- DL manuals
- 3Com
- Firewall
- 3CR3MFA-92
- User Manual
3Com 3CR3MFA-92 User Manual
Summary of 3CR3MFA-92
Page 1
Http://www.3com.Com/ part no. Dua-mfa100-aaa01 published january 2005 email firewall user guide user guide for the 3com ® email firewall.
Page 2
3com corporation 350 campus drive marlborough, ma 01752-3064 copyright © 2000-2005, borderware technologies inc. Used under license by 3com corporation. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as trans...
Page 3
C ontents a bout t his g uide conventions 10 related documentation 11 documentation comments 11 1 3c om e mail f irewall o verview deployment and installation 13 installation 14 features 14 anti-spam 14 anti-virus scanning 14 malformed email checks 14 attachment control 15 email security 15 reportin...
Page 4
Virtual mappings 28 uploading virtual mapping list 29 3 c onfiguring m ail s ecurity anti-virus 31 notifications 33 pattern files 33 attachment control 34 notifications 35 editing attachment types 36 mail access/filtering 37 specific access patterns 38 pattern based message filtering 39 message rest...
Page 5
59 objectionable content filtering 61 actions 61 notifications 62 upload and download filter list 62 trusted senders list 62 adding trusted senders 63 spam quarantine 64 spam quarantine configuration 64 user notification 65 set redirect action for anti-spam features 65 enabling user access on a netw...
Page 6
Time zone 84 network configuration 85 mail configuration 85 admin account 86 system users 86 creating an admin user 87 upload and download user lists 88 enabling user access on a network interface 88 network settings 89 network interfaces 90 advanced parameters 90 web proxy 91 static routes 92 licen...
Page 7
8 m onitoring a ctivity a nd s tatus monitoring mail processing activity 115 mail server status 116 mail queue (mail q) 116 mail queue statistics 116 mail received recently 116 troubleshooting mail queue problems 116 email firewall status 117 system alarms 118 licensing 118 borderware mail security ...
Page 9
A bout t his g uide the instructions in this guide are designed to help you with configuration and system administration tasks for the 3com ® email firewall. This guide is intended for the system or network administrator who is responsible for configuring, using, and managing the 3com email firewall...
Page 10
10 a bout t his g uide conventions table 1 and table 2 list conventions that are used throughout this guide. Table 1 notice icons icon notice type description information note information that describes important features or instructions caution information that alerts you to potential loss of data ...
Page 11
Related documentation 11 related documentation in addition to this guide, each 3com email firewall documentation set includes the following: ■ 3com email firewall installation guide this guide contains detailed information on installing the 3com email firewall. ■ release notes these notes provide in...
Page 12
12 a bout t his g uide.
Page 13
1 3c om e mail f irewall o verview this chapter provides an overview of the 3com email firewall and its features, and includes the following topics: ■ deployment and installation ■ features ■ system administration deployment and installation the 3com email firewall is designed to be situated between...
Page 14
14 c hapter 1: 3c om e mail f irewall o verview installation for detailed information on installation, see the installation guide that came with your 3com email firewall. Features the following sections provide an overview of the main features of the 3com email firewall. Anti-spam the 3com email fir...
Page 15
Features 15 attachment control attachment filtering can be used to control a wide range of problems originating from the use of attachments, such as viruses, objectionable content, and confidential documents leaving your network. Both inbound and outbound email can be scanned. Messages containing fo...
Page 16
16 c hapter 1: 3c om e mail f irewall o verview system administration the 3com email firewall is administered via a web browser. The following web browsers are supported: ■ microsoft internet explorer 5.5 or greater ■ netscape 7.0 or greater ■ mozilla firefox 1.0 or greater ■ safari 1.2.3 or greater...
Page 17
System administration 17 main menu the main menu provides quick access to the 3com email firewall’s configuration and management options. The menu is divided into the following sections: ■ activity — the activity screen provides you with a variety of information on mail processing activity, such as ...
Page 18
18 c hapter 1: 3c om e mail f irewall o verview ■ reporting — this menu allows you to view and configure the reporting and system log features of the 3com email firewall. ■ system configuration — this menu allows you to view and modify system configuration settings such as: ■ the setup wizard ■ admi...
Page 19
2 c onfiguring m ail d elivery this chapter describes how to configure your 3com email firewall to accept and deliver mail, and includes the following topics: ■ mail routing ■ delivery settings ■ mail mappings ■ virtual mappings mail routing mail routes are used to define the domains you will be acc...
Page 20
20 c hapter 2: c onfiguring m ail d elivery ■ route-to — enter the address for the mail server to which mail will be delivered. This is your local mail server, such as a microsoft exchange mail system. ■ mx — (optional) select the mx check box if you need to look up the mail routes in dns before del...
