Solved

Configure a Solaris 8 Sun Server to be a Symantec SMTP Antivirus Gateway server.

Posted on 2004-10-25
275 Views
Last Modified: 2013-12-27
Hi,

Currently, I am in a slump with configuring a Solaris server to be a SMTP Antivirus Gateway server.  With my level on sendmail, I have hit a brick wall.  I am in the process of setting up a Solaris 8 Sun Server to be a SMTP Antivirus Gateway server (Server Alpha) for another Solaris 8 Mail Server (Server Beta).  Server Alpha and Beta are within a firewall under one domain.  The objective is to have all external and internal emails to go through the SMTP Antivirus Gateway Server (Server Alpha) prior to going to the Mail Server (Server Beta) and the clients' POP3 mailboxes.  Can you assist me with steps that I need to follow, such as what files do I need to edit, how should I configure them, what lines do I need to add, etc..?  Thank you.
0
Question by:gsalcedo
    20 Comments
     
    LVL 38

    Expert Comment

    by:wesly_chen
    Hi,

       Are you fimilar with sendmail? If not, then things are not easier for you and the helper.
    You might want to install webmin ( http://www.erbmin.com ) on both sendmail servers. Webmin provides GUI utilities for you
    through web browser ( Type in http://<server anme>:10000/ from your PC ) to help to configure sendmail.

       All the sendmail configuration files are under /etc/mail. There are a couple of files need to be changed, such as
    access, relay_domains, sendmail.cf, aliases, etc .....

    Good luck,

    Wesly
    0
     

    Author Comment

    by:gsalcedo
    Hi Wesly,

    I have looked through the O'Reilly Sendmail book and know that the files that you have indicated needs to be configured and edited.  Practically, I do not have any option of not using sendmail.  The mail server (Solaris 8 Sun Server "Server Beta") that we are using currently is utilizing the sendmail.  The administrator prior to me, who handled the mail server, is no longer here.  So, I am left with trying to go through a crash course and absorb as much as I can.  

    Basically, I have to use sendmail.  The Server Alpha is what I need to work with now.  It will be a Solaris 8 Sun server that will be run as a Symantec SMTP Antivirus Gateway server.  I do know that the configuration files are located in the /etc/mail directory.  

    The objective of this project is to have the Server Alpha take control of the email traffic that are coming into the environment, going out to the internet and running within the environment.  Since the request of this question is quite large, it is the reason why I have given it 500 points.  

    What I am requesting is basic step by step instruction on what I need to do and follow to make this project work.

    Thank you.
    0
     
    LVL 38

    Expert Comment

    by:wesly_chen
    Hi,

       I'd the same situation as yours before. I just installed webmail on both servers to make configuration easier for me.
    However, I've left the company so I can just tell you out from my memory only.

       First, put Alpha in DMZ of firewall with WAN IP address or do one-to-one IP mapping on Alpha and open TCP port 25 to Alpha.

       Second, make sure your MX record pointing to the WAN IP of Alpha. So all the incoming mail will send to Alpha first.

       Third, use webmin (sorry, I used it before) /Servers/Sendmail/Sendmail Options for Alpha.
    The first three options are important to you:
    ----(Alpha)------------------
    Send outgoing mail via host:  deliver locally
    Forward unqualified usernames to host : Beta
    Forward mail for local users to host: Beta
    ---------------------------

       Then the rest are not difficult to figure out such as local domain, relay domains, etc.

       For Beta, the three Sendmail Options should be:
    ---(Beta)-------------------
    Send outgoing mail via host:  Alpha
    Forward unqualified usernames to host : deliver locally
    Forward mail for local users to host: deliver locally
    -----------------------------

        I hope this can help you.

    Good luck,

    Wesly


    0
     
    LVL 38

    Expert Comment

    by:wesly_chen
    By the way, the URL of webmin should be
    http://www.webmin.com/
    Sorry for the typo on my first post.

    Wesly
    0
     

    Author Comment

    by:gsalcedo
    Hi Wesly,

    I will give that a try and let you know how it turned out.  Thank you.
    0
     

    Author Comment

    by:gsalcedo
    Hi Wesly,

    Just out of curiousity, is there anything that I need to configure on Sever Beta (Mail Server) to have it recognize Server Alpha (SMTP Server) and to have mail going to and from Server Alpha?  If so, what do I need to do?

    Thank you
    0
     
    LVL 38

    Expert Comment

    by:wesly_chen
    As I mentioned:
       For Beta, the three Sendmail Options should be:
    ---(Beta)-------------------
    Send outgoing mail via host:  Alpha
    Forward unqualified usernames to host : deliver locally
    Forward mail for local users to host: deliver locally
    -----------------------------

    Besides, all your email clients need to set their SMTP to Alpha (and POP to Beta) so all the outgoing mails through Alpha and
    store at Beta eventually.

    Wesly
    0
     

    Author Comment

    by:gsalcedo
    Hi Wesly,

    I am still working on some of the kinks.

