- PDF Free Download

Transcription

1 MINIMUM INSTALLATION REQUIREMENTS Processor: RAM: Hard disk: Operating system: Others: Pentium 200 MHz. 64 MB. 80 MB free space. One of the following: Red Hat (version 7.0, 7.1, 7.2, 7.3, 8.0, 9 or Enterprise Linux version 3), SuSE (version 7.3, 8.0 or 9.0), Mandrake (version 8.0, 8.1, 8.2, or 9.0), or Debian 3.0 (Woody). Sendmail version or later. Installation will be carried out as the root superuser. An account called panda must exist SendmailSecure is also compatible with Red Hat 6.2 and Best Linux 2000 but is managed separately from Panda AdminSecure, through a Web console. GENERAL INSTALLATION STEPS Notes: You do not need a double administration of SendmailSecure, that is with the Web console and simultaneously through AdminSecure. If you have used AdminSecure to install the protection and you want to administer it through the Web console, you can do this. However, the changes you make through the Web console will not be reflected in the AdminSecure console. You do not need to carry out the first two steps if you are going to administer SendmailSecure through the Web console. 1. Install Panda AdminSecure. Consult the Panda AdminSecure quick installation guide. 2. Distribute the communications agent. Go to the Tools menu in the Panda AdminSecure console and select Distribute the communications agent. Among the options available to distribute the communications agent, select the option, Generate an installation package to be distributed through other means. Note: For more information on how to distribute the communications agent, consult the Panda AdminSecure quick installation guide and the steps for installing from Panda AdminSecure which are also in this guide. 3. Once you have defined the name or IP address of the AdminSecure administration server and the repository, select the Linux platform and the place where the AdminSecure Communications Agent installation packet will be stored. Click on Browse and, if there is a network connection to the Linux computer where the antivirus will be installed, save the files in this Linux server. Otherwise, you can save the files in a folder which will later be copied to the Linux server by whatever means (disks, FTP, mail, etc.). 4. Prepare the sendmail server. Before starting to install the antivirus protection, carry out the instructions described in this guide. 5. Install the antivirus protection. If the Linux server has a communications agent, go to the Panda AdminSecure console, select the computer on which you want to install SendmailSecure and start the installation process, following the steps described in this guide. Note: The Panda AdminSecure Setup Wizard which appears on installing AdminSecure or when the AdminSecure console is started for the first time will help you carry out some of the most common tasks, i.e. installing AdminSecure, distributing the agents and installing the protection.

2 STEPS PRIOR TO INSTALLATION 1. Configure the sendmail server, so that it can use the antivirus Milter filter Compile the sendmail source files: If the version of sendmail installed is 8.12: The sendmail source files do not need to be compiled, as it supports the Milter filter. If the version of sendmail installed is prior to 8.12: a. Add the following lines to the file devtools/site/site.config.m4 APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_MILTER=1') APPENDDEF(`conf_libmilter_ENVDEF', `-D_FFR_MILTER=1') b. Run the command./build -c, in the directory in which sendmail is installed. If the version of sendmail installed is later than 8.12: a. Add the following lines to the file devtools/site/site.config.m4 APPENDDEF(`conf_sendmail_ENVDEF',`-DMILTER') b. Run the command./build -c, in the directory in which sendmail is installed Add the antivirus filter to the configuration (through Sendmail.mc or sendmail Switch platform): Through the file sendmail.mc: a. Add the following lines to the sendmail.mc file T=S:5m;R:5m;E:15m') define(`confinput_mail_filters',`filterpav') Note: If the antivirus and sendmail are NOT installed on the same computer, you must use the IP address of the computer on which the antivirus is installed instead of the value localhost. If the antivirus and sendmail are installed on the same computer, use the value localhost or the IP address: b. Compile the sendmail.mc file, by running the following command in the directory where the sendmail.mc file is stored: m4 sendmail.mc > /etc/mail/sendmail.cf Note: If the version of sendmail installed is earlier than , run the following command: m4 D_FFR_MILTER=1 sendmail.mc > /etc/mail/sendmail.cf Note: If the sendmail.mc configuration file does not exist, the changes must be made in the sendmail.cf file. Modifying this file involves adding the following lines to it:

3 #Input mail filters O InputMailFilters= filterpav XfilterPav, S=inet:10101@localhost,F=R,T=S:5m;R:5m;E:15m Through sendmail Switch: a. Select the option Edit Existing Configuration, in the Main menu. b. Select the server by clicking on the Select button. c. Select a configuration and click on Load (access to the advanced configuration). d. Select the option Expert Configuration. e. Select the menu Input_Mail_Filters() and click on Edit/View. f. Click on Add. g. Enter the following information about the filter: INPUT_MAIL_FILTER(`filterPav',`S=inet:10101@localhost, F=R,T=S:5m;R:5m;E:15m') Note: If the antivirus and sendmail are NOT installed on the same computer, you must use the IP address of the computer on which the antivirus is installed instead of the value localhost. If the antivirus and sendmail are installed on the same computer, use the value localhost or the IP address: h. Click on the Apply button to apply the filter characteristics to the configuration. i. Save the changes. INSTALLATION STEPS FROM THE ADMINSECURE CONSOLE 1. Open Panda AdminSecure Console (Start button - Programs - Panda AdminSecure - Launch Panda AdminSecure console). 2. Distribute the communications agent to the Sendmail servers you want to protect. 3. In the Agent distribution wizard select Generate an installation package to be distributed through other means. Once you have selected the administration server and repository (if there were several), check the box corresponding to the Linux platform and choose the place to store the installation packets that will then be copied to the computer in which you want to install the SendmailSecure protection. 4. In the organization tree, select the sendmail servers to protect and click on the button Install protection.