Page 21
Mail routing 21 additional mail route rules when adding an additional mail route for a local email server, you must add a specific access pattern and a pattern based message filter to trust mail from that server for anti-spam training purposes. These procedures are not required for the default mail ...
Page 22
22 c hapter 2: c onfiguring m ail d elivery 4 select client access 5 select trust for the action if the pattern matches, and click ok. Adding a pattern based message filter 1 select mail delivery -> mail access/filtering from the menu. Select pattern based message filtering. 2 click add to add a new...
Page 23
Delivery settings 23 delivery settings you can customize various delivery settings that affect how you accept and deliver mail messages. Select mail delivery -> delivery settings from the menu. Delivery settings ■ maximum time in mail queue — enter the number of days for a message to stay in the que...
Page 24
24 c hapter 2: c onfiguring m ail d elivery checked against the mail routing table, and if the destination is not specified the email will be sent to the default mail relay server for delivery. This option is typically used when the 3com email firewall cannot deliver email directly to remote mail se...
Page 25
Delivery settings 25 advanced delivery settings click the advanced button to reveal options for advanced smtp (simple mail transport protocol) settings and smtp notifications. Advanced smtp settings ■ smtp pipelining — pipelining allows more than one smtp command to be inserted into a network packet...
Page 26
26 c hapter 2: c onfiguring m ail d elivery double bounce message with a copy of the entire single bounce message. ■ delay — inform the postmaster of delayed mail. In this case, the postmaster receives message headers only. ■ policy — inform the postmaster of client requests that were rejected becau...
Page 27
Mail mappings 27 click add to add a new mapping to your list. ■ external mail address — enter the external mail address that you want to be converted to the specified internal email address for incoming mail. The specified internal address will be converted to this external address for outgoing mail...
Page 28
28 c hapter 2: c onfiguring m ail d elivery virtual mappings virtual mappings are used to redirect mail addressed for one domain to a different domain. This process is performed without modifying the to: and from: headers in the mail, as virtual mappings modify the envelope-recipient address. For ex...
Page 29
Virtual mappings 29 uploading virtual mapping list a list of virtual mappings can also be uploaded in one text file. The file must contain comma or tab separated entries in the form: [map_in],[map_out] for example: user@example.Com,user user@example.Com,user@example2.Com @example.Com,@example2.Com t...
Page 30
30 c hapter 2: c onfiguring m ail d elivery.
Page 31
3 c onfiguring m ail s ecurity this chapter describes how to configure mail security settings on your 3com email firewall, and includes the following topics: ■ anti-virus ■ attachment control ■ mail access/filtering ■ smtp security ■ malformed email anti-virus the 3com email firewall provides a buil...
Page 32
32 c hapter 3: c onfiguring m ail s ecurity select mail delivery -> anti-virus from the menu to enable and configure virus scanning. ■ enable virus scanning — select the check box to enable virus scanning. ■ quarantine unopenable attachments —this option is enabled by default to quarantine attachmen...
Page 33
Anti-virus 33 notifications notifications for inbound and outbound messages can be enabled for all recipients, the sender, and the administrator. Customize the content for the inbound and outbound notification in the corresponding text boxes. See appendix a “customizing system messages” on page 125 ...
Page 34
34 c hapter 3: c onfiguring m ail s ecurity attachment control attachment filtering can be used to control a wide range of problems originating from the use of attachments, including the following: ■ viruses — attachments that can potentially contain viruses can be blocked. ■ offensive content — the...
Page 35
Attachment control 35 notifications notifications for inbound and outbound messages can be enabled for all recipients, the sender, and the administrator. Customize the content for the inbound and outbound notification in the corresponding text boxes. See appendix a “customizing system messages” on p...
Page 36
36 c hapter 3: c onfiguring m ail s ecurity editing attachment types click the edit button to edit your attachment types. You can add file extensions ( .Mp3 ), or mime content types ( image/gif ). For each attachment type, choose whether you want to "block" or "pass" the attachment. Select the ds (d...
Page 37
Mail access/filtering 37 mail access/filtering the 3com email firewall provides a number of filtering options to ensure that specific mail messages are not accepted from the incoming smtp connection. In the mail access/mail filtering settings, you can specify patterns to match for on incoming connec...
Page 38
38 c hapter 3: c onfiguring m ail s ecurity specific access patterns click the add pattern button to add a new specific access pattern. ■ pattern — enter a mail address, hostname, domain name, or ip address. ■ client access — this parameter is used for domain, hostname, or ip address patterns. This ...
