Integration using the CF file
Aug 21, 2023
ID 43932
To integrate Kaspersky Security 8 for Linux Mail Server with Sendmail using the CF file:
- Create a backup copy of the sendmail.cf file.
- Add the following strings to the sendmail.cf file:
#KLMS-milter-begin-filter
O InputMailFilters=KLMS_Milter
O Milter.macros.connect=j, _, {daemon_name}, {if_name}, {if_addr}
O Milter.macros.helo={tls_version}, {cipher}, \
{cipher_bits}, {cert_subject}, {cert_issuer}
O Milter.macros.envfrom=i, {auth_type}, \
{auth_authen}, {auth_ssf}, {auth_author}, \
{mail_mailer}, {mail_host}, {mail_addr}
O Milter.macros.envrcpt={rcpt_mailer}, {rcpt_host}, {rcpt_addr}
#KLMS-milter-end-filter
#KLMS-milter-begin-socket
XKLMS_Milter, S=$filter_socket,${fail_type}T=S:3m;R:5m;E:10m
#KLMS-milter-end-socket
where
$filter_socket
is the IP address and port number or the UNIX socket that the filter uses to listen for incoming connections, written as follows:inet:<port>@<IP address>
(for network sockets) orunix:<path to UNIX socket>
(for UNIX sockets).${fail_type}
defines the action to be taken by the Sendmail server on messages if the filter works incorrectly.${fail_type}
can take the values "F=R", "F=A," or "F=T,".R
meansreject
,A
meansaccept, and T
meanstempfail.
If you replace${fail_type}
with an empty line, the message will be skipped. The recommended option istempfail
.Example:
INPUT_MAIL_FILTER(`KLMS_Milter',`S=inet:10025@127.0.0.1,F=T,T=S:3m;R:5m;E:10m')dnl
- Stop the klms service.
- Open the file /etc/opt/kaspersky/klms/klms_filters.conf (under Linux) or /usr/local/etc/kaspersky/klms/klms_filters.conf (under FreeBSD).
- In the
[global]
section, specify the path to the sendmail file in the following line:sendmail-path=<
path tosendmail file>
- Specify the IP address and port number or UNIX socket where the filter will listen for incoming connections in the following string of the
[milter]
section of the /etc/opt/kaspersky/klms/klms_filters.conf file (under Linux) or /usr/local/etc/kaspersky/klms/klms_filters.conf (under FreeBSD):socket=inet:<port>@<IP address>
or<UNIX socket>
Example:
socket=inet:10025@127.0.0.1
- Open the file /var/opt/kaspersky/klms/installer.dat (under Linux) or /var/db/kaspersky/klms/installer.dat (under FreeBSD).
- Add the following lines to the file:
SENDMAIL_MILTER=1
SENDMAIL_USES_MC=1
if you have compiled the MC file, or0
if not.START_MILTER=1
- Start the klms service.
- Restart the Sendmail server.