PureMessage for Unix help Contents Getting Started......................................................................................................................................... 1 Welcome to PureMessage for Unix.............................................................................................. 1 Deployment Strategies.................................................................................................................. 6 Installing PureMessage............................................................................................................... 18 Upgrading PureMessage.............................................................................................................51 Quick Reference Guide...............................................................................................................65 Contacting Sophos...................................................................................................................... 75 Managing PureMessage........................................................................................................................ 77 Dashboard Tab............................................................................................................................77 Policy Tab....................................................................................................................................79 Quarantine Tab..........................................................................................................................130 Delayed Mails Tab.................................................................................................................... 149 Reports Tab...............................................................................................................................150 Local Services Tab....................................................................................................................154 Server Groups Tab....................................................................................................................182 Support Tab...............................................................................................................................191 Administrator’s Reference.................................................................................................................... 195 PureMessage Utilities................................................................................................................195 PureMessage Services..............................................................................................................197 Server Groups Management.....................................................................................................200 Administrative Groups............................................................................................................... 203 Policy Configuration...................................................................................................................244 Quarantine Administration......................................................................................................... 282 End User Management............................................................................................................. 294 Logs and Reports......................................................................................................................298 Troubleshooting......................................................................................................................... 304 Policy Script Tutorial............................................................................................................................ 314 Policy Script Syntax Overview.................................................................................................. 314 PureMessage Default Policy Overview..................................................................................... 323 Customizing the PureMessage Default Policy.......................................................................... 328 Regular Expression Primer.................................................................................................................. 337 About Regular Expressions.......................................................................................................337 Building Simple Patterns........................................................................................................... 338 More Regex Resources.............................................................................................................354 Copyrights and Trademarks.................................................................................................................355 OpenLDAP License................................................................................................................... 360 SEE License.............................................................................................................................. 361 Sendmail License...................................................................................................................... 362 Installing Sender History Database and Configuring Delay Queue.....................................................364 policy.siv.................................................................................................................................... 368 Glossary................................................................................................................................................372 (2019/07/31) PureMessage for Unix 1 Getting Started This first section of the documentation is directed at administrators who are new to PureMessage. In addition to complete installation and upgrade instructions, it provides an overview of the product and its functionality, and outlines various deployment scenarios. Related tasks Configuring End User Authentication (page 137) 1.1 Welcome to PureMessage for Unix PureMessage for Unix is a highly effective email filtering system that analyzes email messages at the network gateway. It protects organizations against spam and viruses and enforces corporate communication policies. PureMessage includes a powerful set of web-based configuration and reporting tools, automated updates, and scheduled jobs that minimize the administrator’s day-to-day involvement in gateway security. Administrators can manage multiple servers from a central location and, optionally, grant end users the ability to review quarantined messages themselves. PureMessage self-adjusts its range of detection techniques as necessary to prevent protection failures. The software is automatically updated with the latest anti-virus definitions and spam rules created by SophosLabs analysts. Automated tuning technology in PureMessage constantly balances a range of detection techniques to prevent detection failures. Sophos’s Genotype technology blocks families of spam campaigns and viruses, ensuring that organizations are protected against previously unseen threats, even before specific detection is available. If necessary, administrators can create custom rules to augment the default PureMessage policy. PureMessage works in conjunction with one of several supported mail transfer agents. Versions of sendmail and Postfix are bundled with the product, but PureMessage also supports Oracle Communications Messaging Exchange Server, Sendmail Switch, and other versions of sendmail and Postfix. 1.1.1 How PureMessage Combats Spam PureMessage contains thousands of spam tests that analyze individual characteristics of each message. Each of these tests has a numerical weight. When a message is analyzed by PureMessage, the weights from all the spam tests that matched the message are added up and converted to a spam score that expresses the message’s "spam probability". By default, PureMessage checks for spam in messages that originate from outside the network, but it can also be configured to test messages originating within the local domain. If a message is found to have a spam probability of 50% or more, it is copied to the PureMessage quarantine. By default, PureMessage also delivers these messages, but alters the message’s subject heading to show its spam probability. PureMessage handles incoming email as follows: 1. The mail transfer agent passes a message to PureMessage. Copyright © Sophos Limited 1 PureMessage for Unix 2. PureMessage applies the policy filter to the message to test for viruses, spam indicators, or other message characteristics. 3. Depending on the results of these tests, messages are either delivered to the original recipient, redirected or quarantined. 4. PureMessage processes the quarantined messages. If quarantine digests are configured, end users can release desired messages from the quarantine. Other messages are usually automatically archived and deleted from the quarantine. 1.1.2 PureMessage Components PureMessage is best understood as a set of components that combine to form a comprehensive system for filtering spam and viruses. While most of these components are essential to the operation and administration of PureMessage, some, such as the the End User Web Interface, Groups Web Interface and PureMessage API, are optional. PureMessage consists of the following main components: PureMessage Manager A web-based graphical user interface for managing and configuring PureMessage. The Manager is installed as part of each PureMessage