Page 39
Mail access/filtering 39 pattern based message filtering pattern based message filtering is the primary tool for whitelisting and blacklisting messages. An administrator can specify that mail is rejected or whitelisted according to the contents of the message envelope, message header (such as the se...
Page 40
40 c hapter 3: c onfiguring m ail s ecurity smtp authenticated relay this feature allows authenticated clients to use the 3com email firewall as an external mail relay for sending mail. For example, you may have remote users that need to send mail via this system. Client systems must use a login and...
Page 41
Smtp security 41 smtp security the 3com email firewall offers a simple mechanism for encrypting mail delivery via ssl (secure sockets layer) and tls (transport layer security) support. A flexible policy can be implemented to allow other servers and clients to establish encrypted sessions with the 3c...
Page 42
42 c hapter 3: c onfiguring m ail s ecurity select mail delivery -> smtp security from the menu to enable and configure email encryption. Incoming mail ■ accept tls — enable this option to accept ssl/tls for incoming mail connections. ■ require tls for smtp auth — this value is used to require ssl/t...
Page 43
Smtp security 43 specific site policy this option supports the specification of exceptions to the default settings for ssl/tls. For example, you may need to exempt a mail server from using ssl/tls because of lack of tls support. To exempt a system, specify the ip address or fqdn (fully qualified dom...
Page 44
44 c hapter 3: c onfiguring m ail s ecurity malformed email many viruses try to elude virus scanners by concealing themselves in malformed messages. The scanning engines cannot detect the attachment and pass the complete message through to an internal server. Some mail clients try to rebuild malform...
Page 45
Malformed email 45 ■ actions — select an action to be performed. Options include: ■ just log: log the event and take no further action. ■ reject mail: the message is rejected with notification to the sending system. ■ quarantine mail: the message is placed into quarantine. ■ discard mail: the messag...
Page 46
46 c hapter 3: c onfiguring m ail s ecurity.
Page 47
4 a nti -s pam c onfiguration this chapter describes how to configure the anti-spam features of your 3com email firewall, and includes the following topics: ■ anti-spam features ■ dcc ■ sta ■ pattern based message filtering ■ objectionable content filtering ■ trusted senders list ■ spam quarantine ■...
Page 48
48 c hapter 4: a nti -s pam c onfiguration select mail delivery -> anti-spam from the menu to configure the 3com email firewall’s anti-spam features. The default anti-spam action defines the type of action to be used for the preselected anti-spam features. Possible actions include: ■ disable anti-sp...
Page 49
Dcc 49 dcc dcc (distributed checksum clearinghouse) is a tool used to identify bulk mail and is based on a number of servers that maintain databases of message checksums. These checksums are derived from numeric values that uniquely identify a message. Dcc provides a simple but very effective way to...
Page 50
50 c hapter 4: a nti -s pam c onfiguration ■ redirect to: the message will be delivered to the mail address specified in action data. ■ reject mail: the mail will not be accepted and the connecting mail server is forced to return it. ■ bcc (blind carbon copy): the message will be copied to the mail ...
Page 51
Sta 51 ■ mail identified as "bulk" by dcc is also analyzed to provide an example of local spam. Select sta from the mail delivery -> anti-spam menu to configure sta settings. ■ sta mode — use one of the following three modes for sta: ■ normal: this is the default mode and is recommended in most case...
Page 52
52 c hapter 4: a nti -s pam c onfiguration spam action specify an action when sta flags a message as spam. ■ action — the action can be one of the following: ■ just log: an entry is made in the log and no other action is taken. ■ modify subject header: the text specified in action data will be inser...
Page 53
Sta 53 ■ redirect to: the message will be delivered to the mail address specified in action data. ■ reject mail: the mail will not be accepted and the connecting mail server is forced to return it. ■ bcc: the message will be copied to the mail address specified in action data. ■ action data — depend...
Page 54
54 c hapter 4: a nti -s pam c onfiguration sta training the sta training section displays statistics of all mail analyzed by the 3com email firewall. Click the rebuild sta button to rebuild the sta database. The sta run-time engine is built and rebuilt at 12 hour intervals using several sources such...
Page 55
Pattern based message filtering 55 some default pbmf rules are provided and more can be added by clicking the add button. Message part select a message part from the dropdown list. The following diagram and sections explain each part of the mail message..
Page 56
56 c hapter 4: a nti -s pam c onfiguration message envelope parameters these parameters will not be visible to the user. They are the “handshake” part of the smtp protocol. You will need to look for these in the transport logs or have other knowledge of them. ■ > — this parameter allows for a match ...
