Instruction/ maintenance manual of the product AntiVir UNIX MailGate 3 years 10 Units 03MAIL_10_24 Avira
Go to page of 67
A vir a AntiVir MailGate | MailGate Suite www.avira.c om User Manual.
Avira GmbH Avira AntiVir MailGate 2 Contents 1 About this Manual ............ ........................................................ ........... 3 1.1 Introduction .....................................................................................
About this Manual Avira GmbH Avira AntiVir MailGate 3 1A b o u t t h i s M a n u a l In this Chapter you can find an overview of the structure and contents of this manual.
About this Manual Avira GmbH Avira AntiVir MailGate 4 1.2 T he Structure of the Manual The manual of your AntiVir software con sists of a number of Chapters, providing the following information: 1.
About this Manual Avira GmbH Avira AntiVir MailGate 5 For improved legibility and clear marking, the following types of emphasis are also used in the text: 1.
Product Information Avira GmbH Avira AntiVir MailGate 6 2P r o d u c t I n f o r m a t i o n Email file transfer is a natural part of modern communic ation and we can no longer imagine everyday life withou t it. However, emails frequently also transport viruses or unwanted programs.
Product Information Avira GmbH Avira AntiVir MailGate 7 2.1 Featur es Avira AntiVir MailGate supp orts a variety of configuration settings to ensure that you have control of the em ail traffic on your system.
Product Information Avira GmbH Avira AntiVir MailGate 8 2.2 Modules and Op erating M ode of Avir a AntiVir MailGate Avira AntiVir MailGate is an SMTP scanner, which scans al l incoming and outgoing emails, including attachments, on your UNIX mail server for viruses/unwanted programs (see figure below).
Product Information Avira GmbH Avira AntiVir MailGate 9 Warnings: The postmaster receives an email containing detailed alerts when viruses, unwanted programs or suspicio us files are detected. The al erts can also be sent to the sender and recipient of the email.
Product Information Avira GmbH Avira AntiVir MailGate 10 The license file must have the suffix .key (case insensitive). The new scanner backend (savapi) does not display information about the license file, when called with --version .
Milter Mode Avira GmbH Avira AntiVir MailGate 11 3M i l t e r M o d e 3.1 O ver vie w AntiVir Milter has been a stand-alone product up to now. The product has been available only for Sendmail, using the Sendmail Milter interface. Now, the Milter functionality is integrated in MailGate.
Milter Mode Avira GmbH Avira AntiVir MailGate 12 3.2 AntiVir MailGate (Milter Mode) F eatures AntiVir MailGate (Milter mode) is a plug-i n for Sendmail, starting with version 8.11, and communicates through Sendmail’s libmilter interface. It scans all incoming and outgoing emai ls.
Milter Mode Avira GmbH Avira AntiVir MailGate 13 Directly modify sendmail.cf X Inser t the following two lines in the configuration file sendmail.cf : Xavmilter, S=inet:3333@localhost, F=R, T=S:2m;R:2.
Installation Avira GmbH Avira AntiVir MailGate 14 4 Installation You can find the current versio n of AntiVir MailGate on Avir a website . AntiVir is supplied as a packed archive. You can instal l the program on your system using the install script. Requirements You have to be logged in as r oot in order to install Anti Vir MailGate.
Installation Avira GmbH Avira AntiVir MailGate 15 4.1 Preparing the Installation Files Downloading pr ogram files from the Internet X Download the current files from our website http://www .avir a.com to your local computer . T he file name is antiv ir-mailgate-prof-<version>.
Installation Avira GmbH Avira AntiVir MailGate 16 4.3 Installation with the Installation Scr ipt "install" The install script performs the in stallation of AntiVir MailGate automatically.
Installation Avira GmbH Avira AntiVir MailGate 17 The AntiVir Engine is being in stalled. Then the script asks for the path to the license file: X Type the path t o the license file and press Ent er – OR – If you want to copy the license file later, just click Enter .
Installation Avira GmbH Avira AntiVir MailGate 18 X Confir m the default path with Ente r or type another one. The following questions regard the local and relayed hosts: X Ch ange the host name, if necessar y , and pr ess Ent er . The next question is: X Change the settings if necessar y and pr ess Ent er .
Installation Avira GmbH Avira AntiVir MailGate 19 X Finally , you can start AntiVir MailGate: /usr/lib/AntiVir/avmailgate start 4.4 Reinstalling and Uninstalling AntiVir You can re-launch the install script at any time. There are several possible situations: • Install a new version (upgrade).
Installation Avira GmbH Avira AntiVir MailGate 20 X Make the changes you need during installation proc edure. AntiVir MailGate is installed with the required settings. Uninstalling AntiVir You can use the uninstall script, located in the temp orary AntiVir directory, to remove Avira AntiVir MailGate.
Installation Avira GmbH Avira AntiVir MailGate 21 z Proxy mode Content Filter AntiVir MailGate configuration : X Modify (or add) the following entries in avm a i l ga te . co n f : ListenAddress 127.0.0.1 port 10024 ForwardTo SMTP: 127.0.0.1 port 10025 X Restar t AntiVir MailGate.
Installation Avira GmbH Avira AntiVir MailGate 22 X Restar t AntiVir MailGate. Exim configuration : X Modify (or add) the following entries in exim.conf : daemon_smtp_port = 825 X Restar t E xim.
Installation Avira GmbH Avira AntiVir MailGate 23 X Change these entr ies as below : # ForwardTo /usr/sbin/sendmail -oem -oi # Or if you want the mail to be sent by SMTP ForwardTo SMTP: localhost port smtp-backdoor If you use inetd with Qmail: X Inser t the following line in inetd.
Installation Avira GmbH Avira AntiVir MailGate 24 X Change these entr ies as below : # Select how mail should be forwarded. # Send mail by piping it thru sendmail (this is the default) # ForwardTo /us.
Installation Avira GmbH Avira AntiVir MailGate 25 Listen on port 25 X Loo k i n mast er .cf for : smtp inet n - n - - smtpd X Comment it out: # smtp inet n - n - - smtpd It prevents Postfix from listening on SMTP port. SMTP daemon can listen on this port.
Configuration Avira GmbH Avira AntiVir MailGate 26 5 Config uration You can adjust AntiVir MailGate for op timum performance on your system. During installation with the install script, some of the settings are suggested and you can make changes at any time.
Configuration Avira GmbH Avira AntiVir MailGate 27 5.1 MailGate Spool Directories AntiVir MailGate isolates infected ema ils in "quarantine". Depending on the configuration, a message about the detectio n of a virus/unwanted program is sent to postmaster and/or the sender and/or recipient of the email.
Configuration Avira GmbH Avira AntiVir MailGate 28 Spool files processing If there is a virus/unwanted p rogram detection, the directory /var/spool/avmailgate/r ejected/ contains: z df- file z vf- fil.
Configuration Avira GmbH Avira AntiVir MailGate 29 MyHostName Host name : FQDN (Fully Qualified Doma in Name) of the local host. If not set, the default setting is given by gethostname(2) .
Configuration Avira GmbH Avira AntiVir MailGate 30 PidDir PID directory : This directory saves the PID files for MailGate’s main processes. You must stop AntiVir MailGate before changing this parameter. PidDir /var/tmp Syslog Fac il i t y Syslog facility: It sets the log category that Syslo g should apply for MailGate messages.
Configuration Avira GmbH Avira AntiVir MailGate 31 MaxMessage Size Maximum message size (not in milter mode): A value greater than 0 means that only em ails up to the given size are scanned. Larger emails are rejected. If the value is 0, all messages of any size are scanned.
Configuration Avira GmbH Avira AntiVir MailGate 32 hostA,@hostB:user@hostC If source r outing is allowed, the email is sent to hostA , other wise to hostC.
Configuration Avira GmbH Avira AntiVir MailGate 33 According to the result, the procedures are: z if there is no mat ch in the fi rst list, the nex t list is checked. z if there is no mat ch in the second list either , th e email is scanned. z if there is a mat ch in the igno re list, the email is not scanned.
Configuration Avira GmbH Avira AntiVir MailGate 34 command (not in milter mode). SMTPHeloTimeout 300 SMTP MailFrom Tim eout Defines the maximum timeout, in seconds, for receiving a reply to the MAIL FROM command (not in milter mode).
Configuration Avira GmbH Avira AntiVir MailGate 35 requests. ScannerListenAddress /var/run/avmailgate/scanne r Max Attachments Maximum number of em ail attachments (MIME) : Defines the maximum number of atta chments for a single MIME email. MaxAttachments 100 Bloc k Suspicious Mime Blocking suspicious emails (MIME) : Blocks suspicious MIME emails.
Configuration Avira GmbH Avira AntiVir MailGate 36 Expose SenderAlerts Sending alerts to sen ders of concerning emails : You can send alerts about viruses and unwanted programs to senders. The available values are: • NO : the sender will receive no virus aler t .
Configuration Avira GmbH Avira AntiVir MailGate 37 If the setting is YES, non-MIME em ails are transformed into MIME emails. ForwardAllEmailAsMIME NO ScanInAr chiv e Scan in archives : If the setting is NO, the ar chives are not scanned for viruses/unwanted programs.
