Kaspersky Security 8.0 for Linux Mail Server: Maintenance Pack 1 Critical Fix 1 (version 8.0.1.721) release
1. What's new in Kaspersky Security 8.0 for Linux Mail Server: MP1 CF1
- The support of the following 32-bit operating systems has been implemented:
- Debian GNU / Linux 7.7
- FreeBSD 9.3
- FreeBSD 10.1
- The support of the following 64-bit operating systems has been implemented:
- Red Hat Enterprise Linux 7
- SUSE Linux Enterprise Server 12
- CentOS-7
- Debian GNU / Linux 7.7
- FreeBSD 10.1
- The support of the Apache 2.4 web server has been implemented.
- Integration with Kaspersky Security Center 10 SP1 has been implemented.
- The Delete Attachment operation has been added to the Content Filter component of the application.
- It is now possible to send several messages at once from Backup via the web interface.
- It is now possible to save custom allowlists and denylists of addresses in the event log.
- It is now possible to filter messages by rule ID in the web interface.
2. Main features of Kaspersky Security 8.0 for Linux Mail Server
Kaspersky Security 8.0 for Linux Mail Server protects incoming and outgoing email messages against malware and spam, and performs content filtering of messages. Kaspersky Security 8.0 for Linux Mail Server runs under Linux and FreeBSD operating systems and can be used on high-load mail servers. Kaspersky Security 8.0 for Linux Mail Server can perform the following actions:
- Scan incoming and outgoing email messages for spam, phishing, and malware, detect and block mail attachments intended for a restricted number of recipients or attachments that target software vulnerabilities.
- Neutralize threats detected in files and email messages, disinfects objects.
- Save message copies in Backup before their anti-virus processing and filtering.
- Save messages from Backup to file and delivers messages to recipients from Backup.
- Process mail in accordance with the rules defined for groups of senders and recipients.
- Perform content filtering of messages by name, type and size of attachments.
- Allow specifying user accounts and user groups from Microsoft Active Directory and OpenLDAP in mail filtering rules.
- Notify the sender, recipients, and administrator about messages containing objects that are infected, suspicious, password-protected, or cannot be scanned.
- Update Anti-Virus, Anti-Spam, and Anti-Phishing databases from Kaspersky Lab update servers or custom resources (http and ftp servers) according to the schedule or on demand.
- Receive configuration details and application runtime statistics via the SNMP protocol and allow configuring the application to send SNMP traps when certain events occur.
- Scan server file systems for malware on demand.
- Allow configuring the settings and manage the application using the standard tools of the operating system (from the command line) or via the web interface.
- Allow managing the operation of a group of mail servers with Kaspersky Security 8.0 for Linux Mail Server installed via Kaspersky Security Center 10 SP1.
3. How to install Kaspersky Security 8.0 for Linux Mail Server
Installing the application
Before installing the application on a computer running the Debian or Ubuntu operating system, make sure that the operating system has the en_US.UTF-8 locale and the locale of the localization package being installed.
To install the application from an .rpm package, execute the following commands:
# rpm -i klms-8.0.1-XXX.i386.rpm
# /opt/kaspersky/klms/bin/klms-setup.pl
To install the application from a .deb package on a 32-bit operating system, execute the following commands:
# dpkg -i klms_8.0.1-XXX_i386.deb
# /opt/kaspersky/klms/bin/klms-setup.pl
To install the application from a .deb package on a 64-bit operating system, execute the following commands:
# dpkg --force-architecture -i klms_8.0.1-XXX_i386.deb
# /opt/kaspersky/klms/bin/klms-setup.pl
To install the application on a computer running the FreeBSD 8 operating system, execute the following commands:
# pkg_add klms-8.0.1_XXX.tgz
# /usr/local/bin/klms-setup.pl
To install the application on a computer running the 32-bit FreeBSD 9 operating system, execute the following commands:
# pkg add klms-8.0.1_XXX.txz
# /usr/local/bin/klms-setup.pl
To install the application on a computer running the 64-bit FreeBSD 9 or 32-bit and 64-bit FreeBSD 10 operating system, execute the following commands:
# pkg add -f klms-8.0.1_XXX.txz
# /usr/local/bin/klms-setup.pl
Installing localization package
Important! To view the text of the EULA in the language of your choice, install the localization package, launch the post-installation setup script klms-setup.pl.