Page 57
Pattern based message filtering 57 message header parameters spammers will typically enter false information into these fields and, except for the subject field, they are usually not useful in controlling spam. These fields may be useful in whitelisting certain users or legitimate source of email. ■...
Page 58
58 c hapter 4: a nti -s pam c onfiguration match option the match option looks for the specified text in each line. You can specify one of the following: ■ contains — looks for the text to be contained in a line or field. This allows for spaces or other characters that may make an exact match fail. ...
Page 59
Pattern based message filtering 59 ■ do not train — do not use the message for sta training purposes. This option will not override other pbmf’s if it applies to the same message. ■ bcc — send a blind carbon copy mail to the mail address specified in action data. This option only appears if you have...
Page 60
60 c hapter 4: a nti -s pam c onfiguration ■ modify subject header: the text specified in action data will be inserted into the message subject line. ■ add header: an "x-" mail header will be added as specified in the action data. ■ redirect to: the message will be delivered to the mail address spec...
Page 61
Objectionable content filtering 61 objectionable content filtering the objectionable content filter defines a list of key words that will cause a message to be blocked if any of those words appear in the message. Select objectionable content filtering from the mail delivery -> anti-spam menu to conf...
Page 62
62 c hapter 4: a nti -s pam c onfiguration notifications notifications for inbound and outbound messages can be enabled for all recipients, the sender, and the administrator. The content for the inbound and outbound notification can be customized. See appendix a “customizing system messages” on page...
Page 63
Trusted senders list 63 ■ maximum number of entries per user — enter a maximum number of list entries for each user. Adding trusted senders when the trusted senders list option is enabled globally, local 3com email firewall users can log in and add their own addresses using the same interface as the...
Page 64
64 c hapter 4: a nti -s pam c onfiguration spam quarantine the spam quarantine contains quarantined mail messages for each local user on the 3com email firewall. For each anti-spam feature (dcc, sta, and so on) that you want to use the user spam quarantine, you must set the action to redirect to , a...
Page 65
Spam quarantine 65 user notification ■ enable summary email — select the check box to enable a summary email notification that alerts users to mail that has been placed in their quarantine folder. ■ notification domain — enter the domain for which notifications are sent to. This is typically the fqd...
Page 66
66 c hapter 4: a nti -s pam c onfiguration enabling user access on a network interface you must enable user access on the network interface to allow users to login to the spam quarantine via that interface. Select system config -> network settings and go to the network interface section. Select the ...
Page 67
Quarantine and trusted senders list users 67 quarantine and trusted senders list users you must add local users to the 3com email firewall if you require the ability for users to view the spam quarantine or configure their trusted senders lists. Select system config -> users from the menu. Click the...
Page 68
68 c hapter 4: a nti -s pam c onfiguration upload and download user lists you can upload lists of users using comma or tab separated text files. You can specify the login id, password, email address, and disk quota in megabytes. Use the following format: [login],[password],[email address],[quota] fo...
Page 69
Advanced anti-spam options 69 advanced anti-spam options click the advanced button to reveal the following advanced anti-spam options. Rbl (realtime blackhole list) rbls contain the addresses of known sources of spam and are maintained by both commercial and non-commercial organizations. The rbl mec...
Page 70
70 c hapter 4: a nti -s pam c onfiguration ■ add header: an "x-" mail header will be added as specified in the action data. ■ redirect to: the message will be delivered to the mail address specified in action data. ■ reject mail: the mail will not be accepted and the connecting mail server is forced...
Page 71
5 r eporting this chapter describes the reporting features of the 3com email firewall, and includes the following topics: ■ generating reports ■ system logs ■ email history ■ system history ■ configure history settings generating reports the 3com email firewall's reporting features provide a compreh...
Page 72
72 c hapter 5: r eporting administrators can specify which data is to be included in each report, how it is to be displayed, the order of data, and the number of entries to report, such as “top 10 disk space users”. Select reporting from the menu to view and configure reports. To view a previously g...
Page 73
Generating reports 73 ■ paper size — for pdf format, select the paper size such as letter, a4, or legal. ■ describe fields in report — select this option to include a short description of each field in the report. Report generation ■ enable auto generate — select this check box to automatically gene...
Page 74
74 c hapter 5: r eporting report fields the fields section allows you to choose which fields or items of information you wish to include in the report. You can include or exclude fields as required. Use the limit column to limit the number of items for that field, such as listing the “top ten” virus...
Page 75
Generating reports 75 blocking pie chart a pie chart of the same data as the right hand column of traffic blocking (timespan). Total traffic received graphs of the number of messages received per hour over the reporting period (timespan). Total traffic sent graphs of the number of messages sent per ...
