About manual integration with a mail server

If you skip automatic integration of the application with the mail server during initial configuration, you must manually integrate Kaspersky Security 8 for Linux Mail Server with the mail server.

You can manually integrate Kaspersky Security 8 for Linux Mail Server with the following mail servers:

• Exim.
• Postfix.
• Sendmail.
• QMail.
• Amavis.

Kaspersky Security 8 for Linux Mail Server supports integration with a mail server using the klms service, which accepts processing requests from the mail server.

If the program is integrated with the mail server manually, you need to:

• enter the klms server in the operating system registry.
• modify the configuration file of the mail server.

Under FreeBSD you can configure the klms service to start automatically at operating system startup.

To configure the klms service to start automatically on FreeBSD startup,

add the following strings to the /etc/rc.conf configuration file:

klmsdb_enable=YES

klms_enable=YES

For Exim and Postfix mail servers, Kaspersky Security 8 for Linux Mail Server supports before-queue integration and after-queue integration. With before-queue integration, messages are forwarded to Kaspersky Security 8 for Linux Mail Server for scanning before they are placed in the mail server queue. With after-queue integration, messages are forwarded to Kaspersky Security 8 for Linux Mail Server for scanning after they have been placed in the mail server queue.

Sockets are used for exchanging information between the mail server and the filter of Kaspersky Security 8 for Linux Mail Server.

Sockets must be assigned based on the following rules:

• inet:<port>@<ip_address> for network sockets;
• unix:<socket_path> for UNIX sockets.

  Example: scanner=inet:5555@127.0.0.1 for network sockets scanner=unix:/var/run/klms/scanner_sock for UNIX sockets

The following two conditions must be met when using a socket:

• when defining a network socket, the port number must be above 1024.
• when defining a UNIX socket, the filter and kluser must have the rights to access the socket.