Views:

Procedure

  1. Modify the first Sendmail to receive SMTP traffic only from FoxProxy.
    1. Change the DAEMON_OPTIONS settings in the sendmail.mc file into the following:
      DAEMON_OPTIONS(`Port=2500, Addr=127.0.0.1, Name=MTA')dnl
    2. Run the following command for the sendmail.cf file to take effect:
      # m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf
  2. Modify the properties of Sendmail.
    1. List the properties.
      ll /usr/sbin/sendmail.sendmail
      -rwxr-sr-x 1 root smmsp 746328 Jan 22 2007 /usr/sbin/sendmail.sendmail
    2. Delete the SGID bit.
      chmod g-s /usr/sbin/sendmail.sendmail
    3. Change the group used by Sendmail.
      chgrp root /usr/sbin/sendmail.sendmail
    4. Verify the properties.
      ll /usr/sbin/sendmail.sendmail
      -rwxr-xr-x 1 root root 746328 Jan 22 2007 /usr/sbin/sendmail.sendmail
  3. Modify the Sendmail environment.
    1. Run the following command:
      # systemctl edit sendmail
    2. Add the following lines and save the change:
      [Service]
Environment="LD_PRELOAD=/opt/trend/imss/lib64
/libTmFoxSocketLib.so"
Environment="TM_FOX_PROXY_CONNECT_PORT=2500"
Environment="TM_FOX_PROXY_LIST=
/opt/trend/imss/config/foxproxy.list"
      Note
      Note
      If IMSS is not installed in the default path (/opt/trend), change the paths in the preceding lines accordingly.
      Make sure there are no extra trailing spaces in each line.
  4. Modify the foxproxy.ini configuration file in the /opt/trend/imss/config directory.
    1. Change the value of the has_foxlib_installed parameter from 0 to 1.
      has_foxlib_installed=1
  5. Restart Sendmail and FoxProxy.
    1. Restart the upstream MTA.
      systemctl restart sendmail
    2. Restart FoxProxy.
      /opt/trend/imss/script/foxproxyd stop
      /opt/trend/imss/script/foxproxyd start
  6. Verify the installation using a test server.
    1. Test the connection to the IMSS server.
      telnet <IMSS server address> 25
      ehlo imss
      Note
      Note
      The IMSS server and test server addresses must be in the same subnet.
    2. Check if the response contains the test server address.
      The installation is unsuccessful if the response contains the string 127.0.0.1.