Home

GFI MailDefense Suite, 100-249u, 1Y, SMA RNW

1. Step 1 Enable IIS SMTP Service Windows Server 2003 1 Go to Start gt Control Panel gt Add or Remove Programs gt Add Remove Windows Components 2 Select Internet Information Services IIS and click Details 3 Select the SMTP Service option and click OK 4 Click Next to finalize your configuration Windows Server 2008 1 Launch the Windows Server Manager 2 Navigate to the Features node and select Add Features 3 From the Add Features Wizard select SMTP Server checkbox NOTE The SMTP Server feature might require the installation of additional role services and features Click Add Required Role Services to proceed with installation 4 In the following screens click Next to configure any required role services and features and click Install to start the installation 5 Click Close to finalize the configuration Step 2 Create SMTP domain s for email relaying 1 Go to Start gt Control Panel gt Administrative Tools 2 Click on Internet Information Services IIS Manager Internet Information Services IIS 6 0 Manager OF x File Action View Window Help 18 x 9 4lm XO ae H m Internet Information Services i E 8 WINSERVF local computer jsmith mydomain com Local Default El 4 Default SMTP Virtual Server test mydomain com Remote Domains Current Sessions Screenshot 10 Internet Information Services IIS Manager 3 In the left pane expand th
2. GFI MailEssentials lt Back Cancel Screenshot 76 Specify mail server details 8 Specify IP address and listening port of your SMTP server and the external domain name used Click Next to continue 9 Specify the email address where notifications e g failed anti spam filters soam digests are sent Getting Started Guide Installation for SMTP Servers e 91 ii GFI MailEssentials for Exchange SMTP Setup Active Directory Access to Active Directory users Does this server have access to all the email users in Active Directory Yes all email users are available on Active Directory rules will be based on Active Directory users sissvnsenensennssensnsnsnsensnssnnssnsnssnsnsnssnsanssnnsnsssensnsnnsnnssnnsnesnnsensnssnesenesssenssnssnsanssnnsnssnnssessnssnssensnssnesnsenssnesenssnssnssnnsnasnasnnsnnsnes No do not have Active Directory or my network does not have access to oO Recenseeesevsnscensossenssonesssseseesetoossnensnensseceanensonssasensennensensseasaasoesnenssenasasenoenseessenseseseoeasensusasnesnoensseasonensseasensesscnssnoesesonseeeed GFI MailEssentials lt Back Cancel Screenshot 77 Selecting SMTP mode 10 Select No I do not have Active Directory option to use SMTP server to get the list of email users Click Next to continue i GFI MailEssentials for Exchange SMTP Setup X aw io GFI MailEssentials makes use of the Microsoft Message Queue Service MS
3. e IMPORTANT o This provides important information such as warnings and cautions that advise of potential issues commonly encountered For any technical terms and their definitions as used in this manual refer to the Glossary chapter 1 3 Licensing Information on licensing is available on http www gfi com products gfi mailessentials pricing licensing 2 e Introduction Getting Started Guide 2 How does GFI MailEssentials work 2 1 Inbound mail filtering Inbound mail filtering is the process through which incoming email are filtered before delivery to users R Incoming message GFI MailEssentials D a S Email Naash Anti Spam Auto reply blocked Actions message User Mailbox Q SMTP level filtering Directory Harvesting and Greylist is executed before the email body is received Figure 1 Inbound mail filtering When an email is received When the email is received it is checked to see if it is addressed to a list in the list server If the email matches a list it will be processed by the list server 9 The incoming email is filtered using all the spam filters Any email that fails a spam filter check is sent to the anti spam email actions If an email goes through all the filters and is not identified as spam it then goes to the next stage Q If configured email is next archived to the archiving database Q If configured auto replies are next sent to the sender Q If config
4. 4 2 Upgrade from earlier version If you are currently using a previous version of GFI MailEssentials versions 9 10 11 12 and 14 you can upgrade your current installation while at the same time retain all your existing configuration settings Important notes e Upgrades cannot be undone i e you cannot downgrade to an Getting Started Guide Installation for SMTP Servers e 89 earlier version once you have installed the latest version e On upgrading an existing installation licensing reverts to trial version and a new fully purchased license key for the GFI MailEssentials 2010 is required For more information on new license keys refer to http customers gfi com e You cannot change the installation path during GFI MailEssentials upgrades e When upgrading from GFI MailEssentials 9 the current Bayesian weights file will be upgraded to the new format used in GFI MailEssentials 10 or later The new format is more compact and uses less memory NO DATA WILL BE LOST Upgrade procedure 1 Launch GFI MailEssentials installation on the server where your earlier version of GFI MailEssentials is installed GFI MailEssentials GFI MailEssentials version 15 0 321 6753 is already installed You must uninstall the existing version before installing GFI MailEssentials version 15 0 328 3696 IMPORTANT The new build requires the Microsoft NET Framework 2 0 and Microsoft MSMQ installed on this machine Do you want to uninst