To install a localization package from an .rpm package, execute the following commands:
# rpm -i klms_en-8.0.1-XXX.i386.rpm
# /opt/kaspersky/klms/bin/klms-setup.pl
To install localization package from a .deb package on a 32-bit operating system, execute the following commands:
# dpkg -i klms-l10n-en_8.0.1-XXX_i386.deb
# /opt/kaspersky/klms/bin/klms-setup.pl
To install localization package from a .deb package on a 64-bit operating system, execute the following commands:
# dpkg --force-architecture -i klms-l10n-en_8.0.1-XXX_i386.deb
# /opt/kaspersky/klms/bin/klms-setup.pl
To install the localization package of your choice on a computer running the FreeBSD 8 operating system, execute the following commands:
# pkg_add klms_en-8.0.1_XXX.tgz
# /usr/local/bin/klms-setup.pl
To install the localization package of your choice on a computer running the 32-bit FreeBSD 9 operating system, execute the following commands:
# pkg add klms_en-8.0.1_XXX.tgz
# /usr/local/bin/klms-setup.pl
To install the localization package on a computer running the 64-bit FreeBSD 9 or 32-bit and 64-bit FreeBSD 10 operating system, execute the following commands:
# pkg add -f klms_en-8.0.1_XXX.tgz
# /usr/local/bin/klms-setup.pl
Installing the web interface
To install the application from a .deb package on a 32-bit operating system, execute the following commands:
# rpm -i klmsui-8.0.1-XXX.i386.rpm
# /opt/kaspersky/klmsui/bin/klmsui-setup.pl
To install the web interface from an .rpm package on a 64-bit operating system, execute the following commands:
# rpm -i klmsui-8.0.1-XXX.x86_64.rpm
# /opt/kaspersky/klmsui/bin/klmsui-setup.pl
To install the web interface from a .deb package on a 32-bit operating system, execute the following commands:
# dpkg -i klmsui_8.0.1-XXX_i386.deb
# /opt/kaspersky/klmsui/bin/klmsui-setup.pl
To install web interface from a .deb package on a 64-bit operating system, execute the following commands:
# dpkg -i klmsui_8.0.1-XXX_amd64.deb
# /opt/kaspersky/klmsui/bin/klmsui-setup.pl
To install the web-interface on a computer running the FreeBSD 8 operating system, execute the following commands:
# pkg_add klmsui-8.0.1_XXX.tgz
# /usr/local/bin/klmsui-setup.pl
To install the web-interface on a computer running the FreeBSD 9 operating system, execute the following commands:
# pkg add klmsui-8.0.1_XXX.txz
# /usr/local/bin/klmsui-setup.pl
To install the web-interface on a computer running the FreeBSD 10 operating system, execute the following commands:
# pkg add -f klmsui-8.0.1_XXX.txz
# /usr/local/bin/klmsui-setup.pl
Starting the web interface
To start the web interface:
- Type the following address in the address field of the web browser: https://<server IP address>:9045
- Type "Administrator" in the User name field.
- In the Password field, enter the password of the web interface user specified during initial configuration of the application.
- Click the Login button.
4. Upgrading from version 8.0.1.705 to version 8.0.1.721
Before upgrading Kaspersky Security 8.0 for Linux Mail Server on all platforms, remove the localization packages.