Page 76
76 c hapter 5: r eporting top senders the top sender (judged by envelope from, not header from) during the report timespan, sorted by number of messages. If the title contains one or more comma characters, the list will be restricted to those senders which include any string after the first comma. T...
Page 77
System logs 77 system logs the system logs provide detailed information on all mail transport and system related events. Select reporting -> system logs from the menu to view the log files. The mail transport log is the most important log to monitor because it contains a record of all mail processed...
Page 78
78 c hapter 5: r eporting viewing log details select a specific log to view, search, and download its detailed entry information. Configuring a syslog server logs can also be forwarded to a syslog server which is a host that collects and stores log files from many sources. You can define a syslog ho...
Page 79
Email history 79 email history every message that passes through the 3com email firewall generates a database entry that records information about how it was processed, including a detailed journal identifying the results of the mail processing. Select reporting -> email history from the menu to vie...
Page 80
80 c hapter 5: r eporting system history the system history is a record of system events, such as login failures, and disk space and cpu usage. Select reporting -> system history from the menu to view the system event history. Event types the following table describes the event types that can appear...
Page 81
System history 81 dcc preferred the round trip time to preferred dcc server name of preferred server disk io mb per second transfer, kb per transfer, transfers per second for a disk disk usage amount of used and total available disk space for each disk slice logins a single web based login userid an...
Page 82
82 c hapter 5: r eporting configure history settings in the configure reporting history size screen, you can configure how many emails and system events to keep in the logs and how long you want to keep them. Setting higher values will use up more disk space and cause backups to take much longer to ...
Page 83
6 s ystem c onfiguration this chapter describes how to view and modify the system configuration of the 3com email firewall, and includes the following topics: ■ setup wizard ■ admin account ■ system users ■ network settings ■ web proxy ■ static routes ■ licensing ■ ssl certificates ■ software update...
Page 84
84 c hapter 6: s ystem c onfiguration select system config -> setup wizard from the menu to start the setup wizard. Click finish at any time to exit the setup wizard. Click back to go to the previous step. Change password enter your old password and set a new password if required. Click apply if you...
Page 85
Setup wizard 85 network configuration modify your network settings if required, and click apply if you have made any changes. If you do not want to modify your networking information, click next to continue. Mail configuration modify your mail configuration and proxy settings if required, and click ...
Page 86
86 c hapter 6: s ystem c onfiguration admin account select system config -> admin account from the menu to modify the administrator account settings. You can modify the address to which mail to the administrator is forwarded to, and change the admin account password. Caution: if you forget your admi...
Page 87
System users 87 click the add a new user button to add a new user to the system. Enter a user id and a password. Creating an admin user if this user will be an additional administrator for this 3com email firewall, select the full admin option in the administrator privileges section. When a full adm...
Page 88
88 c hapter 6: s ystem c onfiguration upload and download user lists you can upload lists of users using comma or tab separated text files. You can specify the login id, password, email address, and disk quota in megabytes. Use the following format: [login],[password],[email address],[quota] for exa...
Page 89
Network settings 89 network settings the network settings screen allows you to modify your network settings such as the hostname, domain name, ip address, name server, and network interface settings. Select system config -> network settings from the menu to manage your networking information. ■ host...
Page 90
90 c hapter 6: s ystem c onfiguration network interfaces in the network interfaces section, you can modify your network interface information such as the ip address, netmask, and enable local user access. ■ ip address — enter the ip address for this 3com email firewall. ■ netmask — enter the appropr...
Page 91
Web proxy 91 web proxy a secure proxy server may be used to cache and proxy requests to systems external to your network, such as an http web proxy server. If you use a proxy server on your network, you must enter the proxy server address and a username and password to allow anti-virus, anti-spam, a...
Page 92
92 c hapter 6: s ystem c onfiguration static routes static routes are required if the mail servers to which mail must be relayed are located on another network, such as behind an internal firewall or accessed via a vpn. Select system config -> static routes from the menu to define any static routes....
Page 93
Licensing 93 licensing your 3com email firewall must be licensed before it can process mail. The licensing screen allows you to view your current license information and enter a new license key if you are renewing or upgrading your current license. Select system config -> licensing from the menu to ...
Page 94
94 c hapter 6: s ystem c onfiguration license agreements click the specified button to view the license agreements for the 3com email firewall, the anti-virus software, and third party open source products. License renewal or upgrade to renew or upgrade your license, you will need an annual subscrip...
Page 95
Ssl certificates 95 to install a commercial certificate: 1 select system config -> ssl certificates from the menu to view and manage your certificates. 2 create a new self-signed certificate by clicking the generate a 'self-signed' certificate button. 3 click apply. You must then reboot to install t...