5. Common Files GFI gt lt netpub mailroot gt If installed on a gateway machine lt Program Files GFI MailEssentials gt lt Program Files Common Files GFl gt 6 3 2 Firewall port settings Configure your firewall to allow the following port connections These ports are used by GFI MailEssentials to connect to GFI servers e DNS Port 53 Used by anti spam filters IP DNS blocklist Sender Policy Framework Header Checking e FTP Ports 20 and 21 Used by GFI MailEssentials to connect to ftp gfisoftware com and retrieve latest product version information e HTTP Port 80 Used by GFI MailEssentials to download product patch and anti spam filter updates i e SoamRazer Anti Phishing and Bayesian anti spam filters from the following locations o http update gfi com o http update gfisoftware com o http support gfi com 84 e Installation for SMTP Servers Getting Started Guide o http db11 spamcatcher net GFI MailEssentials 14 or earlier o http sn92 mailshell net GFI MailEssentials 14 SR1 or later e Remoting Ports 8021 Used in the latest builds of GFI MailEssentials for inter process communication No firewall configuration is required to allow connections to or from the remoting ports since all the GFI MailEssentials processes run on the same server NOTE Ensure that no other applications except GFI MailEssentials are listening on port 8021 e LDAP Port 3
6. Exchange Virtual Server cluster group resource to bring up the pop up menu 4 Scroll down to the New menu item to expand it and select Resource to bring up the New Resource wizard 5 Enter the service display name in the Name and Description fields Select Generic Service as Resource Type and select the Exchange Virtual Server cluster group resource as the group to which the new resource will be added Click Next 6 In the Possible Owners dialog add the nodes of the Exchange cluster to the list of preferred owners Click Next 7 Select the resource dependencies in the Dependencies dialog Click Next 8 In the Generic Service Parameters dialog enter the service name and leave the start parameters text box empty Click Next 9 Click Finish to finalize your configuration Do not add any keys in the Registry Replication dialog 10 Repeat from step 3 to 8 above for each service mentioned above 11 Right click on the newly added resource s and select Bring Online to enable services These resources are visible in the list of cluster resources of the Exchange Virtual Server cluster Getting Started Guide Installation for Microsoft Exchange 2003 e 43 4 Installation for Microsoft Exchange 2007 amp 2010 4 1 Introduction GFI MailEssentials installation depends on your network infrastructure i e Microsoft Exchange 2007 2010 or SBS 2008 2011 setup You can install this product on Same se
7. MSMQ for you To complete this process you will require the Windows CD DVD Microsoft MSMQ is a required component for GFI MailEssentials The installation will not continue if Microsoft MSMG is not installed Do you want to install the Microsoft MSMQ service now Yes f No GFI MailEssentials Screenshot 42 Installing Microsoft Message Queuing Service Getting Started Guide Installation for Microsoft Exchange 2007 amp 2010 e 49 10 If Microsoft Message Queuing Services MSMQ is not installed then the dialog in the above screenshot will open Select Yes to install MSMaQ Click Next to continue 11 Click Finish to finalize your installation On completion setup will e Check whether Microsoft XML engine is installed This is automatically installed if not found on UK US English OS For other OS languages this has to be manually downloaded and installed Microsoft XML engine can be downloaded from http www microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F2B428displaylang en e For new installations setup will launch the Post Installation Wizard Post Installation Wizard 1 Click Next in the welcome page GFI MailEssentials Post Installation Wizard DNS Server Specify the DNS server to be used for domain lookups The DNS server is used for domain look ups and by spam filters which query DNS blocklists Use the same DNS server used by this server Use an alternate D
8. Server cluster resource group When installing GFI MailEssentials in a clustered windows environment the product services described below are not automatically included in a cluster resource group Consequently if the cluster node on which GFI MailEssentials is running fails these product services are not moved to another cluster node along with the resource group and they will not be restarted on the new node As a result GFI MailEssentials will not start up properly after a failover in a cluster environment The services to be added to the Exchange Virtual Server cluster resource group are e Service Name gfiasmlhost Display name GFI MailEssentials Managed Attendant Service Dependencies None Start Parameters None Registry Replication None e Service Name listserv 42 Installation for Microsoft Exchange 2003 Getting Started Guide Display Name GFI MailEssentials List Server Dependencies GFI MailEssentials Legacy Attendant Start Parameters None Registry Replication None e Service Name GFIMETRXSVC Display Name GFI MailEssentials Enterprise Transfer Service Dependencies GFI MailEssentials Legacy Attendant Start Parameters None Registry Replication None To add these services 1 Go to Control Panel gt Administrative Tools gt Cluster Administrator 2 In the tree view on the left hand side of the Cluster Administrator console expand the cluster root node and then the Groups node 3 Right click on the
