Best Current Practices: client settings/manual configuration
This document is intended to document a set of best current practices for configuring client machines to use the University's network. In all cases (except for name resolution servers), the use of hostnames is prefered over the use of IP addresses. Whilst the hostnames listed below may not be the only way to talk to a specific service, they are the prefered way of doing so.
| service | hostname/address | additional details | notes |
|---|---|---|---|
| DNS server addresses | 146.231.129.97, 146.231.129.102 | manual configuration deprecated, use DHCP. | |
| WINS addresses | 146.231.128.57, 146.231.128.75 | manual configuration deprecated, use DHCP. | |
| LDAP address books, etc | ldap.ru.ac.za | search base: o=RU | (notes) |
| NTP time syncronisation | ntp.ru.ac.za | (notes) | |
| Outgoing mail server (submission) | mail.ru.ac.za | protocol ESMTP submission; port 587 using STARTTLS; port 465 for TLS/SSL-on-connect | authenticated relaying using IMAP credentials. The use of STARTTLS is recommended, and required by some authentication methods. By preference you should use the submission port (587), but clients that expect TLS-on-connect (such as older outlook) can use port 465 for submission. The use of port 25 (SMTP) for unauthenticated submission is depricated. |
| Incoming mail server (IMAP) | imap.ru.ac.za | protocol: IMAP; port 143 unsecured or STARTTLS; port 993 secured with TLS/SSL-on-connect | (pegasus, outlook) |
| Incoming mail server (POP3) | pop3.ru.ac.za | protocol: POP3; port 110 unsecured or STARTTLS; port 995 secured with TLS/SSL-on-connect | deprecated in favour of IMAP |
| Proxy/Cache server (normal users) | wwwproxy.ru.ac.za | protocol: HTTP; port: 3128 | deprecated in favour of proxy-autoconfiguration script at http://wpad.ru.ac.za/ (notes) |
| Proxy/Cache server (without advert blocking) | adproxy.ru.ac.za | protocol: HTTP; port: 3128 | deprecated in favour of proxy-autoconfiguration script at http://wpad.ru.ac.za/adverts |
| Webmail client | https://webmail.ru.ac.za/ | do not bookmark actual address as it changes | |
| F-Secure Antivirus | http://fsecure.ru.ac.za/ | ||
| Windows Update | http://wsus.ru.ac.za/ | \\rhino.ru.ac.za\sus\sus.exe is the preferred way of configuring this. | |
| Novell Middle Tier Server | wsmanager.ru.ac.za | protocol: HTTP; port: 80 | |
| Zenworks Imaging | imaging.ru.ac.za | ||
| RADIUS |
radius.ru.ac.za, |
146.231.129.65-70 still supported for legacy reasons. |
