PureMessage for UNIX User Guide Product Version 6.4 Sophos Limited 2018 ii | Contents | PureMessage for UNIX Contents Chapter 1: Getting Started.......................................................................................................................................1 1.1 Welcome to PureMessage for UNIX...............................................................................................1 1.1.1 How PureMessage Combats Spam...............................................................................1 1.1.2 PureMessage Components...............................................................................................2 1.1.3 Using the PureMessage Documentation....................................................................4 1.1.4 Documentation for Related Applications....................................................................6 1.2 Deployment Strategies........................................................................................................................7 1.2.1 Deploying PureMessage......................................................................................................7 1.2.1.1 Post-Installation Testing....................................................................................7 1.2.1.1.1 Testing with a Sub-Group of Users...............................................8 1.2.1.1.2 Testing with a Full Domain...............................................................8 1.2.1.1.3 Deployment.............................................................................................9 1.2.1.2 Server Deployment Options.............................................................................9 1.2.1.2.1 Single-Server Deployment.............................................................10 1.2.1.2.2 Multi-Server Deployment: Two Servers...................................10 1.2.1.2.3 Multi-Server Deployment: Three Servers................................11 1.2.1.3 Configuring Optional Components.............................................................11 1.2.1.3.1 Quarantine Digests............................................................................11 1.2.1.3.2 Centralized or Consolidated Quarantine..................................12 1.2.1.3.3 Server Groups......................................................................................12 1.2.1.3.4 Perimeter Protection........................................................................12 1.2.1.3.5 End User Web Interface..................................................................13 1.2.1.3.6 Groups Web Interface......................................................................14 1.2.1.4 Gathering User Feedback...............................................................................15 1.2.2 Configuration and Tuning................................................................................................15 1.2.2.1 Tuning Spam Detection...................................................................................16 1.2.2.2 Configuring the Policy Script.........................................................................18 1.2.3 Optimizing Performance..................................................................................................18 1.2.3.1 Configuring a Local Caching DNS Server................................................20 1.3 Installing PureMessage for UNIX..................................................................................................20 PureMessage for UNIX | Contents | iii 1.3.1 Prerequisites..........................................................................................................................21 1.3.1.1 Supported Platforms.........................................................................................21 1.3.1.2 Supported Mail Transfer Agents..................................................................23 1.3.1.3 Other Prerequisites............................................................................................24 1.3.1.4 Utilities.....................................................................................................................25 1.3.1.5 Port Usage.............................................................................................................26 1.3.1.6 Memory and CPU Requirements.................................................................28 1.3.2 Obtaining the PureMessage Distribution.................................................................29 1.3.2.1 PureMessage Download Server...................................................................29 1.3.2.2 CD-ROM Distribution.........................................................................................29 1.3.2.3 Tarball Distribution.............................................................................................30 1.3.2.3.1 Upgrading to PureMessage 5.6.1 from a Tarball Distribution.........................................................................................................31 1.3.2.3.2 Upgrading to PureMessage 6 from a Tarball Distribution.........................................................................................................32 1.3.3 PureMessage Installation................................................................................................34 1.3.3.1 Full Installation.....................................................................................................35 1.3.3.2 Custom Installation............................................................................................37 1.3.3.2.1 Custom Installation Example: Two Servers...........................40 1.3.3.3 Validating the Installation Script.................................................................43 1.3.4 Post-Installation Procedures.........................................................................................44 1.3.4.1 Setting Preferences for Unscannable Attachments..........................45 1.3.4.2 Configuring End User Web Interface Authentication.........................45 1.3.4.3 Configuring Http/Https Access to the End User Web Interface............................................................................................................................45 1.3.4.4 Configuring Log Searching............................................................................46 1.3.4.5 Rotating PureMessage Log Files.................................................................47 1.3.4.6 Connecting PureMessage to PostgreSQL...............................................49 1.3.4.7 Configuring Server Groups.............................................................................50 1.3.4.8 Testing PureMessage Operations...............................................................50 1.3.4.9 Configuring Trusted Relays............................................................................51 1.3.4.10 Configuring autostart for Linux.................................................................52 1.3.4.11 Installing Additional Components............................................................52 iv | Contents | PureMessage for UNIX 1.3.4.12 Upgrading from a Trial License to a Full License..............................53 1.3.4.13 Upgrading PureMessage Components..................................................54 1.3.4.14 Uninstalling PureMessage...........................................................................54 1.3.5 Configuring External Mail Transfer Agents..............................................................55 1.3.5.1 Configuring an External Sendmail Installation......................................55 1.3.5.1.1 Configuring Sendmail.......................................................................55 1.3.5.1.2 Configuring Sendmail Switch.......................................................58 1.3.5.1.3 Configuring Sendmail Aliases for Quarantine Digests..................................................................................................................58 1.3.5.1.4 Configuring IP Blocking (External Sendmail Version)................................................................................................................59 1.3.5.2 Configuring an External Postfix Installation...........................................61 1.3.5.2.1 Obtaining Postfix................................................................................61 1.3.5.2.2 Configuring Postfix............................................................................61 1.3.5.2.3 Configuring Postfix to Enable Digest Release by Email......................................................................................................................62 1.3.5.2.4 Configuring Postfix Aliases for Quarantine Digests...........63 1.3.5.2.5 Configuring IP Blocking (External Postfix Version)............63 1.3.6 MTA Level IP Blocking.......................................................................................................64 1.4 Upgrading PureMessage for UNIX...............................................................................................64 1.4.1 Upgrading to PureMessage Major Versions (5.6.1 to 6.0).................................65 1.4.1.1 Single-Server Upgrade (Version 5.6.1 to 6.0)........................................65 1.4.1.2 Multi-Server Upgrade (Version 5.6.1 to 6.0)...........................................66 1.4.1.3 Validating the PureMessage Upgrade Program...................................69 1.4.1.4 PureMessage 6 Installation............................................................................70