4 5. The installation wizard welcome screen will appear. Click on Next to continue. 6. Click the checkboxes by the platforms that you want to protect. Also select the antivirus version and language. Click on Next to continue. 7. If there are antiviruses not managed by Panda AdminSecure, or other vendors antiviruses, a list will be displayed with the antiviruses and their characteristics. Click on Next. 8. The file copying process starts. 9. The program shows the installation tasks that were created successfully (these will take place progressively). Tasks that could not be created are also displayed (the corresponding antivirus protection will not be installed). You can view pending installation tasks etc. through the Tasks tab in the Panda AdminSecure console. There you can also find information on the task status. 10. In order to correctly configure the antivirus protection, carry out the following options: Configuring the Milter filter and the control options: Configure the Milter filter options through the config_milter.ini file, which is stored in /usr/local/share/pav_milter, by modifying the [Milter] section. Port. Number of the port that the filter uses to establish a connection between sendmail and the antivirus program. This value must be the same as the value in INPUT_MAIL_FILTER. Host. Name or IP address of the computer, defined in INPUT_MAIL_FILTER. Note: If the antivirus and sendmail are NOT installed on the same computer, you must use the IP address of the computer on which the antivirus is installed instead of the value localhost. If the antivirus and sendmail are installed on the same computer, use the value localhost or the IP address: R/W. Number that indicates whether the antivirus will have write privileges on the content of the messages intercepted (1), or not (0). If the antivirus has these privileges, the sendmail server will retain the message until the antivirus finishes scanning it. Then, it will send it to the recipient. Nivel_log. Number that indicates the level of importance of the log messages generated by the antivirus. The lower the level of the log, the more important the messages displayed. Configure the control options by modifying the [Control] section. Conf_interval. The number of seconds that pass between one time the antivirus reads the configuration file (config.ini) and the next. Mon_interval. The number of seconds that pass between one time the antivirus writes in the monitoring file (monitor.dat) and the next. Configure the language options: Lang. The language in which the report and warning messages will be displayed. The antivirus reads this configuration file (config_milter.ini) when it starts up. Therefore, the changes will only come into effect when the antivirus is restarted.

5 INSTALLATION STEPS FROM A LINUX SERVER 1. Insert the CD in the CD drive and go to the directory: Product/Sendmail 2. Decompress the file pav_milter_x.xx.x.tar.gz ( x.xx.x is the version number) in the preferred directory: tar xvzfmp pav_milter_x.xx.x.tar.gz x.xx.x in the file name indicates the version of the program and the server type. For example, a file called pav_milter-1.30.a.tar.gz indicates that it is version 1.30 of the antivirus for a type servers. The relation between the antivirus files and the servers is the follow: x.xx.a: for Red Hat (from 7.0 to 9 including Enterprise Linux version 3); Mandrake (from 8.0 to 9.1); SuSE (from 7.3 to 9.0) and Debian 3.0 (Woody). x.xx.b: for Red Hat 6.2 and Best Linux This b version is only available from: and not on the CD-ROM). When the file is decompressed, the following directory structure will be created in the bin directory: config/ exe/ web/ scripts/ install/ uninstall/ update/ watchdog/ 3. Go to the bin directory and execute the install script. 4. When installation is complete, SendmailSecure will automatically start and the antivirus directory structure will be created in /usr/local/share/pav_milter. 5. For the antivirus to work correctly, the following operations must be carried out: 5.1 Configure the Milter filter and the control options: Configure the Milter filter options through the file config_milter.ini. Configure the control options. Configure the language options. 5.2 If you are going to use the Web console, configure the Web server: For all types of Web servers: The corresponding files are in usr/local/share/pav_milter/web. Home page of the Web console: Where YourServer is the name or address of the server on which the antivirus is installed. The CGI scripts are in usr/local/share/pav_milter/web/scripts. If an Apache sever is used, you can configure it in two ways: Automatic configuration. a. Copy the sendmail-apache.conf file (which is in the bin/config folder) to the folder in which the httpd.conf file is stored. b. Add the following line to the httpd.conf file, above the Aliases section: Include conf/sendmail-apache.conf

6 c. Restart the Apache server. d. In order to configure authentication, you must manually modify the sendmail-apache.conf file. Manual configuration: Add the following lines to the configuration file httpd.conf a. Location of the HTML pages: Alias /pav/ /usr/local/share/pav_milter/web/ <Directory /usr/local/share/pav_milter/web > Options -Indexes AllowOverride All Order allow,deny Allow from all </Directory> b. Location of the scripts: ScriptAlias /pav/scripts/ /usr/local/share/pav_milter/web/scripts/ <Directory /usr/local/share/pav_sendmail/web/scripts > AllowOverride None Options -Indexes Includes ExecCGI AddHandler cgi-script.cgi.exe Order allow,deny Allow from all </Directory> c. Restrict access to the antivirus Web console: If the administrator does not use a passwords file, create one using the following command: htpassword - c directory/users panda (users is the users and passwords file). Modify the entry that specifies the location of the HTML files: Alias /pav/ /usr/local/share/pav_milter/web/ <Directory /usr/local/share/pav_milter/web > Options -Indexes AllowOverride None Order allow,deny Allow from all AuthType Basic AuthName Restricted Directory AuthUserFile /%directorio%/users Require user panda </Directory> d. Restart the Apache server for the changes to come into effect. You can get the latest version of this guide and more product documentation (user guide, help, etc.) at Panda Software PESGRSE-USA-04