Topic: qmail advanced configuration

[mlist]

Hi

I'm using sme server in a testing area as a gateway with standard configuration. My dream is to replace my MAIN "iis smtp gateway" with sme server but I can't understand what configuration files I need to change. IIs smtp doesn't work very well because I send 200.000 email every day and it isn't able to handle this weight.
I have 2 different scenarios and I need:

1) sme server act as a smart host for my local network. To sum up I need sme server accept ALL emails from others server (Windows 2003 smtp in the same lan) and send them in internet;
Example:

ServerA(192.168.0.10)------->
                                          SmeServer(192.168.0.30)----->Internet
ServerB(192.168.0.20)------->

In Server A and Server B (both Windows 2003) I know IIs configuration (simply specify a smart host in delivery section) but I don't know how to configure sme server to accept emails from this server
IN THIS SCENARIO NO SPAM OR ANTIVIRUS CHECKS SHOULD BE PERFORMED!

2) Following this windows step by step guide http://www.petri.co.il/configure_iis_to_be_a_smart_host_for_exchange.htm I configured the Windows SMTP Service to Relay for Internal Domains.
I need to configure sme server in this way: all emails received from internet destinated to mydomain.com were delivered to my exchange 2003 server.
IN THIS SCENARIO BOTH SPAM AND ANTIVIRUS CHECKS SHOULD BE PERFORMED!

Note: I know....probably someone could suggest me that sme server is not designed for this scenario but....it is the best linux graphical solution I founded and I would like to use sme server for all my scenarios.

Can some explain what files I need to change and provide some examples?

Thanks in advance

[dsemuk]

Looking at your requirements it looks reasonably easy to acomplish with SME, however, before I give my suggestions I'm keen to hear what sort of business or organisation your are running which sends 200,000 messages per day!

Dave

[mlist]

Hi Dave

Before all thanks for your reply and don't worry.....I'M NOT A SPAMMER!
Why 200.000 email?
Because I work as system administrator at an announcement newspaper (multinational company) that send thousands of email to customers that have agreed to receive our newsletter or dem. Every user own a personal home page (profile) and the agreement is checked through a checkbox.
This is related to first scenario in which there is a microsoft smtp gateway that can't handle this traffic (but....that is very very easy to configure) and that I would replace with sme gateway

In second scenario instead, we don't send (and don't receive) thousands of emails but it is a typical scenario in witch a public smtp gateway (in dmz) receive email from internet and, after a virus check, send them to an internal mail server in a secure network.


I hope now you can help me with sme server configuration.

Marco

[compdoc]

I used to use SME to filter mail for spam and viruses for my Exchange server. This is easy to do by adding the ip address of the exchange PC in the "Address of internal mail server " box of the email delivery settings page. I dont do it now because I stopped using Exchange and only use SME.

Since the Exchange server(s) can send directly, is there really a need for outgoing email to go thru the SME? You dont seem to want it to filter for spam, etc in that scenario, so why do it at all?

I also used to use SME as the gateway/firewall for my business, but found life is simpler if I use a cheap router/firewall, and just forward the correct ports to internal servers. Ive had older versions of SME fall to hackers - even linux has vulnerabilities. Not to mention that if you have SME down for upgrades, etc, the internet connection is down too.

If you used a router, you'd just forward incoming port 25 to the SME, which would check for spam & viruses then send the mail to Exchange. And let the Exchange servers send outgoing mail directly as normal.

If you use SME as the gateway, its done the same way, except no port forwarding...

[mlist]

Compdoc

Thanks for your kind reply
you told:
...is easy to do by adding the ip address of the exchange PC in the "Address of internal mail server " box...
Yes I saw but...my situation is a little more complicated

As I explained I need to configure 2 different mail servers that operate in 2 different modes.

I'll try to briefly explain them

1) First Situation

         internet
             |
             |
sme server--firewall--Exchange srv
    (dmz)         (secure network)
(192.168.20.20)    (192.168.10.20)
             |
            lan

Actually I'm using Mcafee webshield as smtp gateway (WITH ANTIVIRUS AND ANTISPAM FILTER) that I would replace with sme server (see above scheme)
Mcafee is configured through a simple gui as follow:
relay all emails for mydomain1 to 192.168.10.20
relay all emails for mydomain2 to 192.168.10.20
......
relay others email to....

I need to configure sme server in the same way.


2) Second situation (less complicated)

I have some smtp server (IN A DIFFERENT NETWORK) that send thousands
of email every day

         internet
             |
             |
      ---------------
            lan (10.39.132.0)
    Smtp1(IIS)  Smtp2(IIS)  Smtp3(sme)

Actually Smtp1 and smtp2 (windows 2003 iis) are configured to realy all emails (generated by a vbscript) to Smtp3 (Windows 2003 iis that I would replace with sme server)

Please pay attention:
Don't ask me the reason (it should be too long to explain....just trust me)
iis of smtp3 is forced (obviously through smtp configuration virtual domain) to NOT SEND emails generated from a particular domain. ALL others emails must instead be sent directly to the internet.
Actually this configuration is ok!

In smtp1 and smtp2 I simply configured smtp3 as "relay smart host"
Smtp3 I instead configured to accept all emails from 10.39.132.0 and send them to the internet.
NO ANTIVIRUS CHESK IS NEEDED IN THIS CONFIGURATION

I need to configure sme server in the same way of smtp3:

a) (accept all emails from 10.39.132.0) and send them directly to the internet.
b) all emails generated from a particular domain wont be sent to the internet but must be deleted (/dev/null....^_^)

I hope my explanation is enough clear. However (because I'm only a dummy user), I used this step by step guide (with screenshots) http://www.petri.co.il/configure_iis_to_be_a_smart_host_for_exchange.htm that explains all required steps.
If you open this link you can immediately understand everything

Do you think is it possible to have this configuration with sme?
I hope so...otherwise what do you think about a centos 4.3 with
postfix? (very very easy to configured opposed to qmail)

Thanks in advance
Marco