ESET North America Server NOD32 사용자 설명서
Chapter 5. NOD32LMS basic configuration
With this setting sendmail will communicate with the nod32smfi daemon via local (i.e. unix)
socket /var/run/nod32smfi.sock. Flag F=T will result in temporary fail connection if the filter
is unavailable. Flag T=S:2m defines timeout 2 minutes for sending information from MTA to
a filter. Flag T=R:2m defines timeout 2 minutes for reading reply from the filter. Flag T=E:5m
means overall timeout 5 minutes between sending end-of-message to filter and waiting for the
final acknowledgment.
Note: In case the timeouts for the nod32smfi filter are set too small, Sendmail can temporarily re-
ject the message which will attempt to pass through at a later time. This will lead to the continu-
ous rejection of one and the same message later. In order to avoid the problem, the timeouts have
to be set properly. In order to do this, one has to get into account ’confMAX_MESSAGE_SIZE’
parameter defined in a sendmail.mc file that will provide not accepting messages bigger than
the appropriate parameter value (given in bytes). Taking into account this value and the maxi-
mum time for processing of this amount of data by MTA (this can be measured) one can evaluate
the appropriate timeouts for nod32smfi filter.
Finally, uncomment and modify the following line in the /etc/mail/sendmail.cf file:
socket /var/run/nod32smfi.sock. Flag F=T will result in temporary fail connection if the filter
is unavailable. Flag T=S:2m defines timeout 2 minutes for sending information from MTA to
a filter. Flag T=R:2m defines timeout 2 minutes for reading reply from the filter. Flag T=E:5m
means overall timeout 5 minutes between sending end-of-message to filter and waiting for the
final acknowledgment.
Note: In case the timeouts for the nod32smfi filter are set too small, Sendmail can temporarily re-
ject the message which will attempt to pass through at a later time. This will lead to the continu-
ous rejection of one and the same message later. In order to avoid the problem, the timeouts have
to be set properly. In order to do this, one has to get into account ’confMAX_MESSAGE_SIZE’
parameter defined in a sendmail.mc file that will provide not accepting messages bigger than
the appropriate parameter value (given in bytes). Taking into account this value and the maxi-
mum time for processing of this amount of data by MTA (this can be measured) one can evaluate
the appropriate timeouts for nod32smfi filter.
Finally, uncomment and modify the following line in the /etc/mail/sendmail.cf file:
O InputMailFilters=nod32smfi
Since nod32smfi filter can modify the content of the e-mail message body, in case of multiple
Sendmail filters, it is good to put the definition of the nod32smfi filter at the end of the filter
chain.
Sendmail filters, it is good to put the definition of the nod32smfi filter at the end of the filter
chain.
5.5. Alternative methods of scanning e-mails.
Although mechanisms described in previous sections are concerned to be the basic mechanisms
of the e-mail messages scanning, there exists yet other possibilities that are all described in this
section.
of the e-mail messages scanning, there exists yet other possibilities that are all described in this
section.
5.5.1. Scanning e-mail messages using AMaViS
AMaViS - A Mail Virus Scanner is a tool that interfaces your MTA and several antivirus scanners.
It supports Sendmail, qmail, Postfix, Exim and comes in three branches:
It supports Sendmail, qmail, Postfix, Exim and comes in three branches:
amavis
for low/medium mail volume
amavisd
for higher mail volume, daemonized version of amavis
amavisd-new
for higher mail volume, Anti-Spam, ISP features, ...
30