background image

24

ESET  Mail Security

6.3. Blacklist and Whitelist

In the following example we demonstrate blacklist and whitelist creation for the 

esets_smtp

 

content filter for MTA Postfix configuration. Note that the configuration described in the previous 

section is used for this purpose.

To create a blacklist used by 

esets_smtp

, create the following group section within the special 

configuration file ‘esets_smtp_spec.cfg’, introduced in the previous section. See below:

   

[black-list]

   

action_av = ”reject” 

        

Next, add the SMTP server to the ‘black-list’ group. To do this, the following special section 

must be created:

   

[|[email protected]]

   

parent_id = ”black-list”

        

In  the  example  above, ‘[email protected]’  is  the  email  address  of  the  sender 

added to the ‘black-list’. All email messages sent from this address will now be rejected. When 

creating the ‘white-list’ used by 

esets_smtp,

 it is necessary to create the following group section 

in the special configuration file ‘esets_smtp_spec.cfg’. See below:

   

[white-list]

   

action_av = ”accept”

   

action_as = ”accept”

Adding the sender’s email address to the list is self-explanatory.

The ‘|’ character is placed in front of the header name of the special section for the sender 

address and is not placed there for the recipient address. For information regarding the special 

header name syntax, refer to the man page of the appropriate 

ESETS

 agent module. For 

esets_

smtp

, refer to the esets_smtp (1) man page.

6.4. Anti-Spam Control

The anti-spam system filters all spam email messages, i.e., email messages that recipients do 

not want, from the data flow of the email messaging delivery process.

To eliminate spam, ESET Mail Security uses the anti-spam control mechanism. This mechanism 

is enabled using the ‘as_enabled’ parameter (for a full description of the parameter refer to the 

esets.cfg (5) man page). Note that anti-spam scanning can be used only for email objects. Thus, 

this  functionality  is  relevant  only  for  the  following  modules: 

esets_imap,  esets_mda,  esets_

pipe, esets_pop3, esets_smtp

 and 

esets_smfi

.

Once  anti-spam  is  enabled  in  any  of  the  configuration  sections,  the  anti-spam  scanning 

engine initializes during the main scanning daemon start-up. During this process, appropriate 

anti-spam support modules are loaded from the anti-spam cache directory.

Anti-spam functionality can also be configured using the following configuration file:

Summary of Contents for MAIL SECURITY

Page 1: ...ESET Mail Security Installation Manual and User Guide we protect digital worlds...

Page 2: ...Inbound email messages scanning 34 A 3 2 Bi directional email messages scanning 35 A 4 Setting ESETS for MTA Exim version 3 35 A 4 1 Inbound email messages scanning 35 A 4 2 Bi directional email mess...

Page 3: ...Chapter 1 Introduction...

Page 4: ...rity The system supports selective configuration specific based on the user or client server Six logging levels can be configured to retrieve information about system activity and infiltrations The ES...

Page 5: ...Chapter 2 Terminology and abbreviations...

Page 6: ...ns that the RSR package is installed as an add on application in which the primary installation directory is opt eset esets ESETS daemon The main ESETS system control and scanning daemon esets_daemon...

Page 7: ...bbreviation SBINDIR will be used for future references to this directory The SBINDIR value for the following Operating Systems is listed below Linux usr sbin Linux RSR opt eset esets sbin FreeBSD usr...

Page 8: ......

Page 9: ...Chapter 3 Installation...

Page 10: ...owing command sh esets i386 ext bin For Linux RSR variations of the product use the command sh esets rsr i386 rpm bin to display the product s User License Acceptance Agreement Once you have confirmed...

Page 11: ...Chapter 4 Architecture Overview...

Page 12: ...nd effective management of the system They are responsible for relevant system tasks such as license management quarantine management system setup and update CONFIGURATION Proper configuration is the...

Page 13: ...n 8 man page and relevant agents man pages ETCDIR certs This directory is used to store the certificates used by ESETS Web Interface for authentication Please see the esets_wwwi man page 8 for details...

Page 14: ......

Page 15: ...Chapter 5 Integration with Email Messaging System...

