Support Q&A
What are the different ways I can Get Support?
- Support via e-mail using openprotect-sendstats
- Support via SSH For a Mail Server which is directly accessible from the Internet
- Support via OpenTunnel and SSH, for Mail servers wherein firewall/NAT restricts incoming connections
How to get Remote Support?
If you have a static IP and a ssh server listening on that IP or if you can port forward from a static IP to your server, we can log into your server and look into the problem. But, if your server is behind a firewall or a NAT, then you can run the opentunnel program as below:
opentunnel -s -c <IP>
where IP is our support server's IP. You can get our support server's IP through mail from email@openprotect.com. Don't forget to provide your organization name and your current problem and how long since the problem broke out.You can also run the program openprotect-sendstats. This script will collect the configuration information from all the components, gzip the log and send it to us. If it cannot find an Internet connection to our mailserver, you can manually mail the log file /var/log/openprotect/opensupport.log to email@openprotect.com
How to install this package?
Run the script openprotect-install in the package directory and answer the questions. The script should take care of the installation by itself. If you have bought a Licensed version of this package, you should have a key file with .key extension in the CD ROM that accompanied the software. Use that key to install Kaspersky. If you have downloaded a demo version, request a key from us at email@openprotect.com. Don't forget to mention your company name and other details asked in www.openprotect.com/rfp.txt. If any perl module fails to install due to a dependency, download the necessary perl modules from search.cpan.org and install it with the following steps:
$tar zxvf module-version.tar.gz
$cd module-version
$perl Makefile.PL
$make
$make test(optional)
$make install
What are the steps done by openprotect-install script?
- Installs Kaspersky Version 5
- Installs ClamAV Version 0.65
- Installs perl modules needed by MailScanner
- Installs SpamAssassin and perl modules needed by SpamAssassin
- Installs MailScanner
- Installs the OpenTunnel package
- Configures MTA Dependent MailScanner configurations
- Configures MTA Independent MailScanner configurations
- Stops your MTA and starts the MTA along with filter modules
How to disable this package and revert to my original MTA settings?
You can run the script openprotect-disable in the package directory and answer the questions. It should disable the startup script for OpenProtect and enable your MTA's startup script. Beware though, this will cause viruses,spam and confidential e-mails to be delivered unfiltered.
How to enable this package after I have disabled it as told above?
You can run openprotect-enable in the package directory and answer the questions to re-enable the package.
How do I uninstall the package?
You can uninstall the package by running the script openprotect-uninstall as root user.
How can I test or verify that the package is working?
Send a mail with the test virus EICAR(European Institute for Computer and Antivirus Research). The EICAR test file is located at /opt/kav/bin/eicar_com.txt. You can do this using the following syntax:
nail -a /opt/kav/bin/eicar_com.txt -s "Sample subject virus" <email id>
Press Enter and Type the body of the e-mail and press Ctrl-T after you have finished typing the body. The attachment should be removed and a warning should be sent to one of the recipient, sender and the admin e-mail addresses, as you have configured in the /etc/MailScanner/MailScanner.conf file.
For spam, send a mail from one of the test messages found in the /etc/MailScanner/testmessages directory. Usually, the recommended threshold is 5. So, unless the score is equal to or greater than 5, the message will not be modified. If the score is greater than 5, the subject will be modified to have a {SPAM?} tag. To send a mail using those sample spam files, run the command:
sendmail -i your-address@example.com < /etc/MailScanner/testmessages/sample-spam.txt
For Content Protection, you can test for a pattern in any of the headers, subject, body or attachments and take an appropriate action from among the store, delete, forward or deliver options. See the file /etc/MailScanner/mcp/10_example.cf file for some examples.
How to change settings for MailScanner?
To tune the options of MailScanner, you can change the settings in /etc/MailScanner/MailScanner.conf file. The default settings are set at the maximum security. You can also see the various settings and their possible values using "man MailScanner.conf".