Shulou(Shulou.com)06/02 Report--

From a security perspective, putting a corporate mail server on the Internet is dangerous. The best option is to use a mail gateway, which will check messages for spam and viruses and forward them to an internal mail server. For example, Microsoft Exchange itself comes with an edge server, but usually it can neither scan viruses nor filter spam properly. Then you have to buy a third-party solution (Trend Scanmail, etc.) to block email traffic from Internet threats, while you can take other open source front-end antispam gateways to handle it,

Today I introduce a free solution: Proxmox Mail Gateway works with exchange, it is very convenient to build, and most of the operations are on the web side, and the UI interface design is also more user-friendly.

Install Proxmox Mail Gateway:

The product itself is a debain server (it doesn't matter to students who don't understand the system, the whole process is windowed configuration), and relevant components and functions have been integrated into it. The product was officially open sourced in May 2019. It has always been a commercial product before. It also provides paid technical support while open sourcing. There is a difference between the repositories, but it has no great impact on the average user.

Basic architecture:

1. Download the installer ISO first

https://www.proxmox.com/en/downloads/category/iso-images-pmg

2. Download relevant documents for learning:

https://www.proxmox.com/en/downloads/category/documentation-pmg

3. Before installation, please ensure that the server meets the minimum hardware requirements. If the virtual machine is installed, I use 8GMemory+6 core CPU.

The installation process is slightly...

4. After installation, access through https://ipaddress:8006 User name root, password: self-set password

Configure Proxmox Mail Gateway

After installation, you need to configure an external interface for receiving mail from the Internet. You can configure ip addresses through the Web interface

2. Students who use firewalls, please open relevant ports according to specific circumstances

Register free repositories to update PMG related components while disabling paid repositories

Edit the/etc/sources.list/pmg-enterprise.list file,

#deb https://enterprise.proxmox.com/debian/pmg Stretch pmg-enterprise deb http://download.proxmox.com/debian/pmg Stretch pmg-no-subscription

Update system: apt update apt upgrade

4. All the next operations are carried out through WEBUI. Only when you need to debug some content, you need to view the relevant logs through the console.

First: a. Go to Configuration/MailProxy→RelayDomains and enter the domain where we accept mail through the mail gateway. For example, mail domains registered in your Exchange.

b. The next label, Transport, specifies the mapping between the domain and the internal address of the mail server (e.g. Exchange), where the mail gateway will forward all normal mail.

c. Networks option, where you need to register the internal addresses of the server/client segment from which mail gateway will receive mail to forward. Note that forwarding from these networks is only allowed on the internal ports specified on the Ports tab. By default port is 26. This is mainly to allow mail from exchange to enter the Internet through the gateway, and then specify the gateway address in Exchange and set it to port 26 to operate (how to configure port 26 will be discussed below).

d. Go to the "SpamDetector" and "Virus Detector" sections and update manually.

Configuring Exchange Connectors to Work on Non-Standard Ports

Send connectors are configured in MS Exchange to work on non-standard port 26. Create a connector for normal sending, assign it a name, and then launch the PowerShell Exchange console, where you can view the connector using the Get-Send Connector command. Copies the name of the newly created connector. Then enter the command: Set-SendConnector -Identity "ConnectorName" -Port 26 to modify it, and then use the following command to see if the port has changed: Get-SendConnector" ConnectorName"| fl 26 In both commands, ConnectorName-Replace with the name of the connector! Next apply the connector and traffic will pass through the new mail gateway. Remember to configure DNS mx records and their corresponding A and PTR records for new mail gateways.

This article gives a brief explanation of the basic configuration, and the specific applications will be explained in detail later.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.