Full visibility into what happens on the server: from the complete SMTP dialogue to logins, sessions and the origin of every IP address. Plus phishing protection that involves users in webmail, and self-service for blocked senders. No add-on modules, no external services.
Protocol logging like hMailServer
Persistent daily logs for inbound SMTP, the full outbound SMTP dialogue with remote mail servers, delivery & queue, logins, IMAP, ActiveSync and application events. Each category can be switched on or off, retention is configurable (default 30 days).
Live viewer, analysis & delisting report
Log viewer with live mode and filters by date range, text, IP and session. Analysis by IP address, e-mail address, domain and provider including SMTP reply codes, plus a delisting report export for blocklist operators and providers.
Statistics per account, domain & server
Dedicated statistics tabs with storage usage, mail traffic for 24 hours, 7 and 30 days including a 30-day chart, spam, bounces, logins with device, browser and IP, failed logins and IP bans.
Login history, sessions & auto-logout
Persistent login history across all protocols. Session list with device, IP and last activity, sign out per device or everywhere, and a configurable idle auto-logout for webmail and admin.
IP countries with flags
Every public IP address in the admin shows a country flag and country name. Lookups run offline against the local DB-IP Lite database, no data is sent to third parties.
Sending-service detection (69 providers)
Detects which service delivered a message, e.g. SendGrid, Mailgun, Brevo, Amazon SES, Microsoft 365®, Azure® Communication Services, Google, Mailchimp or HubSpot. Shown as a webmail badge, a message trace column and in the statistics.
Phishing protection with brand & link checks
Heuristics against brand impersonation and dangerous links: fake display names, disguised link targets, cloud and URL-shortener hosts. SPF, DKIM and DMARC are evaluated on every inbound message, triggered rules are listed in the X-Spam-Rules header.
"Check for phishing" & reports in webmail
One click in webmail shows a verdict and findings (sender, reply-to, links, SPF/DKIM/DMARC). "Report spam" asks whether it is spam or phishing and which bank or company is impersonated. Admins see all phishing reports by brand and sender domain.
Self-service IP unblock requests
The SMTP rejection contains a link to an unblock request form. nextxch automatically checks PTR/FCrDNS, MX and SPF, confirms the requester's e-mail address and puts the request to the admin for approval or rejection.
Webmail on customer hostnames
Webmail on mail. or webmail. hostnames of every customer domain. Each hostname gets its own Let's Encrypt certificate, so the certificate does not reveal other customer domains.
External images blocked transparently
Blocked external images are listed with their addresses, so users see where a message would load content from. Images can always be loaded for trusted senders and domains, except when SPF or DMARC fails.
Cleaner, hardened admin cockpit
Sub-tabs on all admin pages instead of long scrolling pages, compact layout and SVG icons instead of emojis. Security headers (CSP, HSTS) across the application and sandboxed rendering of e-mails.