Page 96
96 c hapter 6: s ystem c onfiguration software updates it is important to keep your 3com email firewall software updated with the latest patches and upgrades. A key aspect of good security is responding quickly to new attacks and exposures by updating the system software when updates are available. ...
Page 97
Software updates 97 when the system restarts, the update will appear in the installed updates section. Before applying any update, backup your system configuration and data. Select system mgmt -> backup & restore from the menu to perform a backup. Security connection the security connection is a ser...
Page 98
98 c hapter 6: s ystem c onfiguration.
Page 99
7 s ystem m anagement this chapter describes how to use the system management features of the 3com email firewall, and includes the following topics: ■ status and utility ■ mail queues ■ quarantine ■ daily tasks ■ backup and restore ■ reboot and shutdown ■ reset to factory settings status and utilit...
Page 100
100 c hapter 7: s ystem m anagement utility functions the utility functions section allows you to control mail services and run network and diagnostic utilities. ■ mail system control — use this button to stop and start all mail queues. ■ mail receiving — use this button to disable and enable mail r...
Page 101
Status and utility 101 smtp probe the smtp (simple mail transport protocol) probe is used to test email connectivity with a remote smtp server. This allows you to verify that a specific smtp server is responding to connection requests and returning a valid response. In the smtp probe screen you must...
Page 102
102 c hapter 7: s ystem m anagement the response field will show the result of the smtp diagnostic probe, including the response for each smtp command sent: sending mail... Helo example.Com mail from:sender@example.Com rcpt to:joe@example.Com data . Sending /tmp/smtpdata quit ping utility the ping u...
Page 103
Status and utility 103 traceroute utility traceroute is used to see the routing steps between two hosts. If you are losing connectivity somewhere in between the two hosts, you can use traceroute to see where exactly the packet is losing its connection. The traceroute utility will show each network “...
Page 104
104 c hapter 7: s ystem m anagement current admin and spam quarantine users the current admin and spam quarantine users section displays who is logged in via the admin interface or through a spam quarantine session. Configuration information the configuration information screen shows you important s...
Page 105
Quarantine 105 quarantine the quarantine area contains messages that have been quarantined because of a virus, malformed message, illegal attachment, or other issue. Select system mgmt -> quarantine to view and manage the quarantine area. You can view the details of a message by clicking on its id n...
Page 106
106 c hapter 7: s ystem m anagement ■ expire automatically — enable this feature to expire messages automatically. ■ days — enter how many days to keep a quarantined message before deleting it. ■ maximum quarantine disk usage (percentage) — enter a percentage of disk usage that can be used by the qu...
Page 107
Backup and restore 107 backup and restore the 3com email firewall can backup all data, including the database, quarantined items, mail queues, mailboxes, uploaded user lists, ssl certificates, reports, and system configuration data. The restore feature can restore any of these items individually. Th...
Page 108
108 c hapter 7: s ystem m anagement confirm the listed options, and then click create backup now to begin. The file ( backup.Gz) will be then be downloaded to your local system. Ftp options if you choose the ftp option you must specify the address of the destination ftp server, including a valid log...
Page 109
Backup and restore 109 ■ use pasv mode — pasv (passive) mode may be required for some types of ftp servers. Choose this option if you are having problems with connecting to your ftp server. Click next >> to continue. Confirm the listed options, and then click create backup now to begin. Alternately,...
Page 110
110 c hapter 7: s ystem m anagement confirm the listed options, and then click create backup now to begin. Alternately, you can click create scheduled backup to go to the daily tasks menu to create a recurring email backup..
Page 111
Backup and restore 111 restores to perform a system restore, select the type of restore to perform (local disk or ftp) and click the next >> button. Restore from local disk to perform a restore from a file on a local disk, click the browse button to find the backup file. If you are restoring from an...
Page 112
112 c hapter 7: s ystem m anagement restore from ftp to restore from ftp, enter the following required information to connect to your ftp server. ■ remote ftp server name or ip — enter the hostname or ip address of the destination ftp server. ■ username on ftp server — enter the username to log in t...
Page 113
Reboot and shutdown 113 reboot and shutdown the 3com email firewall can be safely rebooted or shut down from the system mgmt -> reboot and shutdown screen. Before shutting down, remove any media from the floppy and cdrom drives. Click reboot now to shutdown the system and reboot. Click shutdown now ...
Page 114
114 c hapter 7: s ystem m anagement.
Page 115
8 m onitoring a ctivity a nd s tatus this chapter describes how to monitor the 3com email firewall’s mail processing activity and system status, and includes the following topics: ■ monitoring mail processing activity ■ email firewall status monitoring mail processing activity select activity from t...