    Thank you.
    0
     

    Author Comment

    by:gsalcedo
    Hi Wesly,

    Do you happen to know what I need to do to send mail to and accept mail from other mail server?  What files do I need to configure and what do I need to indicate on those "need to configure" files?

    Thank you
    0
     
    LVL 38

    Expert Comment

    by:wesly_chen
    > to send mail to and accept mail from other mail server
    I'm not very sure your question? Can you specify more details?

    Wesly
    0
     

    Author Comment

    by:gsalcedo
    Hi Wesly,

    As you know, I am using Server Alpha as my SMTP server and Server Beta as my Mail server.  I have tested sending mail to users that are indicated in the Server Beta.  What I am trying to do is to send mail and receive mail to and from an user who is on another Mail Server (Server Delta).  I am not sure what I did wrong or if there are other configurations that I need to do.  Can you assist me on what I need to configure and what I need to indicate in the configuration?

    Thank you.
    0
     
    LVL 38

    Expert Comment

    by:wesly_chen
    Hi,

       You can export "/var/mail" on mail server beta, which the mail storage. Then mount the Beta:/var/mail on Delta (var/mail).
    So you can read the same email spool.

       As for send mail,
    --- Delta --
    Send outgoing mail via host:  Alpha
    ----------

    Wesly
    0
     

    Author Comment

    by:gsalcedo
    Hi Wesly,

    I really appreciate your help.  I have another question.  If there is an external mail server, would Server Beta be able to receive those external emails?

    Example....

    Server Alpha, Server Beta, and Server Delta are under the same domain (abc.com)
    External Mail Server is under another domain (xyz.com)

    Would Server Beta and Server Delta be able to receive external mails from domain xyz.com?

    If not, is there something that I would have to configure on Server Alpha (SMTP Server) to accept those emails to deliver them to either Server Beta or Server Delta?

    Thank you
    0
     
    LVL 38

    Expert Comment

    by:wesly_chen
    Hi,

       Since Beta is inside the firewall so external mail aserver cannot locate it and forward the emails to Beta
    (unless you do one-to-one IP mapping on the firewall for Beta, but this defeat the security purpose.)

       For the deferent domain, you can put the xyz.com in your "relay domains" setting on Alpha so Alpha will relay
    all the emails from xyz.com.

    Wesly
       
    0
     

    Author Comment

    by:gsalcedo
    Hi Wesley,

    So you are saying that I just inidicate the domain name other than the fully qualified domain name (FQDN), right.

    0
     
    LVL 38

    Expert Comment

    by:wesly_chen
    It depends on that you want to forward all the emails in xyz.com or just the emails in XX.xyz.com ( FQDN of external email server).

    Wesly
    0
     

    Author Comment

    by:gsalcedo
    Hi Wesly,

    The issue that will be facing in the future is external emails not being able to go through the SMTP server (Server Alpha) and reach either of the internal mail servers (Server Beta and Delta).  I have indicated the xyz.com in the relay domains of Server Alpha, but the external mail still has a problem going to Server Beta and Delta.  I have indicated both, the domain name on one test run and then just the FQDN on another test run, on the Server Alpha relay domains, but no mail is able to reach Server Beta or Server Delta.  Since all mails have to go through the SMTP server (Server Alpha), is there something else that I have to configure other than the relay domains?

    The message that the sender from the external mail would get is "The following recipient could not be reached."
    0
     
    LVL 38

    Expert Comment

    by:wesly_chen
    Hi,

      Also add xyz.com in the "relays domains" on Beta and Delta.

    Wesly
    0
     

    Author Comment

    by:gsalcedo
    Just out of curiousity .. would that have external emails not go through the SMTP server?
    0
     
    LVL 38

    Accepted Solution

    by:
    Hi,

       It's possible. Please check /etc/syslog.conf to see where is the mail log (/var/log/syslog ?).
    And check the mail log on Alpha to see any email from xyz.com.

    Wesly
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Learn The Basics of Ethical Hacking & Pen Testing

    Computer and network security is one of the fastest growing and most essential industries in technology, meaning companies will pay big bucks for ethical hackers. This is the perfect course to leap into this lucrative career, learning how to use ethical hacking to reveal ...

    My previous tech tip, Installing the Solaris OS From the Flash Archive On a Tape (http://www.experts-exchange.com/articles/OS/Unix/Solaris/Installing-the-Solaris-OS-From-the-Flash-Archive-on-a-Tape.html), discussed installing the Solaris Operating S…
    I promised to write further about my project, and here I am.  First, I needed to setup the Primary Server.  You can read how in this article: Setup FreeBSD Server with full HDD encryption (http://www.experts-exchange.com/OS/Unix/BSD/FreeBSD/A_3660-S…
    Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
    Video by: Phil
    This video goes over how to configure and start a jail in FreeBSD.  This video is meant to supplement the following article: http://www.experts-exchange.com/OS/Unix/A_17455-HOWTO-FreeBSD-Jails.html

    933 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now