Need advice on server/computer for scanning emails as they come in before they are delivered.

[Winchester]

What is the best way to setup a email scanner that just scans for viruses and spam before it hits the exchange server?
Also what specs on a server/computer would be needed to handle email for a non-profit org, about 100 people, so lots of emails.

OS: Doesnt matter Linux or Windows

ex. WWW<->Router<->Scanner<->Switch<->Exchange Server

 

[n0cmonkey]

OpenBSD + spamd + spamassassin + anti-virus software (search deadly.org, I don't pay attention to what's out there)

 

[Winchester]

Would that be hard to setup? Ive messed with Red Hat, but not OpenBSD.

 

[n0cmonkey]

Originally posted by: Winchester
Would that be hard to setup? Ive messed with Red Hat, but not OpenBSD.

Maybe. You can do RH +spamassassin + AV

 

[Barnaby W. Füi]

amavis or whatever it's called is the one I have heard is good.

 

[spyordie007]

if you're running under windows there is mailsweeper and mailessentials, both of which I've used and work well.

Make sure it's running an AV too, it is worth your while.

 

[Netopia]

I'm trying to make a project out of doing the same thing. In doing so, I may even get my feet wet with OpenBSD.

I found this while googling about... it's a pretty interesting and quick read: LINKY


Joe

 

[n0cmonkey]

Originally posted by: Netopia
I'm trying to make a project out of doing the same thing. In doing so, I may even get my feet wet with OpenBSD.

I found this while googling about... it's a pretty interesting and quick read: LINKY


Joe

It's a pretty neat little system, but I'm guessing it takes a bit of horsepower to really use. I figured I would play with it when I get a new firewall machine (the box is a bit flakey at times already).

 

[Woodie]

Not sure of your budget (if you even get one!)...we use MMS from Tumbleweed.

 

[Winchester]

I am going to try to use the extra computers I have sitting around. We really dont have a budget for now. Especially not anything over 200-300 for this.

 

[spyordie007]

Originally posted by: Netopia
I'm trying to make a project out of doing the same thing. In doing so, I may even get my feet wet with OpenBSD.

I found this while googling about... it's a pretty interesting and quick read: LINKY


Joe

Nice, I like the suggestion he has for using blacklists to send spammers to tarpits...

We get thousands of SPAM messages a day, most of which get cought by our filters. I would like to know that sending us SPAM is as big of a problem for the sender as it is for the reciever, perhaps I'll look into setting up one of our older boxes as a tarpit someday when I get the time

 

[Winchester]

I just installed RH9, but now I am looking at OpenBSD, is there much difference? I use KDE anyway.

I just want the best OS that has the most software to set this thing up .

 

[n0cmonkey]

Originally posted by: Winchester
I just installed RH9, but now I am looking at OpenBSD, is there much difference?

Yes. RedHat is Linux, OpenBSD is not. RedHat is fairly GNU oriented, OpenBSD is not. RedHat is more "friendly," OpenBSD is not. They are different OSes.

I use KDE anyway.

Doesn't matter. KDE works on OpenBSD, but for a server it's worthless. Forget about it.

I just want the best OS that has the most software to set this thing up .

They each have the software to set this up. You will have more Anti-Virus options using RedHat, but you get OpenBSD's spamd with OpenBSD.

 

[Winchester]

Im already running into problems on RH.

Even though spamassassin is installed, i still can not find out where and how I can configure it to fit my needs. How do I configure it to scan the emails before they go to the server then to whoever it was sent to. LMAP? I can do some stuff in RH, but I havent done this before.

 

[Netopia]

I was ready to post the same sort of question. I'm starting to understand how much I don't know about the broader picture of email and MX records.

I think what we want is a "mail gateway"... does that sound right? I'm going to google around and see what I can find, but if anyone knows of a tutorial for neophytes, please feel free to post it.

Joe

 

[Winchester]

Ok, I went ahead and installed Fedora, Core 1.

What do I need to do to get the email traffic to go through this server, before it moves on to the MS Exchange server.

 

[Netopia]

Here is at least one idea that a person is doing. I don't think it totally fits what we are looking for without a little modification, but I'm learning so stuff just from reading it... which helps me to make more informed/intelligent descisions about what I'm looking for. Worth the time to read: IMGate

Joe

 

[Winchester]

Originally posted by: Netopia
Here is at least one idea that a person is doing. I don't think it totally fits what we are looking for without a little modification, but I'm learning so stuff just from reading it... which helps me to make more informed/intelligent descisions about what I'm looking for. Worth the time to read: IMGate

Joe

I cant get past the fvcking "adduser".

YTF cant linux people just create a GUI to install programs like Windows or at least give precise directions and adequet files to run programs.

 

[AFB]

Originally posted by: Winchester

Originally posted by: Netopia
Here is at least one idea that a person is doing. I don't think it totally fits what we are looking for without a little modification, but I'm learning so stuff just from reading it... which helps me to make more informed/intelligent descisions about what I'm looking for. Worth the time to read: IMGate

Joe

I cant get past the fvcking "adduser".

YTF cant linux people just create a GUI to install programs like Windows or at least give precise directions and adequet files to run programs.

Very good question.

 

[Need4Speed]

debian + postfix + spamassassin is a pretty straigh forward to setup. Unfortunately debian doesnt have SA2.63 in stable yet. I've made a barebones deb package here: http://www.cyberfrogs.net/downloads/spamassassin/

I didnt take much time to write decent instructions as it was never intended for any one but me, but it might help you out.

 

[Need4Speed]

oh, you could skip the first 2 steps, as all they do is build the deb package from source, and since ive made those already, you wouldnt have to.

 

[Winchester]

Thanks,

 

[MysticLlama]

Maybe I'm missing something here, but is there any reason you HAVE to do it before the Exchange Server?

Is the server already overloaded or something?

The reason that I ask is that most solutions for Exchange use the VSAPI which scans messages as they come in before they are delivered. I use Symantec Mail Security 4.0 personally, and it can scan incoming/outgoing/message store on set intervals, as well as internal mail.

How is a mail gateway going to protect the mail system if someone e-mails something to someone else internally that they got from a floppy or CD (old school I know, but still valid). The Exchange system isn't going to send the mail outside of itself because it will resolve the mailbox locally.

Just something to think about.

 

[Netopia]

I've wondered about in-server mail in general. I use a program on Win2k and it has great rules for incoming and outgoing mail, but NONE for mail that stays within the server.

Joe

 

[Nothinman]

How is a mail gateway going to protect the mail system if someone e-mails something to someone else internally that they got from a floppy or CD (old school I know, but still valid). The Exchange system isn't going to send the mail outside of itself because it will resolve the mailbox locally.

If the clients are managed by you they should have centrally managed virus scanners on them as well.