9. as an open relay for spam To avoid this from happening it is recommended that you specifically define which mail servers can route emails through this mail relay server i e allow only specific servers to use this email relaying setup To achieve this 1 Go to Start gt Control Panel gt Administrative Tools 2 Click on Internet Information Services IIS Manager 3 In the left pane expand the respective server node Right click on Default SMTP Virtual Server and select Properties 4 Click on the Access tab and select Relay 18 o Installation for Microsoft Exchange 2003 Getting Started Guide Relay Restrictions Ed Select which computer may relay through this virtual server Only the list below C Allexcept the list below Computers Access IP Address Mask Domain Name Add Remove I Allow all computers which successfully authenticate to relay regardless of the list above Cancel Help Screenshot 12 Relay options 5 Select the Only the list below option and click Add 6 Specify IP s of the mail server s that are allowed to route emails through your mail relay server You can specify e Single computer i e Authorize one specific machine to relay email through this server Use the DNS Lookup button to lookup an IP address for a specific host e Group of computers i e Authorize specific computer s to relay emails through this server e Domain Allow all computers in a spec
10. assistance refer to New installations section below 4 5 4 New installations Important notes 1 During installation GFI MailEssentials restarts Microsoft Exchange Server services This is required to allow GFI MailEssentials components to be registered and started 2 Before starting installation close any running Windows applications Installation procedure 1 Logon to your Microsoft Exchange Server machine using administrator credentials 2 Double click mailessentials2010 exe 32 bit install or mailessentials2010_x64 exe 64 bit install accordingly 3 Select install language and click Next Getting Started Guide Installation for Microsoft Exchange 2007 amp 2010 e 57 4 Select whether to check for newer versions builds of GFI MailEssentials and click Next 5 Read licensing agreement To proceed with the installation select I accept the license agreement and click Next 6 Click Next to install in default location or click Browse to change path 7 Specify user details and enter license key Click Next to continue 8 Specify the email address where notifications e g failed anti soam filters soam digests are sent i GFI MailEssentials for Exchange SMTP Setup fel E3 Active Directory Access to Active Directory users Does this server have access to all the email users in Active Directory a Yes all email users are available on Active Directory rules will be based on Active Directory users N
11. backup software Antivirus and backup software may cause GFI MailEssentials to malfunction This occurs when such software denies access to certain files required by GFI MailEssentials Disable third party antivirus and backup software from scanning the following folders x86 installations 32 bit X64 installations 64 bit lt Program Files lt Program Files GFI MailEssentials gt x86 GFI MailEssentials gt 6 e Installation for Microsoft Exchange 2003 Getting Started Guide lt Program Files x86 Common lt Program Files Common Files GFl gt Files GFl gt lt Inetpub mailroot gt If installed on a gateway machine lt Program Files Exchsrvr Mailroot gt f installed on the same machine as Microsoft Exchange 2003 3 3 2 Firewall port settings Configure your firewall to allow the following port connections These ports are used by GFI MailEssentials to connect to GFI servers e DNS Port 53 Used by anti spam filters IP DNS Blockilist Sender Policy Framework Header Checking e FTP Ports 20 and 21 Used by GFI MailEssentials to connect to ftp gfisoftware com and retrieve latest product version information e HTTP Port 80 Used by GFI MailEssentials to download product patch and anti spam filter updates i e SoamRazer Anti Phishing and Bayesian anti spam filters from the following locations o http update gfi com o http update gfisoftware com o http su
12. be taken when emails are detected as spam Click Next to continue 7 Click Finish to finalize the installation The GFI MailEssentials installation is now complete and the anti spam system is up and running For more information about how to optimize GFI MailEssentials refer to Post install actions chapter Getting Started Guide Installation for Lotus Domino e 81 6 Installation for SMTP Servers 6 1 Introduction Installing GFI MailEssentials with other SMTP servers enables you to scan all inbound emails received from outside i e the internet for spam before reaching your SMTP Server Outbound emails relayed to GFI MailEssentials are also processed e g adding of disclaimers and auto whitelisting before these are sent via internet To install GFI MailEssentials with other SMTP servers the server where GFI MailEssentials is installed must be configured as an email gateway server also known as Smart host or Mail relay server for all your email All inbound and outbound email must pass through this server for scanning before being relayed to the mail server for distribution 6 2 System requirements 6 2 1 Software Supported operating systems e Microsoft Windows Server 2008 x86 or x64 e Microsoft Windows Server 2003 Standard Enterprise x86 or x64 Mail Servers e Any SMTP compliant email server Other components e Microsoft NET Framework 2 0 e Microsoft Data Access Components MDAC 2 8 included by def
13. e Checking the GFI MailEssentials Dashboard When the email is received the details are displayed in the MTA logging window Ensure that the description next to the test email with subject 100 free is Blocked Keyword Checking e Verifying that the default anti spam action chosen was applied e g check if email was delivered to Quarantine 100 Post install actions Getting Started Guide 7 2 GFI MailEssentials Configuration At this stage your GFI MailEssentials anti spam system is up and running All inbound email will be scanned by the anti spam filters enabled by default Filter Description Enabled by Default SpamRazer Directory Harvesting Phishing Sender Policy Framework Auto Whitelist Whitelist Email Blocklist IP DNS Blocklist URI DNS Blocklist Header checking Keyword checking New Senders Bayesian analysis Greylist An anti spam engine that determines if an email is spam by using email reputation message fingerprinting and content analysis Stops email which is randomly generated towards a server mostly addressed to non existent users Blocks emails that contain links in the message bodies pointing to known phishing sites or if they contain typical phishing keywords Stops email which is received from domains not authorized in SPF records Addresses to which an email is sent to are automatically excluded from being blocked A custom list of s
14. gt Greylist node and select Properties 2 Click the Greylist tab 3 Click Enable Greylist to enable Greylist 4 From the Email exclusions and IP exclusions tabs specify any email or IP addresses which you do not want to greylist and whether to exclude also whitelisted emails and IP addresses 5 Click OK to finalize your configuration 7 1 Test your anti spam system GFI MailEssentials is now ready to start managing spam To verify that anti spam is working properly 1 Navigate to Start gt All Programs gt GFI MailEssentials gt GFI MailEssentials Dashboard 2 Using an external email account for example hotmail or Gmail create a new email and key in 100 free as the subject 3 Send the email to one of your internal email accounts 4 Allow some time for email delivery and confirm that GFI MailEssentials is working by EQ GFI MailEssentials Dashboard Ol x File Options Programs Help J Statistics SJ POPZExchange m Services v GFI MailEssentials Managed Attendant Service GFI MailEssentials Enterprise Transfer Agent J GFI List Server iv GFI MailE ssentials Legacy Attendant Service GFI MailE ssentials POP2E xchange oO GFI MailE ssentials Scan Engine Processed emails Show filters Processed Time Sender Recipients Subject Descrip A 4 22 2010 4 23 50 PM external external bjones masterd 100 free Blocked Header Checking Screenshot 84 Testing your anti spam system
15. improved in any way let us know via email on documentation afi com Getting Started Guide Troubleshooting and support e 107 10 Appendix Installing MSMQ 10 1 Windows Server 2003 The message queuing service is a scalable system service developed by Microsoft to enable high volume event processing GFI MailEssentials uses this service for the list server The message queuing service is included with every Windows 2003 and XP version although not always installed by default To check whether MSMQ is installed and to install it if it is not 1 Open the Windows Control Panel from the start menu double click on Add Remove Programs and then click on the Windows Components tab to launch and display the Windows components wizard 2 Click on Application Server and then click Details Windows Components Wizard xi Windows Components You can add or remove components of windows To add or remove a component click the checkbox A shaded box means that only part of the component will be installed To see what s included in a component click Details Components AjAccessories and Utilities Application Server 14 6 MB A Certificate Services 7 6 MB C BB E mail Services 1 7 MB 4 Fax Services 103 MR x Description Includes Internet Information Services IIS and the Application Server Console Total disk space required 45 7 MB Space available on disk 15741 9 MB lt Back Next gt Cancel H
16. installed on this machine Do you want to uninstall the existing version of GFI MailEssentials No Screenshot 62 Confirm the upgrade 2 Click Yes to start the upgrade process and follow on screen 74 e Installation for Lotus Domino Getting Started Guide instructions For assistance refer to New installations section below 5 4 3 New installations Important notes 1 During installation GFI MailEssentials restarts IIS services This is required to allow GFI MailEssentials components to be registered and started 2 Before starting installation close any running Windows applications Installation procedure 1 Logon to the email gateway server where GFI MailEssentials will be installed using administrator credentials 2 Double click mailessentials2010 exe 32 bit install or mailessentials2010_x64 exe 64 bit install accordingly 3 Select install language and click Next 4 Select whether to check for newer versions builds of GFI MailEssentials and click Next 5 Read licensing agreement To proceed with the installation select I accept the license agreement and click Next 6 Click Next to install in default location or click Browse to change path 7 Specify user details and enter license key Click Next to continue ie GFI MailEssentials Setup fel Ey Mail Server Mail Server Information Specify the IP address of the machine running the mail server and specify your local domain i e mycompany
17. originating from blocked users Getting Started Guide Remote commands Instructions that facilitate the possibility of executing tasks remotely Secure Sockets Layer A protocol to ensure an integral and secure communication between networks Simple Mail Transport An internet standard used for email transmission across Protocol IP networks SMTP See Simple Mail Transport Protocol Spam actions Actions taken on spam emails received e g delete email or send to Junk email folder SSL See Secure Sockets Layer WebDAV A HTTP extensions database that enables users to manage files remotely and interactively Used for managing emails in the mailbox and in the public folder in Microsoft Exchange Whitelist A list of email addresses and domains from which emails are always received Zombie An infected computer that is part of a Botnet Getting Started Guide Glossary e 115 12 Index A Active Directory 7 9 15 23 31 37 47 49 58 76 99 113 Antivirus 6 46 68 84 105 Auto replies 3 Bayesian Analysis 101 C Cluster 6 28 29 30 31 36 42 43 64 D Dashboard 100 Directory harvesting 3 99 101 102 Disclaimers 9 23 37 58 83 DMZ 5 15 16 47 99 113 DNS Server 22 88 E Email Blocklist 101 Email monitoring 3 G GFI MailEssentials reporter 6 Greylist 3 100 102 113 H Header checking 7 68 101 IIS SMTP 16 17 22 56 69 73 85 89 IMAP 114 Inbound mail fi
18. the Access tab and select Relay Getting Started Guide Installation for Lotus Domino e 71 Relay Restrictions Ed Select which computer may relay through this virtual server Only the list below All except the list below Computers Access IP Address Mask Domain Name Add Remave I Allow all computers which successfully authenticate to relay regardless of the list above Cancel Help Screenshot 60 Relay options 5 Select the Only the list below option and click Add 6 Specify IP s of the mail server s that are allowed to route emails through your mail relay server You can specify e Single computer i e Authorize one specific machine to relay email through this server Use the DNS Lookup button to lookup an IP address for a specific host e Group of computers i e Authorize specific computer s to relay emails through this server e Domain Allow all computers in a specific domain to relay emails through this server NOTE The Domain option adds a processing overhead that can degrade SMTP service performance This is due to the reverse DNS lookup processes triggered on all IP addresses within that domain that try to route emails through this relay server Step 5 Configure Lotus Domino for GFI MailEssentials a Configure Lotus Domino to send outbound emails through GFI MailEssentials 1 From the Lotus Domino Administrator click Configuration tab and select configurati
19. you want to install the Microsoft MSMQ service now Yes No GFI MailEssentials Screenshot 34 Installing Microsoft Message Queuing Service 10 If Microsoft Message Queuing Services MSMQ is not installed then the dialog in the above screenshot will open Select Yes to install MSMaQ Click Next to continue 11 Click Finish to finalize your installation On completion setup will e Ask you to restart the SMTP service Failing to restart the SMTP service will negatively affect anti spam filtering and email flow e Check whether Microsoft XML engine is installed This is automatically installed if not found on UK US English OS For other OS languages this has to be manually downloaded and installed Microsoft XML engine can be downloaded from http Awww microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F2B42 amp displaylang en e For new installations setup will launch the Post Installation Wizard Post Installation Wizard 1 Click Next in the welcome page 38 e Installation for Microsoft Exchange 2003 Getting Started Guide GFI MailEssentials Post Installation Wizard Iof x DNS Server Specify the DNS server to be used for domain lookups The DNS server is used for domain look ups and by spam filters which query DNS blocklists Use the same DNS server used by this server Use an alternate DNS Server 192 168 1 4 Test DNS Server i lt Back Cancel
20. 0 0 0225 RemotelIPRanges lt MailEssentials IP Address gt AuthMechanism ExternalAuthoritative PermissionGroups Exchangeservers Change lt MailEssentials IP Address gt with the IP address of the GFI MailEssentials machine Example new receiveconnector name GFI MailEssentials Bindings V0 2 0 20 50 325 RemoteIPRanges 192 168 0 1 AuthMechanism ExternalAuthoritative PermissionGroups ExchangesServers Step 2 Test your new mail relay server Before installing GFI MailEssentials verify that your new mail relay server is working correctly Test SMTP inbound connection via test email 1 Send an email from an external account e g Gmail to an internal email address user 2 Ensure that intended recipient received the test email in the respective email client Test SMTP outbound connection via test email 1 Send an email from an internal email account to an external account e g Gmail 2 Ensure that the intended recipient external user received the test email NOTE You can also use Telnet to manually send the test email and obtained more troubleshooting information For more information refer to http support microsoft com support kb articles Q153 1 19 asp 4 5 2 Upgrades from earlier version If you are currently using a previous version of GFI MailEssentials versions 9 10 11 12 and 14 you can upgrade your current installation while at the sam
21. 3 server This setup is typically used to filter email soam on the mail server that is configured to receive emails directly from the internet e The SBS 2003 server This setup is used to filter email soam on the SBS 2003 server which uses Microsoft Exchange to receive emails directly from the internet e The mail relay server This setup is commonly used to filter soam in distributed email infrastructures especially those running a DMZ In this environment a dedicated machine also known as a gateway perimeter server is set to relay emails to another mail server running Microsoft Exchange GFI MailEssentials is installed on the gateway perimeter server so that email spam is filtered before reaching the mail server This setup reduces network traffic email storage and processing requirements on your mail server e Microsoft Exchange Server amp IIS Clusters This type of installation is commonly used to filter spam within environments where clusters are used as disaster prevention and recovery 3 2 System requirements 3 2 1 Software Supported operating systems e Microsoft Windows Server 2008 Standard Enterprise e Microsoft Windows Server 2003 Standard Enterprise x86 or x64 e Microsoft Small Business Server SBS 2003 SP1 Supported mail servers e Microsoft Exchange Server 2003 SP2 Other components e Microsoft NET Framework 2 0 e Microsoft XML core services This is required by the GFI Getting Started Guide Insta
22. 46 4 4 Installing on Microsoft Exchange or SBS server 47 4 5 Installing on an email gateway or relay perimeter server 54 4 6 Installing on Microsoft Exchange Server 2007 clusters 64 5 installation for Lotus Domino 67 5 1 Introduction 67 5 2 System requirements 67 5 3 Important settings 68 5 4 Installing on gateway servers for Lotus Domino 69 6 Installation for SMTP Servers 83 6 1 Introduction 83 6 2 System requirements 83 6 3 Important settings 84 6 4 Installing on gateway servers for SMTP Servers 85 7 Post install actions 99 7 1 Test your anti spam system 100 7 2 GFIMailEssentials Configuration 101 8 Uninstalling GFI MailEssentials 103 8 1 Introduction 103 Getting Started Guide Contents e i 9 Troubleshooting and support 9 1 Introduction 9 2 Troubleshooting Installation issues 9 3 Knowledge Base 9 4 Web Forum 9 5 Request technical support 9 6 Build notifications 9 7 Documentation 10 Appendix Installing MSMQ 10 1 Windows Server 2003 10 2 Windows Server 2008 11 Glossary 12 Index ii e Contents Getting Started Guide 1 Introduction 1 1 About this manual The scope of this Getting Started Guide is to help you install and run GFI MailEssentials on your network with minimum configuration effort It describes 1 The various environments and email infrastructures supported by this product 2 Guides you through the respective installation procedure 3 Walks you through the key steps needed to get th
23. 89 Used by GFI MailEssentials to get email addresses from SMTP server 6 4 Installing on gateway servers for SMTP Servers 6 4 1 Pre install actions GFI MailEssentials uses the IIS SMTP service as its SMTP Server and therefore the IIS SMTP service must be configured to act as a mail relay server This is achieved as follows Step 1 Enable IIS SMTP Service Windows Server 2003 1 Go to Start gt Control Panel gt Add or Remove Programs gt Add Remove Windows Components 2 Select Internet Information Services IIS and click Details 3 Select the SMTP Service option and click OK 4 Click Next to finalize your configuration Windows Server 2008 1 Launch the Windows Server Manager 2 Navigate to the Features node and select Add Features 3 From the Add Features Wizard select SMTP Server checkbox NOTE The SMTP Server feature might require the installation of additional role services and features Click Add Required Role Services to proceed with installation 4 In the following screens click Next to configure any required role services and features and click Install to start the installation 5 Click Close to finalize the configuration Step 2 Create SMTP domain s for email relaying 1 Go to Start gt Control Panel gt Administrative Tools 2 Click on Internet Information Services IIS 6 0 Manager Getting Started Guide Installation for SMTP Servers e 85 Internet Information Services IIS 6 0 Man
24. Attendant and the GFI POP2Exchange cluster resources and move the Exchange Virtual Server cluster group resource to a passive other node e Process 3 Install GFI MailEssentials on another cluster node e Process 4 Add specific GFI MailEssentials services to the Exchange Virtual Server cluster resource group Repeat Processes 2 3 and 4 above for the remaining passive node s in the cluster 3 6 1 Upgrade from earlier version If you are currently using a previous version of GFI MailEssentials versions 9 10 11 12 and 14 you can upgrade your current installation while at the same time retain all your existing configuration settings Pre upgrade actions None Important notes e Upgrades cannot be undone i e you cannot downgrade to an earlier version once you have installed the latest version e On upgrading an existing installation licensing reverts to trial version and a new fully purchased license key for the GFI MailEssentials 2010 is required For more information on new license keys refer to http customers gfi com e You cannot change the installation path during GFI MailEssentials upgrades e When upgrading from GFI MailEssentials 9 the current Bayesian weights file will be upgraded to the new format used in GFI MailEssentials 10 or later The new format is more compact and uses less memory NO DATA WILL BE LOST e When upgrading in a Microsoft Exchange cluster environment all instances of GFI MailEssentials
25. DNS Server Specify the DNS server to be used for domain lookups The DNS server is used for domain look ups and by spam filters which query DNS blocklists Use the same DNS server used by this server Use an alternate DNS Server 192 168 1 4 Test DNS Server lt Back Cancel Screenshot 20 DNS Server settings 2 In the DNS Server dialog select e Use the same DNS server used by this server Select this option to use the same DNS server that is used by the operating system where GFI MailEssentials is installed e Use an alternate DNS server Select this option to specify a custom DNS server IP address Click Test DNS Server to test connection with the specified DNS server If test is unsuccessful specify another DNS server Click Next to continue Getting Started Guide Installation for Microsoft Exchange 2003 e 25 GFI MailEssentials Post Installation Wizard lel x Internet Connectivity Settings Specify how this server connects to the Internet GFI MailEssentials requires internet access for spam filtering and to download spam filter updates This machine connects directly to the internet This machine connects to the internet through a proxy server Configure proxy server Screenshot 21 Internet connectivity settings 3 In the Internet Connectivity Settings dialog specify how the server where GFI MailEssentials is installed connects to the internet If the server connects thr
26. Directory Harvest Attacks a brute force type of attack used by spammers to find valid existent e mail addresses at a domain This structure stops the majority of Spam from arriving at your Microsoft Exchange server Perimeter Gateway SMTP Server ee Firewall Mail Server GFI MailEssentials Internet Figure 3 A typical Perimeter SMTP Relay Server setup 3 5 1 Upgrades from earlier version If you are currently using a previous version of GFI MailEssentials versions 9 10 11 12 and 14 you can upgrade your current installation while at the same time retain all your existing configuration settings Important notes e Upgrades cannot be undone i e you cannot downgrade to an earlier version once you have installed the latest version e On upgrading an existing installation licensing reverts to trial Getting Started Guide Installation for Microsoft Exchange 2003 e 15 version and a new fully purchased license key for the GFI MailEssentials 2010 is required For more information on new license keys refer to http customers gfi com e You cannot change the installation path during GFI MailEssentials upgrades e When upgrading from GFI MailEssentials 9 the current Bayesian weights file will be upgraded to the new format used in GFI MailEssentials 10 or later The new format is more compact and uses less memory NO DATA WILL BE LOST Upgrade procedure 1 Launch GFI MailEssentials installation on the server
27. Directory Integration 0 0 MB 7 0 MB Ne e pra Downlevel Client Support 0 0 MB 4 MSMO HTTP Support 0 0 MB LJ of Routing Support 0 0 MB C 3 Triggers 0 0 MB A Core functionality Ei Description Performs general setup tasks provides independent client functionality Total disk space required 52 7 MB Details Space available on disk 15741 9 MB coos Screenshot 87 MSMQ Core functionality 5 In the Application Server dialog click OK and then click Next in the Windows Components Wizard window to start installing the message queuing service 6 When the installation of the message queuing service is complete you need to click Finish in the Windows Components Wizard The Message Queuing Service is now installed 110 e Appendix Installing MSMQ Getting Started Guide 10 2 Windows Server 2008 For detailed instructions on how to install MSMQ on Windows Server 2008 refer to http technet microsoft com en us library cc730960 aspx Getting Started Guide Appendix Installing MSMQ e 111 11 Glossary Active Directory AD Auto reply Bayesian Filtering Background Intelligent Transfer Service BITS Blocklist Botnet CIDR Classless Inter Domain Routing Demilitarized Zone Disclaimer Domain Name System DMZ DNS DNS MX Email monitoring rules False negatives False positives Greylist filter Ham lis Getting Started Guide A technology that provides a v
28. Essentials reporter to enable anti spam report generation For UK US English OS this is installed automatically by GFI MailEssentials For other languages this can be downloaded from http Avww microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F2B42 amp displaylang en e Microsoft Message Queuing Services e Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1 2 1 This can be downloaded from http www microsoft com downloads details aspx FamilyID E17E 7F31 079A 43A9 BFF2 0A1 10307611 E amp displaylang en e Internet Information Services IIS 6 or 7 WWW service when using Quarantine or Archive Web Interface 4 2 2 Hardware Processor e Minimum Intel Pentium or compatible 1 GHz 32 bit processor e Recommended x64 architecture based server with Intel 64 architecture or AMD64 platform Memory e Minimum 1GB RAM e Recommended 2GB RAM Physical Storage e Minimum 500MB for installation 2GB for execution e Recommended 500MB for installation 4GB for execution 4 3 Important settings 4 3 1 Antivirus and backup software Antivirus and backup software may cause GFI MailEssentials to malfunction This occurs when such software denies access to certain files required by GFI MailEssentials Disable third party antivirus and backup software from scanning the following folders x86 installations 32 bit x64 installations 64 bit lt Program Files x86 GFI MailEssential