Page 116
116 c hapter 8: m onitoring a ctivity a nd s tatus mail server status the mail system status is shown in the top left window. Mail will either be running or stopped. Use the stop or start button to control mail processing. Mail queue (mail q) the mail queue activity (mail q) section displays the num...
Page 117
Email firewall status 117 email firewall status select status from the main menu to determine if all services and servers are functioning properly. For each service, a status icon will indicate if the service is running properly, if there is a warning, or the service is unable to connect..
Page 118
118 c hapter 8: m onitoring a ctivity a nd s tatus ensure that the following services are running and the information displayed is correct. System alarms indicates if there are any pending system alarms. You will receive an alarm if there is an ftp backup error or if a license expires. Licensing ■ l...
Page 119
Email firewall status 119 if there are issues with a certain service, click the service check icon beside the help button to perform a test of that particular subsystem. Report problems click the report problems button at the bottom of the status page to send selected reports back to 3com for analys...
Page 120
120 c hapter 8: m onitoring a ctivity a nd s tatus troubleshooting mail delivery problems when experiencing any mail delivery problems, the first step is to examine if the problem is affecting only incoming mail, outgoing, or both. For example, if you are receiving mail, but not sending outgoing mai...
Page 121
Troubleshooting mail delivery problems 121 a period of time. You can view the mail transport logs to see the relevant messages that may indicate why you cannot connect to that particular mail server. The server could be down, too busy, or not currently accepting connections. Examining log files exam...
Page 122
122 c hapter 8: m onitoring a ctivity a nd s tatus utility functions in the system mgmt -> status and utility screen, there are utilities that can be used to help troubleshoot network connectivity and mail queue issues. ■ flush mail queue — use this utility if you have a high amount of deferred mail...
Page 123
Troubleshooting content issues 123 troubleshooting content issues if the mail has been delivered to the 3com email firewall successfully, it will undergo security processing before delivery to its final destination. Many of the security tools used by the 3com email firewall, such as anti-spam, conte...
Page 124
124 c hapter 8: m onitoring a ctivity a nd s tatus click on a specific message to see the details of its processing and final disposition..
Page 125
A c ustomizing s ystem m essages message variables can be used to customize the content of notification, annotation, and delivery messages. The 3com email firewall will substitute your local settings for the variables at the time the message is sent. For example, in the following delivery failure no...
Page 126
126 a ppendix a: c ustomizing s ystem m essages %hostname% hostname entered on the network settings screen mail.Example.Com %postmaster_mail _addr% email address of the admin user admin@example.Com %delay_warn_time % in delivery settings - time before delay warning 4 hours %max_queue_time % in deliv...
Page 127
B r eset to f actory d efault s ettings from c onsole if you need to return the 3com email firewall to its factory default settings, you should use the system mgmt -> factory settings screen from the main menu. If you have forgotten your admin password, it cannot be recovered and you will not be abl...
Page 128
128 a ppendix b: r eset to f actory d efault s ettings from c onsole 8 you will need to reinstall and license the system using the setup wizard and license wizard. See the installation guide for details on installing the 3com email firewall..
Page 129
C t hird p arty c opyright and l icense a greements apache apache license version 2.0, january 2004 http://www.Apache.Org/licenses/ terms and conditions for use, reproduction, and distribution 1. Definitions. "license" shall mean the terms and conditions for use, reproduction, and distribution as de...
Page 130
130 a ppendix c: t hird p arty c opyright and l icense a greements "contributor" shall mean licensor and any individual or legal entity on behalf of whom a contribution has been received by licensor and subsequently incorporated within the work. 2. Grant of copyright license. Subject to the terms an...
Page 131
131 9. Accepting warranty or additional liability. While redistributing the work or derivative works thereof, you may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this license. However, in accepting su...
Page 132
132 a ppendix c: t hird p arty c opyright and l icense a greements dcc distributed checksum clearinghouse copyright (c) 2004 by rhyolite software permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright not...
Page 133
133 freebsd copyright 1994-2004 the freebsd project. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: redistributions of source code must retain the above copyright notice, this list of...
Page 134
134 a ppendix c: t hird p arty c opyright and l icense a greements legal terms =========== definitions -------------- throughout this license, the terms `package', `freetype project', and `freetype archive' refer to the set of files originally distributed by the authors (david turner, robert wilhelm...
Page 135
135 4. Contacts ----------- there are two mailing lists related to freetype: * freetype@freetype.Org discusses general use and applications of freetype, as well as future and wanted additions to the library and distribution. If you are looking for support, start in this list if you haven't found any...
