Link to home
Start Free TrialLog in
Avatar of gsalcedo
gsalcedo

asked on

Configure a Solaris 8 Sun Server to be a Symantec SMTP Antivirus Gateway server.

Hi,

Currently, I am in a slump with configuring a Solaris server to be a SMTP Antivirus Gateway server.  With my level on sendmail, I have hit a brick wall.  I am in the process of setting up a Solaris 8 Sun Server to be a SMTP Antivirus Gateway server (Server Alpha) for another Solaris 8 Mail Server (Server Beta).  Server Alpha and Beta are within a firewall under one domain.  The objective is to have all external and internal emails to go through the SMTP Antivirus Gateway Server (Server Alpha) prior to going to the Mail Server (Server Beta) and the clients' POP3 mailboxes.  Can you assist me with steps that I need to follow, such as what files do I need to edit, how should I configure them, what lines do I need to add, etc..?  Thank you.
Avatar of wesly_chen
wesly_chen
Flag of United States of America image

Hi,

   Are you fimilar with sendmail? If not, then things are not easier for you and the helper.
You might want to install webmin ( http://www.erbmin.com ) on both sendmail servers. Webmin provides GUI utilities for you
through web browser ( Type in http://<server anme>:10000/ from your PC ) to help to configure sendmail.

   All the sendmail configuration files are under /etc/mail. There are a couple of files need to be changed, such as
access, relay_domains, sendmail.cf, aliases, etc .....

Good luck,

Wesly
Avatar of gsalcedo
gsalcedo

ASKER

Hi Wesly,

I have looked through the O'Reilly Sendmail book and know that the files that you have indicated needs to be configured and edited.  Practically, I do not have any option of not using sendmail.  The mail server (Solaris 8 Sun Server "Server Beta") that we are using currently is utilizing the sendmail.  The administrator prior to me, who handled the mail server, is no longer here.  So, I am left with trying to go through a crash course and absorb as much as I can.  

Basically, I have to use sendmail.  The Server Alpha is what I need to work with now.  It will be a Solaris 8 Sun server that will be run as a Symantec SMTP Antivirus Gateway server.  I do know that the configuration files are located in the /etc/mail directory.  

The objective of this project is to have the Server Alpha take control of the email traffic that are coming into the environment, going out to the internet and running within the environment.  Since the request of this question is quite large, it is the reason why I have given it 500 points.  

What I am requesting is basic step by step instruction on what I need to do and follow to make this project work.

Thank you.
Hi,

   I'd the same situation as yours before. I just installed webmail on both servers to make configuration easier for me.
However, I've left the company so I can just tell you out from my memory only.

   First, put Alpha in DMZ of firewall with WAN IP address or do one-to-one IP mapping on Alpha and open TCP port 25 to Alpha.

   Second, make sure your MX record pointing to the WAN IP of Alpha. So all the incoming mail will send to Alpha first.

   Third, use webmin (sorry, I used it before) /Servers/Sendmail/Sendmail Options for Alpha.
The first three options are important to you:
----(Alpha)------------------
Send outgoing mail via host:  deliver locally
Forward unqualified usernames to host : Beta
Forward mail for local users to host: Beta
---------------------------

   Then the rest are not difficult to figure out such as local domain, relay domains, etc.

   For Beta, the three Sendmail Options should be:
---(Beta)-------------------
Send outgoing mail via host:  Alpha
Forward unqualified usernames to host : deliver locally
Forward mail for local users to host: deliver locally
-----------------------------

    I hope this can help you.

Good luck,

Wesly


By the way, the URL of webmin should be
http://www.webmin.com/
Sorry for the typo on my first post.

Wesly
Hi Wesly,

I will give that a try and let you know how it turned out.  Thank you.
Hi Wesly,

Just out of curiousity, is there anything that I need to configure on Sever Beta (Mail Server) to have it recognize Server Alpha (SMTP Server) and to have mail going to and from Server Alpha?  If so, what do I need to do?

Thank you
As I mentioned:
   For Beta, the three Sendmail Options should be:
---(Beta)-------------------
Send outgoing mail via host:  Alpha
Forward unqualified usernames to host : deliver locally
Forward mail for local users to host: deliver locally
-----------------------------

Besides, all your email clients need to set their SMTP to Alpha (and POP to Beta) so all the outgoing mails through Alpha and
store at Beta eventually.

Wesly
Hi Wesly,

I am still working on some of the kinks.

Thank you.
Hi Wesly,

Do you happen to know what I need to do to send mail to and accept mail from other mail server?  What files do I need to configure and what do I need to indicate on those "need to configure" files?

Thank you
> to send mail to and accept mail from other mail server
I'm not very sure your question? Can you specify more details?

Wesly
Hi Wesly,

As you know, I am using Server Alpha as my SMTP server and Server Beta as my Mail server.  I have tested sending mail to users that are indicated in the Server Beta.  What I am trying to do is to send mail and receive mail to and from an user who is on another Mail Server (Server Delta).  I am not sure what I did wrong or if there are other configurations that I need to do.  Can you assist me on what I need to configure and what I need to indicate in the configuration?

Thank you.
Hi,

   You can export "/var/mail" on mail server beta, which the mail storage. Then mount the Beta:/var/mail on Delta (var/mail).
So you can read the same email spool.

   As for send mail,
--- Delta --
Send outgoing mail via host:  Alpha
----------

Wesly
Hi Wesly,

I really appreciate your help.  I have another question.  If there is an external mail server, would Server Beta be able to receive those external emails?

Example....

Server Alpha, Server Beta, and Server Delta are under the same domain (abc.com)
External Mail Server is under another domain (xyz.com)

Would Server Beta and Server Delta be able to receive external mails from domain xyz.com?

If not, is there something that I would have to configure on Server Alpha (SMTP Server) to accept those emails to deliver them to either Server Beta or Server Delta?

Thank you
Hi,

   Since Beta is inside the firewall so external mail aserver cannot locate it and forward the emails to Beta
(unless you do one-to-one IP mapping on the firewall for Beta, but this defeat the security purpose.)

   For the deferent domain, you can put the xyz.com in your "relay domains" setting on Alpha so Alpha will relay
all the emails from xyz.com.

Wesly
   
Hi Wesley,

So you are saying that I just inidicate the domain name other than the fully qualified domain name (FQDN), right.

It depends on that you want to forward all the emails in xyz.com or just the emails in XX.xyz.com ( FQDN of external email server).

Wesly
Hi Wesly,

The issue that will be facing in the future is external emails not being able to go through the SMTP server (Server Alpha) and reach either of the internal mail servers (Server Beta and Delta).  I have indicated the xyz.com in the relay domains of Server Alpha, but the external mail still has a problem going to Server Beta and Delta.  I have indicated both, the domain name on one test run and then just the FQDN on another test run, on the Server Alpha relay domains, but no mail is able to reach Server Beta or Server Delta.  Since all mails have to go through the SMTP server (Server Alpha), is there something else that I have to configure other than the relay domains?

The message that the sender from the external mail would get is "The following recipient could not be reached."
Hi,

  Also add xyz.com in the "relays domains" on Beta and Delta.

Wesly
Just out of curiousity .. would that have external emails not go through the SMTP server?
ASKER CERTIFIED SOLUTION
Avatar of wesly_chen
wesly_chen
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial