ESET MAIL SECURITY, Руководство по установке

Страница: 38 / 42

38
ESET Mail Security
agent_enabled = yes
listen_addr = ”192.168.1.0”
listen_port = 2525
where ‘listen_addr’ is the address of the local network interface named if0 . Then, restart the
ESETS daemon. The next step is to redirect all SMTP requests to
esets_smtp
. If IP-filtering is being
performed by the ipchains administration tool, an appropriate rule would be:
ipchains -A INPUT -p tcp -i
if0
--dport 25 -j REDIRECT 2525
If IP-filtering is being performed by the iptables administration tool, the rule is:
iptables -t nat -A PREROUTING -p tcp -i if0 \
--dport 25 -j REDIRECT --to-ports 2525
On FreeBSD, the rule is as follows:
ipfw add fwd 192.168.1.10,2525 tcp from any to any 25 via
if0 in
On NetBSD and Solaris:
echo ’rdr if0 0.0.0.0/0 port 25 -> 192.168.1.10 \
port 2525 tcp’ | ipnat -f -
Warning:
Your MTA may accept all connections without extensive checking from
esets_smtp
because those connections are local. By using your own firewall rules, make sure you do not
create an open relay, i.e., allow someone from the outside to connect to esets_smtp and use it
as a relay SMTP server.
A.8. Setting ESETS for scanning of POP3 communication
The POP3 communication scanning is performed using esets_pop3 daemon. In the [pop3]
section of the ESETS configuration file, set these parameters:
agent_enabled = yes
listen_addr = ”192.168.1.10”
listen_port = 8110
where ‘listen_addr’ is the address of the local network interface named if0 . Then restart the
ESETS daemon. The next step is to redirect all POP3 requests to esets_pop3. If IP-filtering is being
performed by the ipchains administration tool, an appropriate rule is:
ipchains -A INPUT -p tcp -i if0 --dport 110 -j REDIRECT 8110
If IP-filtering is being performed by the iptables administration tool, the rule would be:
iptables -t nat -A PREROUTING -p tcp -i
if0
\
--dport 110 -j REDIRECT --to-ports 8110
On FreeBSD, the rule is as follows: