ESET MAIL SECURITY - Setting ESETS for MTA Postfix

32
ESET Mail Security
A.1. Setting ESETS for MTA Postx
A.1.1. Inbound e-mail messages scanning
Warning: This installation is not compatible with SELinux. Either disable SELinux or follow
the next section.
The goal of this installation is to insert esets_mda before Postx original MDA. Used MDA
(witharguments)issetinthePostxparameter‘mailbox_command’.
Note: If the value is empty, Postfix is delivering mail by himself. You have to install and configure a real
MDA (e.g. procmail) and use that first for ‘mailbox_command’ including arguments (e.g. /usr/
bin/procmail -d “$USER”). Reload Postfix and make sure it is delivering mail according your needs.
Now, you can continue with ESETS installation.
Take the full path to the current Postx MDA and set the parameter‘mda_path’ in [mda]
section of ESETS conguration le to this value, in our sample case:
mda_path = ”/usr/bin/procmail”
and restart ESETS daemon. Then replace the path to current Postx MDA with esets_mda
path and add -- --recipient=”$RECIPIENT” --sender=”$SENDER” to the arguments, in our sample
case:
mailbox_command = @BINDIR@/esets_mda -d ”$USER”
-- --recipient=”$RECIPIENT” --sender=”$SENDER”
For reread of newly created conguration, reload Postx.
A.1.2. Bi-directional e-mail messages scanning
The goal of this installation is to divert all mails from Postx to esets_smtp and get them back.
In the [smtp] section of ESETS conguration le set these parameters:
agent_enabled = yes
listen_addr = ”localhost”
listen_port = 2526
server_addr = ”localhost”
server_port = 2525
and restart ESETS daemon. It will start esets_smtp and make it scan all SMTP communication
acceptedon‘listen_addr:listen_port’andforwarditto‘server_addr:server_port’.Todivertallmail
to esets_smtp set in Postx:
  content_lter=smtp:[127.0.0.1]:2526
Note: In case the ‘content_filter’ parameter already has a value, don’t follow these instructions.
Instead, you have to insert esets_smtp (or other ESETS mail scanning module) before or after your
current ‘content_filter’.