About manual integration with a mail server
July 4, 2024
ID 56825
If you skip automatic integration of the application with the mail server during initial configuration, you must manually integrate Kaspersky Security 8 for Linux Mail Server with the mail server.
You can manually integrate Kaspersky Security 8 for Linux Mail Server with the following mail servers:
- Exim.
- Postfix.
- Sendmail.
- QMail.
- Amavis.
Kaspersky Security 8 for Linux Mail Server supports integration with a mail server using the klms service, which accepts processing requests from the mail server.
If the program is integrated with the mail server manually, you need to:
- enter the klms server in the operating system registry.
- modify the configuration file of the mail server.
Under FreeBSD you can configure the klms service to start automatically at operating system startup.
To configure the klms service to start automatically on FreeBSD startup,
add the following strings to the /etc/rc.conf configuration file:
klmsdb_enable=YES
klms_enable=YES
For Exim and Postfix mail servers, Kaspersky Security 8 for Linux Mail Server supports before-queue integration and after-queue integration. With before-queue integration, messages are forwarded to Kaspersky Security 8 for Linux Mail Server for scanning before they are placed in the mail server queue. With after-queue integration, messages are forwarded to Kaspersky Security 8 for Linux Mail Server for scanning after they have been placed in the mail server queue.
Sockets are used for exchanging information between the mail server and the filter of Kaspersky Security 8 for Linux Mail Server.
Sockets must be assigned based on the following rules:
inet:<port>@<ip_address>
for network sockets;unix:<socket_path>
for UNIX sockets.Example:
scanner=inet:5555@127.0.0.1
for network socketsscanner=unix:/var/run/klms/scanner_sock
for UNIX sockets
The following two conditions must be met when using a socket:
- when defining a network socket, the port number must be above
1024
. - when defining a UNIX socket, the filter and kluser must have the rights to access the socket.