[Mimedefang] mimedefang and trend micro's interscan viruswall

Stephen Loeckle stephen at lucidnetworks.net
Mon Mar 24 10:54:01 EST 2003


Well, I don't have trophie or any other interface to trend installed.
Here's what I've done. I setup Interscan and Sendmail just the way Trend
suggests in the sandwich config. This is the setup where you have a
sendmail daemon on port 25, then trend on 18000 and finally sendmail on
19000. Email path:

Old:
Internet -> sendmail on port 25 (does dnsbl) -> trend on port 18000 ->
sendmail on port 19000 -> recipient

New:
Internet -> sendmail on port 25 (does dnsbl) -> trend on port 18000 ->
sendmail on port 19000 (mimedefang) -> recipient

When I found Spamassassin and Mimedefang, I recompiled sendmail to use
Milters. The daemon on port 25 doesn't have a milter in it's cf file.
However the daemon on 19000 does have one for mimedefang. Attached are my
mc files tweaked for trend so I don't have to do the funky cf
modifications. This setup works great for me. I get around 8000 emails on
an average day on this box which is a dual proc p3-1.2ghz box. Proc util
is max at 20%.

If this doesn't make sense, let me know. I have a tendency to ramble and
lose people.

Stephen

P.S. Pay no attention to the LDAP stuff at the bottom. We're migrating
back-end servers...

>Stephen:
>I somehow missed this post. This is what I have now:  I have upgraded MD >to
>2.3 as you suggested and installed trophie to run trend micro's viruswall
>and SA to filter spam, both through MD.  I first start trophie separately
>as a daemon (that is how I got it to work, I believe trophie hands scanned
>message to SA.  I am not sure if there is a better way) and then start MD,
>followed by sendmail deamon which checks DNSBL checking.  Now I realize I
>should have SA to run BL checking, instead of sendmail.  I have to look
>into this though.

>For your setup , I assume having 2 separate daemons for virus and DNSBL is
>to save system resource. How do you handle load balancing? Our site is
>quite busy, 8,000 to 12,000 messages per day, and at least 20% of them are
>sent to mailing lists with 100-500 subscribers.

>Thanks again for your help.

>Xiaoyan

>>At 08:28 PM 3/14/2003 -0600, Stephen Loeckle wrote:
>>I have Sendmail 8.12.8 running Interscan for Linux 3.7 (sandwich config)
>>with MD 2.3 and SA 2.50. I do not allow SA/MD use any virus features or
>>DNSBL. I let trend does what it's best at: Scanning for viruses by
>>itself. I've done a little static load balancing with the daemons.
>>Outside daemon does DNSBL then we have the trend daemon and then the
>>third delivery daemon. The last daemon does the SA/MD processing. It's a
>>bit of work, but once you do it, it works great and efficiently too! If
>>this sounds like your current and/or desired setup let me know.
>>
>>Stephen


-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: sendmail.mc
URL: <https://lists.mimedefang.org/pipermail/mimedefang_lists.mimedefang.org/attachments/20030324/76c05e01/attachment.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: sendmail.delivery.mc
URL: <https://lists.mimedefang.org/pipermail/mimedefang_lists.mimedefang.org/attachments/20030324/76c05e01/attachment-0001.ksh>


More information about the MIMEDefang mailing list