• Kaspersky Security 8 for Linux Mail Server is compliant with General Data Protection Regulation (GDPR) and applicable European Union laws on confidential information, personal data and data protection.
• Anti-Spam engine functionality expanded: added Business Email Compromise Detection (BEC) vulnerability protection. If a vulnerability of this type is detected in a message, the BEC_DETECTED tag is added to the header of the message and the message is treated as spam.
• Anti-Phishing engine functionality expanded: added DMARC mail sender authentication check to prevent false positives with phishing detection.
• Heuristic analysis technology improved: Kaspersky Security 8 for Linux Mail Server uses machine learning with elements of artificial intelligence.

Preparing for installation of Security 8.0 for Linux Mail Server

Before you install the Kaspersky Security 8 for Linux Mail Server package, you must do the following:

1. Make sure that the server intended for installing the application meets the hardware and software requirements.
2. Download the Kaspersky Security 8 for Linux Mail Server installation package in TXZ, DEB, or RPM format to your computer.
3. Install the glibc package (64-bit operating systems require the 32-bit version of glibc).

Before installing Kaspersky Security 8 for Linux Mail Server on a server running a Debian or Ubuntu operating system, execute the command: 

Preparing for installation of the web interface of Security 8.0 for Linux Mail Server

If you want to manage the application through the browser, install the web interface package of Kaspersky Security 8.0 for Linux Mail Server.

Before you install the web interface package for Kaspersky Security 8 for Linux Mail Server, you must do the following:

1. Make sure that the server intended for installing the web Interface meets the hardware and software requirements.
2. Download the Kaspersky Security 8 for Linux Mail Server web interface installation package in DEB or RPM format to your computer.
3. Install and enable the following Apache modules:  
   • For Apache 2.2: mod_alias, mod_authz_host, mod_dir, mod_env, mod_expires, mod_headers, mod_rewrite, mod_ssl, mod_version
   • For Apache 2.4: mod_alias, mod_authz_core, mod_dir, mod_env, mod_expires, mod_headers, mod_include, mod_rewrite, mod_ssl, mod_version

To ensure protection of personal information transmitted over the network the web interface of Kaspersky Security 8 for Linux Mail Server supports only secure connections (HTTPS) and does not allow insecure connections (HTTP).

When you configure integration with the Apache web server via a domain directory for Kaspersky Security 8 for Linux Mail Server installed on CentOS 7.4 or Red Hat Enterprise Linux 7.4 from installation packages created for those operating systems, the web interface is automatically configured to use secure connection (HTTPS).

When you configure integration with the Apache web server via a domain directory if Kaspersky Security 8 for Linux Mail Server is installed on SUSE Linux Enterprise Server 12 SP3, FreeBSD 11.1, Debian 9.4, Ubuntu 14.04 and other supported operating systems from installation packages created for those operating systems, the administrator of Kaspersky Security 8 for Linux Mail Server must manually configure the web interface of the application to use secure connection (HTTPS) for integration with the Apache web server.

For the localization packages to work correctly, the system has to support the corresponding languages. For example, if you need to install the Russian localization package klms-l10n-ru_8.0.3-30_i386.deb on Debian GNU/Linux 6.0, make sure that the system supports the Russian language before installing the package.

To view the list of supported languages, run the following command:

If the Russian language is not on this list, you have to install it. To install the Russian language, run the following command:

Follow the same steps for any localization.

Before installing the application on a server running the Debian or Ubuntu operating system, make sure that the operating system has the en_US.UTF-8 locale and the locale of the localization package being installed.

Installing the application

To install the application:

• From an RPM package, execute the following commands:

# rpm -i klms-8.0.3-30.i386.rpm
# /opt/kaspersky/klms/bin/klms-setup.pl

• From a DEB package on a 64-bit operating system, run the following commands:

# dpkg --force-architecture -i klms_8.0.3-30_i386.deb
# /opt/kaspersky/klms/bin/klms-setup.pl

• On a server running 64-bit FreeBSD 11, run the commands:

# pkg add -f klms-8.0.3-30.txz
# /usr/local/bin/klms-setup.pl

Installing localization package

For the text of the EULA to be displayed in the language of your choice, install the localization package, then launch the post-installation setup script klms-setup.pl.

You do not need to install the English localization package.

To install a localization package:

• From an RPM package, execute the following commands:

# rpm -i klms_xx-8.0.3-30-1.noarch.rpm
# /opt/kaspersky/klms/bin/klms-setup.pl

Where xx stands for the two-letter language code, e.g. en.

• From an DEB package, execute the following commands:

# dpkg -i klms-l10n-xx_8.0.3-30-1_all.deb
# /opt/kaspersky/klms/bin/klms-setup.pl

Where xx stands for the two-letter language code, e.g. en.

• On a server running 64-bit FreeBSD 11, run the commands:

# pkg add -f klms_xx-8.0.3-30-1.txz
# /usr/local/bin/klms-setup.pl

Where xx stands for the two-letter language code, e.g. en.