Page 136
136 a ppendix c: t hird p arty c opyright and l icense a greements jpeg the authors make no warranty or representation, either express or implied, with respect to this software, its quality, accuracy, merchantability, or fitness for a particular purpose. This software is provided "as is", and you, i...
Page 137
137 modssl copyright (c) 1998-2004 ralf s. Engelschall. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this l...
Page 138
138 a ppendix c: t hird p arty c opyright and l icense a greements ntp copyright (c) david l. Mills 1992-2004 permission to use, copy, modify, and distribute this software and its documentation for any purpose and without fee is hereby granted, provided that the above copyright notice appears in all...
Page 139
139 openssh the licences which components of this software fall under are as follows. First, we will summarize and say that all components are under a bsd licence, or a licence more free than that. Openssh contains no gpl code. 1) copyright (c) 1995 tatu ylonen , espoo, finland all rights reserved a...
Page 140
140 a ppendix c: t hird p arty c opyright and l icense a greements 4) the rijndael implementation by vincent rijmen, antoon bosselaers and paulo barreto is in the public domain and distributed with the following license: @version 3.0 (december 2000) optimised ansi c code for the rijndael cipher (now...
Page 141
141 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. This software is provided by the author ``as is'' and any express or implied warranties, i...
Page 142
142 a ppendix c: t hird p arty c opyright and l icense a greements pam redistribution and use in source and binary forms of linux-pam, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain any existing copyright noti...
Page 143
143 info-zip copyright (c) 1990-2003 info-zip. All rights reserved. For the purposes of this copyright and license, "info-zip" is defined as the following set of individuals: mark adler, john bush, karl davis, harald denker, jean-michel dubois, jean-loup gailly, hunter goatley, ian gorman, chris her...
Page 144
144 a ppendix c: t hird p arty c opyright and l icense a greements.
Page 145
G lossary attachment control a feature that allows you to block attachments based on their extension or mime type. Bcc blind carbon copy. The copy of an email is sent to a specified address without the other recipient’s knowledge. Certificate an attachment to a message that verifies its origin. Cert...
Page 146
146 g lossary ip internet protocol. Ip is a layer 3 network protocol that is the standard for sending data through a network. Ip is part of the tcp/ip set of protocols that describe the routing of packets to addressed devices. Ip address internet protocol address. A unique identifier for a device at...
Page 147
147 quarantine a protected area for storing messages that contain viruses or are considered spam. Messages can be deleted from the quarantine or released back into an email inbox. Rbl realtime blackhole list. A list of servers that are considered sources of known spam. Rfc request for comments. A se...
Page 148
148 g lossary tls transport layer security. A protocol for encrypting and providing data integrity over the internet. Traceroute a utility used to verify the routing path from one network host to another. Trusted senders list a list of users who can bypass email security controls when mailing local ...
Page 149
A activity 115 admin account 86 lost password 127 administrator privileges 67, 87 advanced anti-spam options 69 annotations delivery settings 24 anti-spam 47 header 70 server status 118 anti-virus 32 server status 118 archive log 77 attachment control 34, 123 attachment types 34 authentication log 7...
Page 150
Distributed checksum clearinghouse (dcc) 49 dns 89, 103 dns server status 118 domain 89 double bounce 26 e email backup 106, 109 email history 79, 123 encryption 41, 94 specific site policy 43 envelope-from 38 envelope-to 38 esmtp (extended smtp) 25 examining log files 121 f factory default settings...
Page 151
Local disk backup 107 local users 86 login failure 81 lost admin password 127 m mail access 37, 70 mail configuration 85 mail filtering 37, 70 mail mappings 26 mail queue statistics 116 mail queues 104, 116 mail received recently 116 mail routing 19 mail server status 116 mail transport log 77, 121 ...
Page 152
Bcc action 60 preferences 59 priority 58 ping 102, 122 q quarantine 105 queue id 79 queue sizes 81 r raw mail body 57 rbl (realtime blackhole list) 69 reboot and shutdown 113 relay 23 report configuration 72 report fields 74 reporting 15, 71 reporting history size 82 reset to factory settings 113, 1...
Page 153
Tokens 57 training 54 status 117 status and utility 99 strip received headers 23 swap usage 81 syslog 78, 89 system history 80 system logs 77 t tcp extensions 90 time server status 118 time zone 84 tls 41, 42 token 57 traceroute 103, 122 troubleshooting content issues 123 troubleshooting mail delive...
Page 154
3c om c orporation l imited w arranty this warranty applies to customers located in the united states, australia, canada (except quebec), ireland, new zealand, uk and other english language countries, and countries for which a translation into the local language is not provided. 3c om i ntelli j ack...