To upgrade Kaspersky Security 8.0 for Linux Mail Server from a .deb package:
- Remove the installed localization package using the command:
# dpkg -r <installed_localization_package_name> - Upgrade the current version of the application using the command:
# dpkg -i <installation_package_name> - Upgrade the current version of the web interface using the command:
# dpkg -i <web_interface_installation_package_name> - Install the new version of Kaspersky Security 8.0 for Linux Mail Server localization package using the command:
# dpkg -i <localization_installation_package_name> - Run the upgrade script using the command:
# /opt/kaspersky/klms/bin/klms-upgrade.pl
Follow the instructions of the script. - Run the web interface configuration script using the command:
# /opt/kaspersky/klmsui/bin/klmsui-setup.pl
To upgrade Kaspersky Security 8.0 for Linux Mail Server from an .rpm package, perform the following steps:
- Remove the installed localization package using the command:
# rpm -e <installed_localization_package_name> - Upgrade the current version of the application using the command:
# rpm -U <installation_package_name> - Upgrade the current version of Kaspersky Security 8.0 for Linux Mail Server web interface using the command:
# rpm -U <web_interface_installation_package_name> - Install the new version of the localization package using the command:
# rpm -i <localization_installation_package_name> - Run the upgrade script using the command:
# /opt/kaspersky/klms/bin/klms-upgrade.pl
Follow the instructions of the script. - Run the web interface configuration script using the command:
# /opt/kaspersky/klmsui/bin/klmsui-setup.pl
To upgrade Kaspersky Security 8.0 for Linux Mail Server for a 32-bit or 64-bit FreeBSD 8 operating system:
- Remove the current version of the application using the command:
# pkg_delete klms-8.0.1_705 - Remove the installed web interface using the command:
# pkg_delete klmsui-8.0.1_705 - Remove the installed localization package using the command:
# pkg_delete klms_en-8.0.1_705 - Install the new version of Kaspersky Security 8.0 for Linux Mail Server using the command:
# pkg_add -i <installation_package_name> - Install the new version of the web interface using the command:
# pkg_add -i <web_interface_installation_package_name> - Install the new version of the localization package using the command:
# pkg_add -i <localization_installation_package_name> - Run the upgrade script using the command:
# /usr/local/bin/klms-upgrade.pl
Follow the instructions of the script. - Run the web interface configuration script using the command:
# /usr/local/bin/klmsui-setup.pl
To upgrade Kaspersky Security 8.0 for Linux Mail Server for a 32-bit FreeBSD 9 operating system:
- Remove the current version of Kaspersky Security 8.0 for Linux Mail Server using the command:
# pkg_delete klms-8.0.1_705 - Remove the installed web interface using the command:
# pkg_delete klmsui-8.0.1_705 - Remove the installed localization package using the command:
# pkg_delete klms_en-8.0.1_705 - Install the new version of Kaspersky Security 8.0 for Linux Mail Server using the command:
# pkg add <installation_package_name> - Install the new version of the web interface using the command:
# pkg add <web_interface_installation_package_name> - Install the new version of the localization package using the command:
# pkg add <localization_installation_package_name> - Run the upgrade script using the command:
# /usr/local/bin/klms-upgrade.pl
Follow the instructions of the script. - Run the web interface configuration script using the command:
# /usr/local/bin/klmsui-setup.pl
To upgrade Kaspersky Security 8.0 for Linux Mail Server for a 64-bit FreeBSD 9 operating system::
- Remove the current version of Kaspersky Security 8.0 for Linux Mail Server using the command:
# pkg_delete klms-8.0.1_705 - Remove the installed web interface using the command:
# pkg_delete klmsui-8.0.1_705 - Remove the installed localization package using the command:
# pkg_delete klms_en-8.0.1_705 - Install the new version of Kaspersky Security 8.0 for Linux Mail Server using the command:
# pkg add -f <installation_package_name> - Install the new version of the web interface using the command:
# pkg add <web_interface_installation_package_name> - Install the new version of the localization package using the command:
# pkg add -f <localization_installation_package_name> - Run the upgrade script using the command:
# /usr/local/bin/klms-upgrade.pl
Follow the instructions of the script. - Run the web interface configuration script using the command:
# /usr/local/bin/klmsui-setup.pl
Important! After you upgrade Kaspersky Security 8.0 for Linux Mail Server, an encrypted connection with the LDAP server (TLS or LDAP over SSL) is established by default. If you need an unencrypted connection with the LDAP server, configure it manually after upgrading Kaspersky Security 8.0 for Linux Mail Server.
5. Issues of using Kaspersky Security 8.0 for Linux Mail Server
- After Kaspersky Security 8.0 for Linux Mail Server is upgraded, the settings in the klms_filter.conf file are overwritten with default settings. Save a backup copy of the klms_filter.conf before upgrading Kaspersky Security 8.0 for Linux Mail Server. After completing the upgrade, transfer the relevant settings from the backup copy to the new file.
- If the Backup directory is located on a hard drive partition with the NFS file system, message processing may be slowed down due to NFS problems. We recommend enabling a timeout for placing messages in Backup or mounting the partition in soft mode.
- If you are unable to use the Backup database included in the application distribution kit, you can use the already deployed PostgreSQL database of version 9.1 or later. For information on migrating to new Backup, refer to the Kaspersky Security 8.0 for Linux Mail Server Knowledge Base on the Technical Support website.
- If you integrate Exim dlfunc under an operating system that uses systemd technology for initialization, the temporary folder of Kaspersky Security 8.0 for Linux Mail Server is created at the following path /var/opt/kaspersky/klms/tmp instead of /tmp. If the tmpfs file system has been used for the /tmp folder, you have to reconfigure the file system of the /var/opt/kaspersky/klms/tmp folder manually.