Installing the web interface

To install the web interface:

• From an RPM package on a 64-bit operating system, run the following commands:

# rpm -i klmsui-8.0.3-30.x86_64.rpm
# /opt/kaspersky/klmsui/bin/klmsui-setup.pl

• From a DEB package on a 64-bit operating system, run the following commands:

# dpkg -i klmsui_8.0.3-30_amd64.deb
# /opt/kaspersky/klmsui/bin/klmsui-setup.pl

• On a server running FreeBSD 11, run the commands:

# pkg add -f klmsui-8.0.3-30.txz
# /usr/local/bin/klmsui-setup.pl

Starting the web interface

To run the web interface:

1. Type the following in the address bar of the web browser: https://<server IP address>:9045
2. In the User name field, enter Administrator.
3. In the Password field, type the password you have set during the initial configuration.
4. Click Login.

The web interface will start.

For upgrade, you must:

1. Accept the new End User License Agreement. The license used in the previous version of the program is saved and is automatically applied after the upgrade.
2. Read and accept the terms and conditions of the Privacy Policy.
3. Set up participation in the Kaspersky Security Network and sending KSN statistics.
4. Remove the localization packages.

You do not need to install the English localization package.

Upgrading from the DEB package:

1. Remove the installed localization package using the command:

# dpkg -r <installed_localization_package_name>

2. Upgrade the current version using the command:

# dpkg -i <installation_package_name>

3. Upgrade the current version of the web interface using the command:

# dpkg -i <web_interface_installation_package_name>

4. Install the new version of the localization package using the command:

# dpkg -i <localization_package_name>

5. Run the upgrade script by using the following command:

# /opt/kaspersky/klms/bin/klms-upgrade.pl

6. Follow the instructions of the script.
7. Run the web interface configuration script using the command:

# /opt/kaspersky/klmsui/bin/klmsui-setup.pl

Kaspersky Security 8.0 for Linux Mail Server has been upgraded.

Upgrading from the RPM package:

1. Remove the installed localization package using the command:

# rpm -e <localization_package_name>

2. Upgrade the current version using the command:

# rpm -U <installation_package_name>

3. Upgrade the current version of the web interface using the command:

# rpm -U <web_interface_installation_package_name>

4. Install the new version of the localization package using the command:

# rpm -i <localization_package_name>

5. Run the upgrade script by using the following command:

# /opt/kaspersky/klms/bin/klms-upgrade.pl

6. Follow the instructions of the script.
7. Run the web interface configuration script using the command:

# /opt/kaspersky/klmsui/bin/klmsui-setup.pl

Kaspersky Security 8.0 for Linux Mail Server has been upgraded.

Upgrading the application on the 64-bit FreeBSD 11 operating system

1. Remove the installed version using the command:

# pkg_delete klms-8.0.2_16

2. Remove the web interface using the command:

# pkg_delete klmsui-8.0.2_16

3. Remove the installed localization package using the command:

# pkg_delete klms_en-8.0.2_16

4. Install the new version of using the command:

# pkg add -f <installation_package_name>

5. Install the new version ofthe web interface using the command:

# pkg add <web_interface_installation_package_name>

6. Install the new version of the localization package using the command:

# pkg add -f <localization_package_name>

7. Run the upgrade script by using the following command:

 # /usr/local/bin/klms-upgrade.pl

8. Follow the instructions of the script.
9. Run the web interface configuration script using the command:

# /usr/local/bin/klmsui-setup.pl

Kaspersky Security 8.0 for Linux Mail Server has been upgraded.

After the upgrade, the parameters in the file will be replaced with the default values. Save a backup copy of the klms_filter.conf file before upgrading Kaspersky Security 8 for Linux Mail Server. After the upgrade, migrate the necessary settings from the backup copy to the new file.

After upgrading, use of an encrypted connection with an LDAP server (TLS or LDAP over SSL) is set by default. If you need to use a non-encrypted LDAP server connection, configure it on your own after the upgrade. If you upgrade Kaspersky Security 8 for Linux Mail Server from version 8.0 MP2 to version 8.0 MP3 in automatic mode (silent installation), do not set the VHOST_HOST parameter in the auto-response file. The value of this parameter will be defined automatically.

• If the Backup folder is on a hard-mounted partition with the NFS file system, message processing may be slowed due to problems with NFS. It is recommended to enable use of a timeout when placing messages in Backup, or soft-mount the partition.
• If you integrate Exim dlfunc in an operating system that uses systemd technology for initialization, a temporary folder for Kaspersky Security 8 for Linux Mail Server is created in /var/opt/kaspersky/klms/tmp instead of /tmp. If the tmpfs file system was used for the /tmp folder, you need to reconfigure the file system of the /var/opt/kaspersky/klms/tmp folder on your own.