background image

4

ESET  Mail Security

Dear user, you have acquired ESET Mail Security - the premier security system running under 

the Linux/BSD/Solaris OS. As you will soon find, the state-of-the-art ESET scanning engine has 

unsurpassed  scanning  speed  and  detection  rates,  combined  with  a  very  small  footprint  that 

makes it the ideal choice for any Linux/BSD/Solaris OS server.

Key features of the system:

• The  ESET  anti-virus  scanning  engine  algorithms  provide  the  highest  detection  rate  and  the 

fastest scanning times.

• ESET Mail Security is developed to run on single-processor as well as on multi-processor units.

• It includes unique advanced heuristics for Win32 worms and back-doors.

• Built-in archivers unpack archived objects without the need for any external programs.

• To  increase  the  speed  and  efficiency  of  the  system,  its  architecture  is  based  on  the  running 

daemon (resident program) where all scanning requests are sent.

• All   executive   daemons  (except  esets_dac)  run  under a non-privileged user account to 

enhance security.

• The system supports selective configuration specific based on the user or client/server.

• Six  logging  levels  can  be  configured  to  retrieve  information  about  system  activity  and 

infiltrations.

• The ESET Mail Security installation does not require external libraries or programs except for 

LIBC.

• The system can be configured to notify any person in the event of a detected infiltration.

• Configuration, administration and license management are offered through an intuitive and 

user friendly Web Interface.

 

• The  system  supports  ESET  Remote  Administration  for  management  in  large  computer 

networks.

• The system contains an anti-spam control mechanism.

• Information about infiltration can be written into an email header, footer and subject.

To run efficiently, ESET Mail Security requires just 16MB of hard-disk space and 32MB of RAM. 

It runs smoothly under the 2.2.x, 2.4.x and 2.6.x Linux OS kernel versions as well as the 5.x, 6.x 

FreeBSD OS kernel versions.

From lower-powered, small office servers to enterprise-class ISP servers with thousands of 

users, ESET Mail Security delivers the performance and scalability you expect from a UNIX based 

solution, in addition to the unequaled security of ESET products.

Содержание MAIL SECURITY

Страница 1: ...ESET Mail Security Installation Manual and User Guide we protect digital worlds...

Страница 2: ...Inbound email messages scanning 34 A 3 2 Bi directional email messages scanning 35 A 4 Setting ESETS for MTA Exim version 3 35 A 4 1 Inbound email messages scanning 35 A 4 2 Bi directional email mess...

Страница 3: ...Chapter 1 Introduction...

Страница 4: ...rity The system supports selective configuration specific based on the user or client server Six logging levels can be configured to retrieve information about system activity and infiltrations The ES...

Страница 5: ...Chapter 2 Terminology and abbreviations...

Страница 6: ...ns that the RSR package is installed as an add on application in which the primary installation directory is opt eset esets ESETS daemon The main ESETS system control and scanning daemon esets_daemon...

Страница 7: ...bbreviation SBINDIR will be used for future references to this directory The SBINDIR value for the following Operating Systems is listed below Linux usr sbin Linux RSR opt eset esets sbin FreeBSD usr...

Страница 8: ......

Страница 9: ...Chapter 3 Installation...

Страница 10: ...owing command sh esets i386 ext bin For Linux RSR variations of the product use the command sh esets rsr i386 rpm bin to display the product s User License Acceptance Agreement Once you have confirmed...

Страница 11: ...Chapter 4 Architecture Overview...

Страница 12: ...nd effective management of the system They are responsible for relevant system tasks such as license management quarantine management system setup and update CONFIGURATION Proper configuration is the...

Страница 13: ...n 8 man page and relevant agents man pages ETCDIR certs This directory is used to store the certificates used by ESETS Web Interface for authentication Please see the esets_wwwi man page 8 for details...

Страница 14: ......

Страница 15: ...Chapter 5 Integration with Email Messaging System...

Страница 16: ...ilboxes MUA Mail User Agent A program e g Microsoft Outlook Mozilla Mail Eudora etc that provides access to and management of email messages such as reading composing printing etc MAILBOX A file or fi...

