Additional Info

Getting information off the Internet is like taking a drink from a fire hydrant. (Mitchell Kapor)

Perl is designed to give you several ways to do anything, so consider picking the most readable one. (Larry Wall)

This post tagged:


Instant Messaging in Kerio Connect


Kerio Connect mail server recently added Instant Messaging support. When I first heard that, I thought it was absolutely rediculous! If you want IM, open up the ports in your firewall and let it go.. why on earth do you need the mail server involved? I'm not generally a big fan of IM anyway, so I just dismissed this idea entirely.

Not so fast

I was wrong. Actually, there are some real benefits to passing IM through the mail server.

The first is that, by default, the only people who can use IM are those who are in your mail domain(s). You aren't opening up IM so that Bill can waste away the day chatting about sports with his friends. Moreover, if you don't want Bill to use this at all, you can assign a policy that prevents him from using IM. Or, you can make a default policy that prohibits IM to everyone and add an IM allowed policy for specific users.

If you really want IM open to the world, you can do that (see Configuring instant messaging in Kerio Connect in the Kerio Knowledge Base).

If you only want this within your domain and aren't going to restrict anyone, there's nothing to do at the server: it's ready to work - it's in Services and is running by default.

IM extras

As most IM clients now support such things as video, file sharing, screen sharing and group chat, you also have all that available - again, for the people you choose only.

Of course, IM is also a way to see if someone is available without bothering them with a phone call.

Although I'm a very small organization, I can see using this myself to get a quick message to my wife when I am out of the office. As long as I have Internet access, I can use IM to reach her and she can reach me - without having opened up IM access to the world at large!

So, I was wrong. I can see where this feature would actually be very useful in many organizations. Check out more at Kerio Connect Instant Messaging.

Configuring Clients

You need a client that understands XMMP. Mac Messages and iChat are both fine, as are many third party clients. On Windows, Pidgin is free and works fine. I'll use that as an example.

After downloading and installing, run Pidgin. It will ask you to add an account.

Configure Pidgin as XMMP

Choose XMMP as the account type. If you are configuring a client that doesn't offer that, look for "Jabber". What you need is the ability to point it at your Connect server.

Add your name and mail domain

Fill in your account name and domain as shown here. On some clients, that would be one line:, for example. For Pidgin, they are separate.

Set controlling server

Finally, set the desired encryption and the DNS name (or IP) of your server on the Advanced tab. That's it - you should now be able to enable the account and start chatting.

Monal for iPad

Here's Monal for iPad - simple setup, just say it's a Jabber server.

Monal for iPad

Here's a setup for PSI that a customer sent.

Here are some other screenshots he sent along:

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\bruggles.CO>nslookup -querytype=SRV
Server:  UnKnown

Non-authoritative answer:      SRV service location:
          priority       = 0
          weight         = 5
          port           = 5222
          svr hostname   =

C:\Users\bruggles.CO>nslookup -querytype=SRV
Server:  UnKnown

Non-authoritative answer:      SRV service location:
          priority       = 0
          weight         = 5
          port           = 5269
          svr hostname   =

Windows DNS SRV Records for Kerio IM

Windows DNS SRV Records for Kerio IM

Kerio IM External DNS A Records

Kerio IM External DNS A Records





PSI Auto Config

With the Proper XMPP Records in Place, I was able to
uncheck Manually Specify Server Host Port and (like magic) it found the server

Got something to add? Send me email.

(OLDER) <- More Stuff -> (NEWER)    (NEWEST)   

Printer Friendly Version

-> -> Instant Messaging in Kerio Connect


Increase ad revenue 50-250% with Ezoic

More Articles by

Find me on Google+

© Anthony Lawrence

Tue Jul 16 10:14:59 2013: 12231   CarstenMaas


For iChat/Messages the Port 5060 needs to be opened in the firewall too, when you want to use iCat video functionality.

I have tested it with our distri, who had problems with video chatting. After opening Port 5060, it works.

Wed Jul 17 08:37:17 2013: 12234   CarstenMaas


Referring Knowledge Base article:


Wed Jun 25 15:02:56 2014: 12495   TonyLawrence


Even if you turn off IM in Services, it still logs and can be annoying. You can completely disable it by editing 'mailserver.cfg'. Locate the table 'InstantMessaging', find its variable 'Enabled' and set its value to 0.

Do not edit this file while Kerio Connect server is running as your modifications will be lost. Stop, edit, restart.

Kerio Connect Mailserver

Kerio Samepage

Kerio Control Firewall

Have you tried Searching this site?

Unix/Linux/Mac OS X support by phone, email or on-site: Support Rates

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us