ESET NOD32 ANTIVIRUS - FOR LINUX-BSD MAIL SERVER User Manual

43
data encryption in communication between local MTA and Internet and still use the ’content ltering’ methods. In MTA
Sendmail content ltering there is no problem with SMTP TLS support at all as the Sendmail Milter does not relay
on the SMTP communication and content ltering is done rather internally. On the other hand the Postx uses SMTP
protocol for data communication between content lter and MTA. Therefore once the TLS is enabled in Postx, the
content ltering method fails as whole the SMTP communication is encrypted. Fortunately, this can be solved on the
Postx TLS conguration level. The situation is depicted in a gure 7-1.
As is shown in the gure above, once the TLS is enabled, all the SMTP communication channels including SMTP
communication with content lter are aected. The only possibility in this case is to disable the TLS support for
communication between client and server located within localhost. This can be achieved by adding the following line
into the main Postx conguration le:
smtp_tls_per_site=hash:/etc/postx/smtp_tls_per_site
In addition you have to create ‚etc/postx/smtp_tls_per_site‘ le with the following content:
localhost NONE
and provide its appropriate hash table by entering the following command from ‚/etc/postx‘ directory:
postmap hash:smtp_tls_per_site
By using the above statement the ’/etc/postx/smtp_tls_per_site.db’ le is created that is used by Postx to enable
TLS on per site basis. As far as we have disabled TLS for localhost the content ltering can be used and at the same time
the SMTP communication between local MTA and Internet is encrypted.
chapter 6 / Tips and Tricks

ESET NOD32 ANTIVIRUS - FOR LINUX-BSD MAIL SERVER Specifications

General

Type	Antivirus Software
Supported Operating Systems	Linux, BSD
Email Scanning	Yes
Real-time Protection	Yes
License	Commercial
Purpose	Mail Server Protection
Antivirus Engine	ESET NOD32
Updates	Automatic updates
Management	Remote Management