Configuration Avira GmbH Avira AntiVir MailGate 38 Bloc k Encr ypted Archive Blocking emails with pa ssword-protected archives : If the setting is YES , emails containing password-prot ected files in archives are rejected. If NO is set, emails containing encryp ted archives are also delivered.
Configuration Avira GmbH Avira AntiVir MailGate 39 Quarantine Ale rt Sending alert emails to quarantine: (Available only in Milter mode) If QuarantineAlert is YES and RejectAlertMail is YES , an email containing an al ert will be rejected and the email will be quarantined.
Configuration Avira GmbH Avira AntiVir MailGate 40 Boun ce MessageUser Recipient for email failure (not in milter mode): This is the user that receives email failure reports when an email cannot be sent by MTA.
Configuration Avira GmbH Avira AntiVir MailGate 41 Not if y En d OfLi c en se Information on license expiry date : Sends a message to postmaster, 30 days bef ore license expiration date.
Configuration Avira GmbH Avira AntiVir MailGate 42 Options and parameters for spam filter Enable SpamCheck Activates/deactivates spam filter. EnableSpamCheck NO SpamAction Defines an action for spam mails: BLOCK, TAG, NONE. • T AG inser ts a header line into the email.
Configuration Avira GmbH Avira AntiVir MailGate 43 this file can be used as a blac k and white list for the spam filter. Each list consists of an address, given as regular expression. E.g.: /^someone@somewhere.tld$/i blacklist The above example treats emails from someone@somewhere.
Configuration Avira GmbH Avira AntiVir MailGate 44 Another example : • in /etc/a vmailgate.c onf: DangerousAttachmentAction TAG DangerousIFrameAction TAG • in /etc/asmailgate.ex cept: /^me@here.tld$/i r !tag_dangerous_attachment !tag_dangerous_iframe Don't tag DangerousAttachment and DangerousIFrame mails.
Configuration Avira GmbH Avira AntiVir MailGate 45 SpamFilter Modif yS ubj ect Inserts the spam check result into the "Subject:" header line: Subject: [spamcheck : spam] this is the or igin al subject tex t This is the default message.It can be overridden using a template: " spamfilter- subjects ".
Configuration Avira GmbH Avira AntiVir MailGate 46 5.4 Scanner Conf iguration in avmailga te-s canner .conf A new configuration file has been introd uced, starting with MailGate v 3.0.0: avm a i lg a te - s c a n ne r. co nf . It contains config uration options specific to the new scanner backend.
Configuration Avira GmbH Avira AntiVir MailGate 47 UseSavapiProxy 0 P oolScanners The number of AntiVir scanners set in the pool. Default: PoolScanners 24 Po o l Connections The maximum number of simultaneous co nnections MailGate allows to the scanner pool.
Configuration Avira GmbH Avira AntiVir MailGate 48 X Set which hosts and networks ma y send emails. For example: relay: 127.0.0.1/8 192.168.0.0/16 IP addresses You can specify IP addresses in various ways: 192.168.0.0/16 or 192.168 Both have the same meaning.
Configuration Avira GmbH Avira AntiVir MailGate 49 X Copy the example templates in the requ ir ed language from the templates direct or y /usr/lib/AntiV ir/templates/examples/<langua ge>/ in the direct or y /usr/lib/AntiVir/templates . X Change the director y to /usr/lib/A ntiVir/templates .
Configuration Avira GmbH Avira AntiVir MailGate 50 Exam ple f o r aler t-sender SUBJECT: AntiVir ALARM [Your email: "SUBJECT"] **********************AntiVir ALARM************ ******* AntiVir has discovered the following in the email sent from your address: ALERTS This email has not been sent, but isolated on y our server.
Configuration Avira GmbH Avira AntiVir MailGate 51 5.8 Upd ater Configura tion in av update.conf Updates ensure that AntiVir MailGate co mponents (MailGate, scanner, VDF and engine), which provide security against viruses or unwanted programs, are always kept up to date.
Configuration Avira GmbH Avira AntiVir MailGate 52 • 1 - email notifications are sent in case of "successful update", "unsuc cessful up date ", or " up to d ate". • 2 - email notification only in case of "unsucc essful update".
Operation Avira GmbH Avira AntiVir MailGate 53 6O p e r a t i o n After concluding installa tion and configuration and when AntiVir MailGate is running, MailGate guarantees continuous monitoring of your system. During operation you might have to make occasion al changes in settings, as described in Configuration – Page 26.
Operation Avira GmbH Avira AntiVir MailGate 54 Star ting AntiVir MailGate X Type: /usr/lib/AntiVir/avmailgate start The program starts with the following message: Stopping AntiVir MailGat e X Type.
Operation Avira GmbH Avira AntiVir MailGate 55 6.2 P arameters f or SMTP and Scanner Daemon The following tables describe the possible command line parameters that overrule avm a i lg a te . co n f settings. Syntax: avmailgate.bin [-V|--version] [-i] [-C config -file] [-D debug-level] [--stop] [--status] [--avq] P arameters for a vmailgate.
Operation Avira GmbH Avira AntiVir MailGate 56 6.3 Queue Mana ger avq The Queue Manager avq is integrated in av m ai l g at e. b i n . The Queue Manager enables manipulation of the AntiVir MailGate spool directory /var/spool/avmailgate/ and its sub-directories.
Operation Avira GmbH Avira AntiVir MailGate 57 You can control the outcome with the following parameters after --avq (the Help provides more parameters, which you can call with --avq --help ). Deleting emails fr om que ue Deleting emails from the queu e is important in the event of infected emails.
Operation Avira GmbH Avira AntiVir MailGate 58 X Type the command (wher e <ID> is t he ID of the infected email): /usr/lib/AntiVir/avmailgate.bin --avq --remove= <ID> The email is deleted from the queue. For cing email for war ding This procedure may forward po tentially dangerous viruses.
Operation Avira GmbH Avira AntiVir MailGate 59 6. 4 Pro ce d u res w he n De t e ct i n g V i r us e s / Unw a nte d P ro g ra m s If configured correctly, AntiVir MailGate has already automatically carried out all important antivirus ta sks on your system: z Infected emails ar e not f orwarded.
Updates Avira GmbH Avira AntiVir MailGate 60 7U p d a t e s With Avira Updater you can update Av ira software on your computers, using Avira update servers. The program can be configured eit her by editing the configuration file (see 5.8 Updater Configurati on in avupdate.
Updates Avira GmbH Avira AntiVir MailGate 61 As [product] , you can use: • Scanner - (rec ommended) to update the scanner , eng ine and vdf files. • MailGate - complete update (MailGate, scanner , eng ine and vdf files).
Service Avira GmbH Avira AntiVir MailGate 62 8S e r v i c e 8.1 Suppor t Support Ser v ice Our website http://www .a vira.com contains all the necessary information on our extensive support service. The expertise and experience of our developers is available to you.
Service Avira GmbH Avira AntiVir MailGate 63 8.3 Contact Address Avira GmbH Lindauer Strasse 21 D-88069 Tettnang Germany Interne t You can find further information on us and our products by visiting http://www .
Appendix Avira GmbH Avira AntiVir MailGate 64 9 A ppendix 9.1 Glossar y Te r m M e a n i n g cron (daemon) A daemon which starts other programs at specified times. Daemon A background process for admi nistration on UNIX systems. On average, there are about a dozen daemons running on a computer.
Appendix Avira GmbH Avira AntiVir MailGate 65 9.2 Fur ther Information You can find further information on vi ruses, worms, macro viruses and other unwanted programs at http://www .a vira.com . syslog daemon A daemon used by programs for logging various information.
Appendix Avira GmbH Avira AntiVir MailGate 66 9.3 Golden Rules for Pr otection Against Vir uses X Always keep boot f loppy disks for your network ser ver and for your workstations.
A vir a AntiVir MailGate | A vira AntiVir MailGate Suite www.avira.c om © Avira GmbH. All rights r eserved. This manual was cr eated with gr eat car e.
An important point after buying a device Avira AntiVir UNIX MailGate 3 years 10 Units 03MAIL_10_24 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Avira AntiVir UNIX MailGate 3 years 10 Units 03MAIL_10_24 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Avira AntiVir UNIX MailGate 3 years 10 Units 03MAIL_10_24 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Avira AntiVir UNIX MailGate 3 years 10 Units 03MAIL_10_24 you will learn all the available features of the product, as well as information on its operation. The information that you get Avira AntiVir UNIX MailGate 3 years 10 Units 03MAIL_10_24 will certainly help you make a decision on the purchase.
If you already are a holder of Avira AntiVir UNIX MailGate 3 years 10 Units 03MAIL_10_24, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Avira AntiVir UNIX MailGate 3 years 10 Units 03MAIL_10_24.
However, one of the most important roles played by the user manual is to help in solving problems with Avira AntiVir UNIX MailGate 3 years 10 Units 03MAIL_10_24. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Avira AntiVir UNIX MailGate 3 years 10 Units 03MAIL_10_24 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
