[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Configure a Solaris 8 Sun Server to be a Symantec SMTP Antivirus Gateway server.

Posted on 2004-10-25
20
Medium Priority
?
295 Views
Last Modified: 2013-12-27
Hi,

Currently, I am in a slump with configuring a Solaris server to be a SMTP Antivirus Gateway server.  With my level on sendmail, I have hit a brick wall.  I am in the process of setting up a Solaris 8 Sun Server to be a SMTP Antivirus Gateway server (Server Alpha) for another Solaris 8 Mail Server (Server Beta).  Server Alpha and Beta are within a firewall under one domain.  The objective is to have all external and internal emails to go through the SMTP Antivirus Gateway Server (Server Alpha) prior to going to the Mail Server (Server Beta) and the clients' POP3 mailboxes.  Can you assist me with steps that I need to follow, such as what files do I need to edit, how should I configure them, what lines do I need to add, etc..?  Thank you.
0
Comment
Question by:gsalcedo
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 10
  • 10
20 Comments
 
LVL 38

Expert Comment

by:wesly_chen
ID: 12404262
Hi,

   Are you fimilar with sendmail? If not, then things are not easier for you and the helper.
You might want to install webmin ( http://www.erbmin.com ) on both sendmail servers. Webmin provides GUI utilities for you
through web browser ( Type in http://<server anme>:10000/ from your PC ) to help to configure sendmail.

   All the sendmail configuration files are under /etc/mail. There are a couple of files need to be changed, such as
access, relay_domains, sendmail.cf, aliases, etc .....

Good luck,

Wesly
0
 

Author Comment

by:gsalcedo
ID: 12404461
Hi Wesly,

I have looked through the O'Reilly Sendmail book and know that the files that you have indicated needs to be configured and edited.  Practically, I do not have any option of not using sendmail.  The mail server (Solaris 8 Sun Server "Server Beta") that we are using currently is utilizing the sendmail.  The administrator prior to me, who handled the mail server, is no longer here.  So, I am left with trying to go through a crash course and absorb as much as I can.  

Basically, I have to use sendmail.  The Server Alpha is what I need to work with now.  It will be a Solaris 8 Sun server that will be run as a Symantec SMTP Antivirus Gateway server.  I do know that the configuration files are located in the /etc/mail directory.  

The objective of this project is to have the Server Alpha take control of the email traffic that are coming into the environment, going out to the internet and running within the environment.  Since the request of this question is quite large, it is the reason why I have given it 500 points.  

What I am requesting is basic step by step instruction on what I need to do and follow to make this project work.

Thank you.
0
 
LVL 38

Expert Comment

by:wesly_chen
ID: 12405860
Hi,

   I'd the same situation as yours before. I just installed webmail on both servers to make configuration easier for me.
However, I've left the company so I can just tell you out from my memory only.

   First, put Alpha in DMZ of firewall with WAN IP address or do one-to-one IP mapping on Alpha and open TCP port 25 to Alpha.

   Second, make sure your MX record pointing to the WAN IP of Alpha. So all the incoming mail will send to Alpha first.

   Third, use webmin (sorry, I used it before) /Servers/Sendmail/Sendmail Options for Alpha.
The first three options are important to you:
----(Alpha)------------------
Send outgoing mail via host:  deliver locally
Forward unqualified usernames to host : Beta
Forward mail for local users to host: Beta
---------------------------

   Then the rest are not difficult to figure out such as local domain, relay domains, etc.

   For Beta, the three Sendmail Options should be:
---(Beta)-------------------
Send outgoing mail via host:  Alpha
Forward unqualified usernames to host : deliver locally
Forward mail for local users to host: deliver locally
-----------------------------

    I hope this can help you.

Good luck,

Wesly


0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 38

Expert Comment

by:wesly_chen
ID: 12405915
By the way, the URL of webmin should be
http://www.webmin.com/
Sorry for the typo on my first post.

Wesly
0
 

Author Comment

by:gsalcedo
ID: 12411382
Hi Wesly,

I will give that a try and let you know how it turned out.  Thank you.
0
 

Author Comment

by:gsalcedo
ID: 12415098
Hi Wesly,

Just out of curiousity, is there anything that I need to configure on Sever Beta (Mail Server) to have it recognize Server Alpha (SMTP Server) and to have mail going to and from Server Alpha?  If so, what do I need to do?

Thank you
0
 
LVL 38

Expert Comment

by:wesly_chen
ID: 12416539
As I mentioned:
   For Beta, the three Sendmail Options should be:
---(Beta)-------------------
Send outgoing mail via host:  Alpha
Forward unqualified usernames to host : deliver locally
Forward mail for local users to host: deliver locally
-----------------------------

Besides, all your email clients need to set their SMTP to Alpha (and POP to Beta) so all the outgoing mails through Alpha and
store at Beta eventually.

Wesly
0
 

Author Comment

by:gsalcedo
ID: 12463703
Hi Wesly,

I am still working on some of the kinks.

Thank you.
0
 

Author Comment

by:gsalcedo
ID: 12464730
Hi Wesly,

Do you happen to know what I need to do to send mail to and accept mail from other mail server?  What files do I need to configure and what do I need to indicate on those "need to configure" files?

Thank you
0
 
LVL 38

Expert Comment

by:wesly_chen
ID: 12465141
> to send mail to and accept mail from other mail server
I'm not very sure your question? Can you specify more details?

Wesly
0
 

Author Comment

by:gsalcedo
ID: 12465273
Hi Wesly,

As you know, I am using Server Alpha as my SMTP server and Server Beta as my Mail server.  I have tested sending mail to users that are indicated in the Server Beta.  What I am trying to do is to send mail and receive mail to and from an user who is on another Mail Server (Server Delta).  I am not sure what I did wrong or if there are other configurations that I need to do.  Can you assist me on what I need to configure and what I need to indicate in the configuration?

Thank you.
0
 
LVL 38

Expert Comment

by:wesly_chen
ID: 12466291
Hi,

   You can export "/var/mail" on mail server beta, which the mail storage. Then mount the Beta:/var/mail on Delta (var/mail).
So you can read the same email spool.

   As for send mail,
--- Delta --
Send outgoing mail via host:  Alpha
----------

Wesly
0
 

Author Comment

by:gsalcedo
ID: 12468553
Hi Wesly,

I really appreciate your help.  I have another question.  If there is an external mail server, would Server Beta be able to receive those external emails?

Example....

Server Alpha, Server Beta, and Server Delta are under the same domain (abc.com)
External Mail Server is under another domain (xyz.com)

Would Server Beta and Server Delta be able to receive external mails from domain xyz.com?

If not, is there something that I would have to configure on Server Alpha (SMTP Server) to accept those emails to deliver them to either Server Beta or Server Delta?

Thank you
0
 
LVL 38

Expert Comment

by:wesly_chen
ID: 12468606
Hi,

   Since Beta is inside the firewall so external mail aserver cannot locate it and forward the emails to Beta
(unless you do one-to-one IP mapping on the firewall for Beta, but this defeat the security purpose.)

   For the deferent domain, you can put the xyz.com in your "relay domains" setting on Alpha so Alpha will relay
all the emails from xyz.com.

Wesly
   
0
 

Author Comment

by:gsalcedo
ID: 12468682
Hi Wesley,

So you are saying that I just inidicate the domain name other than the fully qualified domain name (FQDN), right.

0
 
LVL 38

Expert Comment

by:wesly_chen
ID: 12468730
It depends on that you want to forward all the emails in xyz.com or just the emails in XX.xyz.com ( FQDN of external email server).

Wesly
0
 

Author Comment

by:gsalcedo
ID: 12475863
Hi Wesly,

The issue that will be facing in the future is external emails not being able to go through the SMTP server (Server Alpha) and reach either of the internal mail servers (Server Beta and Delta).  I have indicated the xyz.com in the relay domains of Server Alpha, but the external mail still has a problem going to Server Beta and Delta.  I have indicated both, the domain name on one test run and then just the FQDN on another test run, on the Server Alpha relay domains, but no mail is able to reach Server Beta or Server Delta.  Since all mails have to go through the SMTP server (Server Alpha), is there something else that I have to configure other than the relay domains?

The message that the sender from the external mail would get is "The following recipient could not be reached."
0
 
LVL 38

Expert Comment

by:wesly_chen
ID: 12476090
Hi,

  Also add xyz.com in the "relays domains" on Beta and Delta.

Wesly
0
 

Author Comment

by:gsalcedo
ID: 12476160
Just out of curiousity .. would that have external emails not go through the SMTP server?
0
 
LVL 38

Accepted Solution

by:
wesly_chen earned 1000 total points
ID: 12476370
Hi,

   It's possible. Please check /etc/syslog.conf to see where is the mail log (/var/log/syslog ?).
And check the mail log on Alpha to see any email from xyz.com.

Wesly
0

Featured Post

Tech or Treat!

Submit an article about your scariest tech experience—and the solution—and you’ll be automatically entered to win one of 4 fantastic tech gadgets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Java performance on Solaris - Managing CPUs There are various resource controls in operating system which directly/indirectly influence the performance of application. one of the most important resource controls is "CPU".   In a multithreaded…
Why Shell Scripting? Shell scripting is a powerful method of accessing UNIX systems and it is very flexible. Shell scripts are required when we want to execute a sequence of commands in Unix flavored operating systems. “Shell” is the command line i…
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.
Suggested Courses

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question