Page 16: ...ilboxes MUA Mail User Agent A program e g Microsoft Outlook Mozilla Mail Eudora etc that provides access to and management of email messages such as reading composing printing etc MAILBOX A file or fi...

Page 17: ...ith a variety of supported messaging systems 5 1 Bi directional email message scanning in MTA Bi directional email message scanning mode allows the user to scan inbound email messages as well as outbo...

Page 18: ...ts_setup Select the SMTP install option This will set the esets_smtp module to listen on a predefined port and redirect applicable IP packets Check the newly added firewall rule to see if any changes...

Page 19: ...m engine Taking into account these drawbacks content filtering using AMaViS is recommended only if the system administrator does not require the features discussed above 5 5 1 1 amavis configuration C...

Page 20: ...th amavisd new unpack and install the source amavisd new 2 x y tgz in your installation directory Next configure the product with the newly installed amavisd new To do this delete the clause for ESET...

Page 21: ...Chapter 6 Important ESET Mail Security mechanisms...

Page 22: ...object If an accept action has been taken as a result of these three action options the object is accepted Otherwise the object is blocked Note that an object is scanned for spam only if the configur...

Page 23: ...will be stored In the example below we create a reference to the special configuration file esets_smtp_spec cfg which is located in the ESETS configuration directory See below smtp agent_enabled yes...

Page 24: ...is self explanatory The character is placed in front of the header name of the special section for the sender address and is not placed there for the recipient address For information regarding the s...

Page 25: ...OTHER PURPOSE In order to activate the Samples Submission System the samples submission system cache must be initialized This can be achieved by enabling the samples_enabled option in the global sect...

Page 26: ...global section of the ESETS configuration file If an ERA Console password has been established the racl_password parameter must be defined All ERA Client variables are listed in the esets_ daemon 8 ma...

Page 27: ...Chapter 7 Updating ESET Mail Security...

Page 28: ...two stages First the precompiled update modules are downloaded from the ESET server If the option av_mirror_enabled is present in the global section of the ESETS configuration file copies or mirror o...

Page 29: ...Chapter 8 Let us know...

Page 30: ...owever our goal is to continually improve the quality and effectiveness of our documentation If you feel that any sections in this Guide are unclear or incomplete please let us know by contacting Cust...

Page 31: ...Appendix A ESETS setup and configuration...

Page 32: ...mon Then replace the path to the current Postfix MDA with esets_ mda path and add recipient RECIPIENT sender SENDER to the arguments as in the following example mailbox_command BINDIR esets_mda d USER...

Page 33: ...installation is not compatible with SELinux Either disable SELinux or proceed to the next section The objective of this installation is to insert esets_mda before Sendmail s original MDA NOTE On Free...

Page 34: ...efer the message to the queue and attempt to pass it through later However this may lead to continuous deferral of the same messages To avoid this problem the timeouts should be set properly You can e...

Page 35: ...mail queue using these commands mv var qmail bin qmail queue var qmail bin qmail queue esets ln s BINDIR esets_mda var qmail bin qmail queue Restarting Qmail is unnecessary All messages enqueued from...

Page 36: ...g ESETS for MTA Exim version 4 A 5 1 Inbound email message scanning The goal of this installation is to create an Exim transport from esets_mda for local users In the mda section of the ESETS configur...

Page 37: ...clause of scheduler conf replace your current delivery command with command sm c channel esets and append this line to sm conf replace your hostname com with your FQDN esets sSPfn BINDIR esets_mda es...

Page 38: ...sive checking from esets_smtp because those connections are local By using your own firewall rules make sure you do not create an open relay i e allow someone from the outside to connect to esets_smtp...

Page 39: ...network interface named if0 Then restart the ESETS daemon The next step is to redirect all IMAP requests to esets_imap If IP filtering is being performed by the ipchains administration tool an appropr...

Page 40: ......

Page 41: ...Appendix B PHP License...

Page 42: ...be given a distinguishing version number Once covered code has been published under a particular version of the license you may always continue to use it under the terms of that version You may also...

Reviews: