Koozali.org: home of the SME Server

Server-only: possible to use upstream proxy to receive SME updates?

Offline Michail Pappas

  • *
  • 351
  • +1/-0
Hello all,

there's a SME Server box in server-only operation which is intended to run as a mail server. The issue here is that access to the rest of the network is via a non-transparent HTTP proxy. Is it possible to configure SME somehow to download all needed updates via the upstream proxy? And by all updates I mean:
* system (yum) updates
* ClamAV signatures
* spamassassin rules
* ... etc etc
« Last Edit: February 20, 2012, 07:20:47 AM by reqman »

Offline mmccarn

  • *
  • 2,656
  • +10/-0
Re: Server-only: possible to use upstream proxy to receive SME updates?
« Reply #1 on: February 20, 2012, 07:06:51 PM »
I've expanded the FAQ section on upstream proxy configuration in the wiki to cover most of your concerns:
http://wiki.contribs.org/SME_Server:Documentation:FAQ#Upstream_proxy_server_configuration

yum
freshclam

Note:
I have been unable to verify whether or not sa-update is using the proxy for updates.

Without further work it doesn't look like 'pyzor' is going to work through a proxy server:
http://www.gossamer-threads.com/lists/spamassassin/users/65615


Offline Michail Pappas

  • *
  • 351
  • +1/-0
Re: Server-only: possible to use upstream proxy to receive SME updates?
« Reply #2 on: February 20, 2012, 07:19:22 PM »
OT a bit, but I must say that I am always impressed by this forum: I have been evaluating Zentyal and ClearOS, asking similar questions on the respective forums, but it's on this one that I've always been getting consistently fast and accurate responses. Thumbs up mate!

To the issue at hand: I'll test a vm tomorrow to see how it goes. Definitely like the robustness of the template mechanism here.

Offline mmccarn

  • *
  • 2,656
  • +10/-0
Re: Server-only: possible to use upstream proxy to receive SME updates?
« Reply #3 on: February 20, 2012, 07:38:51 PM »
Community timeliness and overall attitude is one of my primary reasons for sticking w/ SME (the other being my perception that SME servers are robust and secure).

It felt like the right time to document the various 'upstream proxy' options...