Testing the Axigen, Kerio, and Merak Commercial Mail Servers MAIL CALL Deutsche Post World Net
Total Page:16
File Type:pdf, Size:1020Kb
SYSADMIN Commercial Mail Servers Testing the Axigen, Kerio, and Merak commercial mail servers MAIL CALL Deutsche Post World Net World Post Deutsche They run on Red Hat Enterprise Linux, cost money, and juggle email browser-based admin GUI. After a short learning curve, admins will have every- messages: these three commercial mail servers aim to convince admins thing under control in a single window (Figure 1). they are worth the price. BY JÖRG FRITSCH, PATRICK NEST Axigen supports legacy webmail func- tionality, including a simple folder struc- he task appears so simple: a mail suitability for groupware, and perfor- ture. A practical feature for the admin: server receives and sends email. mance on powerful hardware. users can easily handle many daily TSuitable software has been tasks, modify views and user data, or around since the birth of the Internet. Axigen Mail Server even change passwords. Our stress test The major players include Sendmail, The Axigen mail server is the only prod- demonstrated that the webmail GUI can Postfix, Q-Mail, Microsoft Exchange, and uct in the test that does not claim to be easily handle several thousand emails. Lotus Notes. But right now, many new an alternative to Microsoft Exchange or Linux-based products are starting to Lotus Notes. Instead, it competes with Limited Webmail leave the developer labs. These new the commercial version of Sendmail [9]. The program lacks a search feature for products aim to be quicker and better Axigen provides a neatly structured keywords in the subject line or body of than the industry favorites. We tested three candidates from this Buying the Axigen Mail Server new breed of mail servers. Our test en- Axigen Mailserver version 1.2.4 comes in variants called Gateway, Business, and Servi- tries include commercial mail servers by ceprovider [1]. Axigen Gateway (EUR 95 / US$ 120) entitles you to use the product as a Axigen [1], Kerio [4], and Merak [7]. All front-end relay server without local domains and mailboxes. Business and Servicepro- of these products are new developments vider differ with respect to the licensing. The price for Axigen Business depends on the that are not based on existing Open number of local mailboxes (25 mailboxes for EUR 190 / US$ 240; 1,000 mailboxes for Source servers. We used Red Hat Enter- EUR 1,450 / US$ 1,810). The price of the Serviceprovider license variant depends on the prise Linux 4 as our test platform. The number of hosted domains (50 domains for EUR 535 / US$ 669; 300 domains for EUR core test criteria were administration, 1,700 / US$ 2,124). The unlimited edition costs EUR 2,900 / US$ 3,624. look and feel, webmail functionality, http:// www. axigen.com/ mail-server 56 ISSUE 73 DECEMBER 2006 WWW.LINUX - MAGAZINE.COM Commercial Mail Servers SYSADMIN Testing the Axigen, Kerio, and Merak commercial mail servers MAIL CALL Figure 1: The clear-cut Axigen web administration interface, showing the service selection and other basic settings. based on their headers. The Sieve exam- the only candidate to detect the send- ple in Listing 1 passes messages tagged mail daemon running on Red Hat Enter- by SpamAssassin with a score of 7 or prise Linux 4 and occupying port 25. more to a junkmail folder in the user’s The server continued to provide con- inbox. You can also use Sieve to create vincing service, including good integra- header rules for messages. tion of virus and spam protection fea- tures (Figure 2). With its Outlook con- Proprietary Scripting nector, and a web GUI for groupware, Axigen use a proprietary scripting lan- Kerio deserves to be taken seriously as guage, AFSL (Axigen Filters Scripting an alternative to the Microsoft Exchange Language) to communicate with virus Server 2003. and spam filters. AFSL scripts specify Kerio provides client software for ad- the application to handle incoming mail ministration and monitoring. The client, the email, as well as a multidrop func- first, possibly to support spam and virus which will run on various operating sys- tion (catchall). The multidrop feature tagging. The sieve scripts then evaluate tems, just like the mail server itself, or- stores emails not addressed to a specific the tags. Axigen provides scripts for the ganizes management tasks in a style user in a generic folder. Improved anti- free Clam-AV virus scanner. If you intend reminiscent of Microsoft. You can’t help virus and anti-spam features would be to use a different scanner, you will need thinking that Kerio has tried to emulate nice, too. According to Axigen’s support, to write the script yourself, or get in the Exchange Server management inter- most of these features will be incorpo- touch with the support team, who face in a Linux product. And this makes