# Guide — Outlook IMAP/SMTP ke Mailcow

**Untuk:** PC user yang memakai `support@geonet.co.id` (atau mailbox `@geonet.co.id` lain).
**Server:** Mailcow `sync.geonet.co.id` — **bukan** `mail.geonet.co.id` (cPanel).

---

## Pengaturan

| Setting | Nilai |
|---------|-------|
| Email / Username | `support@geonet.co.id` |
| Password | Password **Active Directory** (Windows login `support` / `support@geonet.co.id`) |
| Incoming | IMAP |
| Server IMAP | `sync.geonet.co.id` |
| Port IMAP | `993` |
| Enkripsi IMAP | SSL/TLS |
| Outgoing | SMTP |
| Server SMTP | `sync.geonet.co.id` |
| Port SMTP | `587` (STARTTLS) — **bukan** SSL/TLS di port 587 |
| Alternatif SMTP | Port `465` + **SSL/TLS** (jika 587 gagal) |
| Auth SMTP | Ya — sama dengan IMAP |

> `support@` pakai **authsource ldap** (grup AD `Mail-Users`, atribut `mail`). Inbound tetap via fetchmail POP3 dari hosting.

---

## Outlook (Windows)

1. **File → Add Account** → **Advanced setup** → **IMAP**
2. Incoming: `sync.geonet.co.id`, port **993**, SSL/TLS
3. Outgoing: `sync.geonet.co.id`, port **587**, STARTTLS
4. **More settings → Outgoing Server:** centang SMTP requires authentication, use same as incoming
5. Hapus akun lama jika masih `mail.geonet.co.id`

---

## Thunderbird

Manual config: IMAP 993 SSL, SMTP 587 STARTTLS, Normal password, username email penuh.

---

## Alur email masuk (transisi)

```
Internet → MX cPanel → inbox cPanel
              ↓ fetchmail POP3 (~2 menit)
         inbox Mailcow → Outlook (IMAP)
```

User **tidak** perlu setting POP3 di PC — hanya IMAP ke Mailcow.

---

## Troubleshooting

| Gejala | Cek |
|--------|-----|
| Auth gagal | Password **AD** (bukan password Mailcow lama); pastikan user di grup `Mail-Users` |
| SMTP encryption error | Port **587** harus **STARTTLS** (bukan SSL/TLS). Port **465** pakai SSL/TLS |
| Cert error / encryption failed | Pastikan cert Let's Encrypt terpasang (`scripts/sync-ssl-from-nginx.sh`) |
| Email tidak masuk | MX masih cPanel — cek fetchmail: `tail /var/log/fetchmail-support.log` |
| Port blocked | `Test-NetConnection sync.geonet.co.id -Port 993` |

Detail server: [../server.md](../server.md), [../issues.md](../issues.md).

---

## Verifikasi koneksi (PowerShell)

```powershell
Test-NetConnection sync.geonet.co.id -Port 993
Test-NetConnection sync.geonet.co.id -Port 587
```

Keduanya harus `TcpTestSucceeded : True`.