Messaging Gateway

I am trying to just use the scanning engine of  Mail Security for SMTP with the postfix as provided by RedHat (EL4 AS). The solution as provided by the this symantec product does not match our needs:

 - only one IP address available for in & outgoing mail

 - a lot of address re-writing  and fancy forwarding in the postfix server

 - if possible _no_ GUI (not even web gui) management

Is there a way of just using the virus scanning engine with some policies for a standard postfix server

( virtually as a supported / commercial replacement for amavisd-new )??

Has anyone been able to just use the AntiVirus mail scanning part of this product?

Or is there any other Symantec product that better matches my criteria ??

Regards,

           mark.

sounds like you're looking to replace the MTA and only use the scanner? don't use postfix so can't help there, but it sounds like a severe, and unsupported hack job. i'm all for those, so good luck! :)

actually, i'm curious why SMS or better yet SBG doesn't meet your needs without a customized postfix implementation. perhaps if you can provide more detail, we can help. sometimes what seem to be technical requirements are really just treatable symptoms:

- why do you require one IP address for both inbound and outbound?

- what fancy rewriting & fwding would either cause a prob with SMS/SBG or not be possible with it?

- why does it matter if there's a GUI -- why isn't securing it via firewall or other methods adequate?

Sounds like you really want Symantec Scan Engine.

Details here http://www.symantec.com/business/scan-engine

Try to get an eval version so you can see how it all works.

You can easily get Brightmail running on a single interface for both inbound and outbound MTA's they just need to be assigned different port numbers as the MTA's cant both exist on the same port at the same time.

Address rewriting, masquerading, forwarding etc. is all supported as well.

As far as the gui goes, you are sort of stuck with that I am afraid. But once configured you may rarely need to use it.

Z

I don't quite see how the Symantec Scan Engine can hook into Postfix. It doesn't seem to provide a mail scanning solution, just an AV API.

Hello,

So if you only want virus scanning and some compliance filtering why not try Brightmail? You can do what we call a "headless" install where you are only installing scanner portions of the product. It takes quite a bit of know how, but it can be done. Otherwise, a scanner and control center with the newest version of Brightmail is fairly light weight comparatively.

Thanks!

Tom

Hallo,

can you point me to some documentation of the architecture you are suggesting?

I did not find anything about this method in the Brightmail docu I had before...

Thanks,

         mark.

Hey Guys,

I think Tom is talking about the Symantec Brightmail Message Filter product here.  I don't think this is going to be an option for you unless you are willing to switch to the Sendmail MTA instead of Postfix.  In the past there was the possibility to apply a Postfix patch which would allow SBMF(SBAS at the time) to integrate with Postfix, and I'm not positive but I'm pretty sure this patch hasn't been updated for newer versions of Postfix or Brightmail Message Filter. 

Kevin

Yes that is what I was referring to. Thank you for the clarification Kevin.

That was actually my mistake. Fighting off sickness right now so my head isn't 100% clear at the moment. So I'm sorry for that.

However, if you are able to go with Sendmail you would need to contact support in order to look in to an install without a control center.

I will warn you though that this is not an easy implementation. It takes quite a bit of know how and there aren't many people using this type of install so support is limited.