rated in the next version 2.0. proved to be very responsive in our case. a lot of sense, if you take the target mar- Generally speaking, filtering is difficult Axigen also implements the Sender ket into consideration: Kerio aims to at- with Axigen. If you intend to automati- Policy Framework (see the “SPF and tract customers away from the Microsoft cally flag mail as spam or virus-infected, Caller-ID” box). You can enable the product, and give them a familiar envi- or according to your own criteria, you mechanism via the Web GUI. ronment at the same time. will have to get to know the sieve stan- Multiple user task and address book dard (RFC 3028 and 3685, [3]). The Axi- Kerio Mail Server management is also organized along Mi- gen server will handle user-defined Sieve The Kerio mail server [4] shone right crosoft lines. We had no trouble organiz- scripts [2] that filter and sort messages from the installation phase. Kerio was ing appointment and coordinating task- Listing 1: Sieve Script Buying the Kerio Mail Server 01 require [“fileinto”, The basic license for Kerio 6 for 20 users without an AV scanner costs EUR 500 / US$ 625. “comparator-i;ascii- Another 20 user licenses are available for EUR 200 / US$ 250; 100 additional users cost numeric”]; EUR 870 / US$ 1,087; a 250 user package costs EUR 1,950 / US$ 2,435. 1,000 users cost 02 if header :value “gt” : just less than EUR 8,000 / US$ 9,996; Kerio does not offer an unlimited license. comparator “i;ascii-numeric” See http://www.kerio.com/kms_home.html. “X-SPAM-SCORE” “7” { Kerio mail is available with a pre-licensed antivirus scanner. McAfee increases the price 03 fileinto “inbox.junk”; by about one half. The basic version includes one year’s software maintenance. Kerio 04 } also provides other maintenance options. WWW.LINUX - MAGAZINE.COM ISSUE 73 DECEMBER 2006 57 SYSADMIN Commercial Mail Servers type or file extension. This helps admin- istrators adhere to enterprise policies that ban executables and MP3 files, for example. The Kerio mail server has a wide range of anti-spam faetures, from the proprie- tary Spam Eliminator to Blacklists such as ORDB and Spamcop, to Caller-ID [6] and Sender Policy Framework (see the “SPF and Caller-ID” box) or the delayed SMTP Greeting dialog. Merak Mail Server The Merak mail server [7] surprises ad- ministrators with its feature-richness at first, but on closer inspection, many use- ful features are concealed by the unintui- tive user interface. For example, Merak has functions for testing an antivirus scanner with the Eicar test virus, and it combines Spamassassin with Bayesian filters. Figure 2: Kerio integrates virus and spam protection nicely with the mail server and adminis- After completing the installation, the tration software. The GUI gives useful explanations of individual settings. command line wizard helps you set up the admin user, and a default domain. within group projects via the webmail mailbox credentials centrally via Active The program then gives you a choice of interafce with Outlook, Entourage, and Directory. three tools: one for the command line, other clients [5]. the second a browser-based GUI, and a Kerio provides its own Active Direc- Virus and Spam Protection third a remote administration console. tory Extensions (for Microsoft AD), and The Kerio mail server includes a licensed The three tools differ greatly with re- Open Directory Extensions (for the version of the McAfee Antivirus Engine. spect to feature scope and application: Apple equivalent) to help integrate the In our lab, the program automatically only the console (Figure 3) gives admin- product into existing directory service detected other virus scanners (such as istrators central access to the full set of infrastructures. In a Microsoft environ- Sophos AV) and listed them as options in features. We also had a problem with the ment, the administrator can install the a selection menu. You can even scan fact that the Merak mail server will act extensions on an AD catalog server, and with two antivirus products. This is a as a relay for all private IP addresses then add the Kerio Mailserver Account in good idea to help you catch new viruses, (RFC 1918) by default. Users and Computers on the Active Di- as the time span between a new virus Although the server achieved just one rectory Management Console. This gives becoming known and the manufacturer sixth of the throughput claimed by the administrators the ability to manage publishing a pattern update can vary. Merak website in our lab (according to In contrast to security-only products Merak it should be able to handle 20,000 Buying the Merak for email ([11]), Kerio does not give ad- emails per second on a dual Pentium Mail Server ministrators the ability to notify internal system), it still had the highest through- Merak 8.5 comes in variants with six to recipients of incoming viruses.