webmail accessible at https://mail.yourdomain.com
• Admin console secured (change default admin password)
• Anti-spam enabled and Spamhaus ZEN DNSBL active
• Test email sent and received from external address
• TeamChat accessible and functional
• Mobile ActiveSync tested on one device

Common Issues and Fixes

Need Cloudfy to Handle Your IceWarp Setup?

Cloudfy sets up IceWarp across India — on-site or remotely. Our implementation covers everything in this guide, plus email migration from your current platform.

→ IceWarp implementation services → Contact Cloudfy for a setup quote → IceWarp pricing guide