Страница 17: ...ith a variety of supported messaging systems 5 1 Bi directional email message scanning in MTA Bi directional email message scanning mode allows the user to scan inbound email messages as well as outbo...

Страница 18: ...ts_setup Select the SMTP install option This will set the esets_smtp module to listen on a predefined port and redirect applicable IP packets Check the newly added firewall rule to see if any changes...

Страница 19: ...m engine Taking into account these drawbacks content filtering using AMaViS is recommended only if the system administrator does not require the features discussed above 5 5 1 1 amavis configuration C...

Страница 20: ...th amavisd new unpack and install the source amavisd new 2 x y tgz in your installation directory Next configure the product with the newly installed amavisd new To do this delete the clause for ESET...

Страница 21: ...Chapter 6 Important ESET Mail Security mechanisms...

Страница 22: ...object If an accept action has been taken as a result of these three action options the object is accepted Otherwise the object is blocked Note that an object is scanned for spam only if the configur...

Страница 23: ...will be stored In the example below we create a reference to the special configuration file esets_smtp_spec cfg which is located in the ESETS configuration directory See below smtp agent_enabled yes...

Страница 24: ...is self explanatory The character is placed in front of the header name of the special section for the sender address and is not placed there for the recipient address For information regarding the s...

Страница 25: ...OTHER PURPOSE In order to activate the Samples Submission System the samples submission system cache must be initialized This can be achieved by enabling the samples_enabled option in the global sect...

Страница 26: ...global section of the ESETS configuration file If an ERA Console password has been established the racl_password parameter must be defined All ERA Client variables are listed in the esets_ daemon 8 ma...

Страница 27: ...Chapter 7 Updating ESET Mail Security...

Страница 28: ...two stages First the precompiled update modules are downloaded from the ESET server If the option av_mirror_enabled is present in the global section of the ESETS configuration file copies or mirror o...

Страница 29: ...Chapter 8 Let us know...

Страница 30: ...owever our goal is to continually improve the quality and effectiveness of our documentation If you feel that any sections in this Guide are unclear or incomplete please let us know by contacting Cust...

Страница 31: ...Appendix A ESETS setup and configuration...

Страница 32: ...mon Then replace the path to the current Postfix MDA with esets_ mda path and add recipient RECIPIENT sender SENDER to the arguments as in the following example mailbox_command BINDIR esets_mda d USER...

Страница 33: ...installation is not compatible with SELinux Either disable SELinux or proceed to the next section The objective of this installation is to insert esets_mda before Sendmail s original MDA NOTE On Free...

Страница 34: ...efer the message to the queue and attempt to pass it through later However this may lead to continuous deferral of the same messages To avoid this problem the timeouts should be set properly You can e...

Страница 35: ...mail queue using these commands mv var qmail bin qmail queue var qmail bin qmail queue esets ln s BINDIR esets_mda var qmail bin qmail queue Restarting Qmail is unnecessary All messages enqueued from...

Страница 36: ...g ESETS for MTA Exim version 4 A 5 1 Inbound email message scanning The goal of this installation is to create an Exim transport from esets_mda for local users In the mda section of the ESETS configur...

Страница 37: ...clause of scheduler conf replace your current delivery command with command sm c channel esets and append this line to sm conf replace your hostname com with your FQDN esets sSPfn BINDIR esets_mda es...

Страница 38: ...sive checking from esets_smtp because those connections are local By using your own firewall rules make sure you do not create an open relay i e allow someone from the outside to connect to esets_smtp...

Страница 39: ...network interface named if0 Then restart the ESETS daemon The next step is to redirect all IMAP requests to esets_imap If IP filtering is being performed by the ipchains administration tool an appropr...

Страница 40: ......

Страница 41: ...Appendix B PHP License...

Страница 42: ...be given a distinguishing version number Once covered code has been published under a particular version of the license you may always continue to use it under the terms of that version You may also...

Отзывы: