iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
Run DavMail on a Linux VPS as a dedicated, non-root systemd service, then let it translate Microsoft 365 or Exchange protocols into ordinary IMAP, POP, SMTP, CalDAV, CardDAV and LDAP connections. A reliable deployment needs four decisions up front: the Exchange backend, a headless-safe OAuth method, the listener ports you actually need, and whether those listeners should remain private or be reachable by remote clients.
The configuration below uses Microsoft 365 EWS with device-code authentication and the documented sample ports. Adjust the backend and endpoint for on-premises Exchange, disable unused protocols, and protect the OAuth token files as carefully as a password.
Recommended Free Tools
What DavMail does on a VPS
DavMail is a protocol gateway, not an Exchange server or a mailbox store. It logs in to Exchange or Microsoft 365 on one side and exposes familiar services to mail, calendar, contacts and directory applications on the other. The gateway can present POP, IMAP, SMTP, CalDAV, CardDAV and LDAP interfaces while the upstream connection uses Exchange Web Services (EWS), Microsoft Graph or an older Exchange WebDAV endpoint.
That makes it useful when a client understands standard mail or directory protocols but does not support your organisation’s Exchange authentication and API requirements. The VPS must stay online whenever clients need access; stopping DavMail stops the translated services, but it does not delete messages on the Exchange side.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application:Upgraded attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Warranty & Support: Our Electric air duster comes with 5 years warranty and 24/7 customer service. During this period, if you have any questions,pls kindly feel free to contact us.
Choose the upstream mode before writing the file
| Mailbox platform | DavMail mode to evaluate | Endpoint guidance | Important qualification |
|---|---|---|---|
| Microsoft 365 | O365EWS or O365Graph |
Use the tenant’s currently supported service endpoint. The EWS example is https://outlook.office365.com/EWS/Exchange.asmx. |
Your tenant’s policy and the DavMail version determine which API and authentication combination is accepted. |
| On-premises Exchange 2007 or later | ExchangeEWS |
Set the OWA/EWS URL published by that Exchange deployment. | Do not copy the Microsoft 365 URL to an on-premises server. |
| Older Exchange installations | ExchangeWebDav, where supported |
Use the WebDAV endpoint appropriate to that version and deployment. | WebDAV availability depends on the Exchange release and configuration. |
Prerequisites and a safe VPS layout
- A supported Linux distribution with a current security-update process.
- A recent OpenJDK. DavMail’s server documentation states that OpenJDK 8 or later is supported; a maintained LTS release supplied by your distribution is the sensible choice.
- A DNS name if users or applications will connect from outside the VPS.
- A dedicated service account that cannot log in interactively and is not root.
- A host or cloud firewall. Decide which source networks may reach each listener before opening any port.
- A plan for OAuth consent. A truly headless first run needs a non-interactive method such as device code, or an approved interactive authorization performed elsewhere.
Keep the application files root-owned, but give the service account ownership of its writable configuration, cache and token locations. A practical split is a root-owned application directory such as /opt/davmail, a protected configuration directory such as /etc/davmail, and a service home such as /var/lib/davmail. The exact paths are yours; use the same paths consistently in the properties file and systemd unit.
Install DavMail
Distribution package
Use the Debian or RPM package when you want distribution integration and the systemd unit supplied by the package. On a Debian-family host, the pattern is:
sudo apt update
sudo apt install davmail openjdk-17-jre-headlessOn an RPM-family host, use the equivalent package commands and the distribution’s OpenJDK package. Package names vary by release, so confirm that the repository version is suitable for your Exchange and OAuth requirements. The packaged unit and launcher may already choose the correct Java path and configuration location.
Platform-independent archive
Choose the platform-independent ZIP from DavMail’s official download options when the distribution package is older than the release you need. Unpack it into a root-owned directory and do not let the service account modify the binaries:
sudo install -d -o root -g root -m 0755 /opt/davmail
sudo unzip davmail-archive.zip -d /opt/davmailUse the launcher supplied by that archive in ExecStart. Keep the properties file and OAuth data outside the extracted tree, under directories writable only by the DavMail account.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Create the service account and writable directories
sudo useradd --system --home /var/lib/davmail --create-home --shell /usr/sbin/nologin davmail
sudo install -d -o davmail -g davmail -m 0700 /var/lib/davmail
sudo install -d -o root -g davmail -m 0750 /etc/davmail
sudo touch /etc/davmail/davmail.properties
sudo chown root:davmail /etc/davmail/davmail.properties
sudo chmod 0640 /etc/davmail/davmail.propertiesIf your token must be written beside the properties file, make that specific directory writable by davmail rather than making the whole configuration tree writable.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesCreate the server-mode properties file
Start with a minimal Microsoft 365 EWS configuration. The values below are the documented sample listeners; remove any protocol you will not use rather than opening every service by default.
davmail.server=true
davmail.mode=O365EWS
davmail.authentication=O365DeviceCode
davmail.url=https://outlook.office365.com/EWS/Exchange.asmx
davmail.imapPort=1143
davmail.popPort=1110
davmail.smtpPort=1025
davmail.caldavPort=1080
davmail.ldapPort=1389What each setting controls
davmail.server=trueselects unattended server mode instead of the desktop-oriented configuration window.davmail.modeselects the upstream API family. Microsoft 365 deployments commonly evaluateO365EWSandO365Graph; on-premises deployments use the Exchange-specific modes that match their server.davmail.authenticationselects the login flow.O365DeviceCodeis intended for a headless authorization flow when the tenant and installed DavMail version support it.davmail.urlmust match the selected backend and mailbox environment. An incorrect base URL usually produces authentication or endpoint errors even when the password is correct.- The port properties create the local protocol listeners. Set an unused service to a disabled value or remove it according to the configuration reference for your release.
For an on-premises mailbox, replace the mode, authentication choice and URL with the values required by that Exchange installation. The documented examples include ExchangeEWS and ExchangeWebDav; do not assume a Microsoft 365 OAuth flow is available for an older internal server.
Complete Microsoft 365 OAuth without a browser on the VPS
Interactive OAuth modes are not a headless solution. DavMail identifies O365Interactive as requiring an interactive browser window and marks it unavailable in headless mode; O365Manual likewise expects a dialog or manual browser workflow. Selecting either on a VPS commonly leaves the service waiting for a window that cannot appear.
Device-code workflow
- Set
davmail.authentication=O365DeviceCodeand start DavMail under the service account. - Read the device-code prompt in the service log, normally with
journalctl -u davmailwhen systemd is already configured. Do not paste the code into a public ticket or chat. - From an approved workstation, open the Microsoft authorization page indicated by the prompt, enter the code, and sign in with the mailbox account. Complete any consent or multifactor prompts required by the tenant.
- Wait for the VPS process to report successful token acquisition, then confirm that the token file is owned by
davmailand has restrictive permissions. - Restart the service once and verify that it can authenticate without issuing a new prompt. A restart test catches token-path and permission mistakes before clients depend on the gateway.
Device code is conditional, not universal: tenant policy, client registration and the DavMail version all matter. If the tenant blocks device authorization, use an organisation-approved interactive workflow on a trusted machine, persist the resulting token securely, and transfer it to the VPS over an encrypted administrative channel. Never place a token in a world-readable directory or in a shell command that will remain in history.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Tenant, client and redirect settings
The DavMail FAQ documents tenant IDs and custom client IDs for organisations that require them. Review those values with the Microsoft 365 administrator rather than guessing a tenant. The FAQ also records a January 2026 redirect-URI change to https://localhost/common/oauth2/nativeclient; registrations that still contain only an older native-client redirect can fail at the consent step. Apply the redirect required by the current DavMail and tenant configuration, and keep the client registration limited to the permissions the gateway needs.
Run DavMail with systemd
Debian and RPM packages include systemd configuration. Use that unit when it is present because it normally encodes the package’s correct launcher and paths. Inspect it with systemctl cat davmail before replacing anything.
For an archive installation, create an equivalent unit such as:
[Unit]
Description=DavMail Exchange gateway
After=network-online.target
Wants=network-online.target
[Service]
Type=simple
User=davmail
Group=davmail
WorkingDirectory=/var/lib/davmail
ExecStart=/opt/davmail/bin/davmail /etc/davmail/davmail.properties
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
PrivateTmp=true
[Install]
WantedBy=multi-user.targetThe archive’s executable may be named differently; replace only the ExecStart path with the launcher shipped in your download. Then load and enable the unit:
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →sudo systemctl daemon-reload
sudo systemctl enable --now davmail
sudo systemctl status davmail
sudo journalctl -u davmail -n 100 --no-pagerIf the service exits immediately, run the same launcher as the davmail account in a controlled shell and inspect the first error. Common causes are an unreadable properties file, a token directory the account cannot write, an unavailable Java runtime, or a listener port already in use.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Bind only the listeners clients need
The documented example ports are intentionally high-numbered so they do not require privileged binding. Their roles are:
| Service | Example port | Typical client use | Exposure decision |
|---|---|---|---|
| IMAP | 1143 | Folder listing, reading and synchronising mail | Open only to approved mail-client networks. |
| POP | 1110 | Download-oriented mail clients | Disable it when all clients use IMAP. |
| SMTP | 1025 | Submitting outgoing mail through the gateway | Restrict sources tightly; never treat it as a public relay. |
| CalDAV/CardDAV | 1080 | Calendar and contacts applications | Permit only the users or private network that need DAV access. |
| LDAP | 1389 | Directory and address-book lookup | Keep private unless remote directory access is explicitly required. |
Whether a listener binds to loopback or a remote interface is controlled by the DavMail configuration and release defaults. Verify the actual bind address with ss -ltnp after startup. A loopback-only deployment is safest when clients use an SSH tunnel, VPN or another private path. If remote clients must connect directly, restrict source addresses at both the VPS firewall and any cloud security group, and enable the TLS options supported by your installed DavMail version. Do not send mailbox credentials over an unencrypted public connection.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Example firewall rules
The following UFW pattern illustrates source restriction; replace the example network with your managed office or VPN range and omit protocols you disabled:
sudo ufw allow from 203.0.113.0/24 to any port 1143 proto tcp
sudo ufw allow from 203.0.113.0/24 to any port 1025 proto tcp
sudo ufw allow from 203.0.113.0/24 to any port 1080 proto tcp
sudo ufw deny 1110/tcp
sudo ufw deny 1389/tcpOn systems using nftables, firewalld or a cloud firewall, implement the same least-privilege policy there. A firewall rule is not a substitute for listener authentication and encryption.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Configure mail, calendar and directory clients
Use the VPS DNS name as the server name and select only the services enabled in DavMail. The port and security mode in the client must match the listener and TLS settings you chose; the sample numbers above are not conventional public-service ports.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
| Client function | Server name | Port | What to verify |
|---|---|---|---|
| IMAP mail | VPS hostname | 1143 in the sample | Authentication, folder listing and message synchronization |
| POP mail | VPS hostname | 1110 in the sample | Download behavior and whether messages should remain on the server |
| SMTP submission | VPS hostname | 1025 in the sample | Authenticated send and the expected Sent-folder behavior |
| Calendar or contacts | VPS hostname plus the DAV path required by the client | 1080 in the sample | Separate read and write tests for calendars and address books |
| Directory lookup | VPS hostname | 1389 in the sample | Bind, search and result visibility |
Test each function independently. A successful IMAP login does not prove that SMTP submission, calendar writes or LDAP searches are configured correctly.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Verify the deployment before handing it to users
- Confirm the process and account:
systemctl status davmailshould show an active service running as the dedicated user, not root. - Confirm listeners: run
ss -ltnpand compare the addresses and ports with the properties file. Investigate any unexpected listener. - From an allowed client network, test TCP reachability to each enabled port. A refusal usually indicates a disabled listener, a stopped service or a firewall rule; a timeout usually points to filtering.
- Authenticate to IMAP or POP and list folders. This verifies upstream login, not merely that a TCP socket opened.
- Send a message through SMTP and check delivery and the Exchange Sent folder.
- Read and write a test calendar item, then perform a contacts or LDAP lookup if those services are enabled.
- Restart the VPS or service and repeat the login test. The gateway must recover using its protected token and persistent properties without a desktop session.
Troubleshoot common failures
No login window appears
That is expected on a headless server when an interactive authentication mode is selected. Change to a supported device-code method or complete the initial authorization through an approved interactive workflow elsewhere. Do not install a desktop environment just to satisfy an authentication dialog.
OAuth consent or redirect errors
Check the tenant and client registration, required consent, and the current localhost native-client redirect documented for the DavMail release. A stale redirect or a tenant policy that blocks device authorization must be corrected by the administrator; changing the mailbox password will not fix a registration mismatch.
Client connection refused or timed out
Check that the relevant property is enabled, the service is active, no other process owns the port, and both the host firewall and cloud firewall allow the client source. Use ss -ltnp on the VPS and inspect journalctl -u davmail for bind errors.
Authentication reaches the server but Exchange rejects it
Verify the deployment type and URL. Microsoft 365, Exchange 2007 or later on-premises, and older WebDAV installations use different modes and endpoints. Confirm that the selected backend is allowed by the tenant or Exchange configuration and that the account has the required mailbox access.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Sent messages appear twice
The DavMail FAQ warns that duplication can occur when an IMAP client saves a copy in its Sent folder while Exchange also saves the submitted message. Configure the client’s sent-mail behavior so only one side performs that operation.
The service works until a restart
Inspect ownership and mode on the properties and token files. The service account must be able to read the configuration and update its token, while other users must not be able to read those files. Also check that the unit’s working directory and ExecStart path still exist after package or archive updates.
Operate and maintain the gateway securely
- Patch the operating system, OpenJDK and DavMail on a schedule. Test a package or archive update with one mailbox before rolling it to every client.
- Back up the properties file and document the backend, endpoint, enabled listeners and firewall sources. Treat OAuth token files as credentials; encrypt backups and restrict restore access.
- Monitor service state and journald logs, but avoid forwarding tokens, authorization codes or full message content to a shared log system.
- Review enabled protocols periodically. Removing unused POP, LDAP or DAV listeners reduces attack surface and simplifies firewall rules.
- Use a private network, VPN or SSH tunnel where practical. If a listener must be Internet-reachable, require encryption, narrow source ranges and monitor failed authentication.
- Document the recovery path: reinstall Java and DavMail, restore the protected properties and token data, verify permissions, then run the restart and client checks listed above.
There are no meaningful uptime or performance guarantees inherent in DavMail itself. Reliability depends on the VPS, network path, Exchange service, tenant policy and how carefully the service and credentials are maintained.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