29. GFI MailEssentials 2010 Getting Started Guide By GFI Software Ltd GFI http www gfi com info gfi com Information in this document is subject to change without notice Companies names and data used in examples herein are fictitious unless otherwise noted No part of this document may be reproduced or transmitted in any form or by any means electronic or mechanical for any purpose without the express written permission of GFI Software Ltd GFI MailEssentials was developed by GFI Software Ltd GFI MailEssentials is copyright of GFI Software Ltd 1998 2010 GFI Software Ltd All rights reserved GFI MailEssentials is a registered trademark and GFI Software Ltd and the GFI logo are trademarks of GFI Software Ltd in the Europe the United States and other countries Version ME GSG EN 1 02 009 Last updated March 3 2011 Contents 1 Introduction 1 1 1 About this manual 1 1 2 Terms used in this manual 2 1 3 Licensing 2 2 How does GFI MailEssentials work 3 2 1 Inbound mail filtering 3 2 2 Outbound mail filtering 4 3 Installation for Microsoft Exchange 2003 5 3 1 Introduction 5 3 2 System requirements 5 3 3 Important settings 6 3 4 Installing on Microsoft Exchange Server 2003 7 3 5 Installing on an email gateway or relay perimeter server 15 3 6 Installing on Microsoft Exchange 2003 cluster 28 4 Installation for Microsoft Exchange 2007 amp 2010 45 4 1 Introduction 45 4 2 System requirements 45 4 3 Important settings
30. I MailEssentials for Exchange SMTP Setup ile x version as from Windows 2000 pripi isian The GFI MailEssentials installation can install Microsoft MSMQ for you To complete this process you will require the Windows CD DVD Microsoft MSMQ is a required component for GFI MailEssentials The installation will not continue if Microsoft MSMG is not installed Do you want to install the Microsoft MSMQ service now C Yes f No GFI MailEssentials Next gt Screenshot 65 Installing Microsoft Message Queuing Service 76 e Installation for Lotus Domino Getting Started Guide 11 If Microsoft Message Queuing Services MSMQ is not installed then the dialog in the above screenshot will open Select Yes to install MSMQ Click Next to continue 12 Click Finish to finalize your installation On completion setup will e Ask you to restart the SMTP service IMPORTANT Failing to restart the SMTP service will negatively affect anti spam filtering and email flow e Check whether Microsoft XML engine is installed This is automatically installed if not found on UK US English OS For other OS languages this has to be manually downloaded and installed Microsoft XML engine can be downloaded from http Avww microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F2B42 amp displaylang en e For new installations setup will launch the Post Installation Wizard Post Installation Wizard 1 Click Next in the
31. Introduction GFI MailEssentials can be installed e Ona perimeter server e g DMZ with Microsoft Exchange Server 2007 2010 in Edge Server role e As a mail relay server between the perimeter gateway SMTP server and the recipients inboxes with Microsoft Exchange Server 2007 2010 in Hub Transport role Both setups enable you to reduce unnecessary email traffic by using your Active Directory resources at a perimeter gateway server level to drop connections of non existent email recipients in incoming email This greatly helps against common spamming techniques such as Directory Harvest Attacks a brute force type of attack used by spammers to find valid existent e mail addresses at a domain This structure eliminates most spam from arriving at your Microsoft Exchange server 54 e Installation for Microsoft Exchange 2007 amp 2010 Getting Started Guide Perimeter Gateway SMTP Server ee Firewall Mail Server GFI MailEssentials Internet Figure 4 A typical Perimeter SMTP Relay Server setup 4 5 1 Pre install actions Step 1 Send and Receive connector setup NOTE These connectors are not required for Microsoft Exchange Server 2007 2010 installed with Edge Server Role Ensure that the required Send connectors and Receive connectors to and from Microsoft Exchange 2007 2010 are created for servers installed with Hub Transport Role Where these are not yet created 1 Add a Send Connector to Microsof
32. MQ The Message Queueing Services is a scalable system service developed by Microsoft to enable high volume event processing This service is included with every Windows version as from Windows 2000 although not always installed by default The GFI MailEssentials installation can install Microsoft MSMG for you To complete this process you will require the Windows CD DVD Microsoft MSMGQ is a required component for GFI MailEssentials The installation will not continue if Microsoft MSMGQ is not installed Do you want to install the Microsoft MSMQ service now C Yes No GFI MailEssentials Screenshot 78 Installing Microsoft Message Queuing Service 11 If Microsoft Message Queuing Services MSMQ is not installed then the dialog in the above screenshot will open Select Yes to install 92 e Installation for SMTP Servers Getting Started Guide MSMQ Click Next to continue 12 Click Finish to finalize your installation On completion setup will e Ask you to restart the SMTP service IMPORTANT Failing to restart the SMTP service will negatively affect anti spam filtering and email flow e Check whether Microsoft XML engine is installed This is automatically installed if not found on UK US English OS For other OS languages this has to be manually downloaded and installed Microsoft XML engine can be downloaded from http Awww microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F2B42 amp displa
33. NS Server 192 168 1 4 Test DNS Server lt Back Cancel Screenshot 43 DNS Server settings 2 In the DNS Server dialog select e Use the same DNS server used by this server Select this option to use the same DNS server that is used by the operating system where GFI MailEssentials is installed e Use an alternate DNS server Select this option to specify a custom DNS server IP address Click Test DNS Server to test connection with the specified DNS server If test is unsuccessful specify another DNS server Click Next to continue 50 e Installation for Microsoft Exchange 2007 amp 2010 Getting Started Guide GFI MailEssentials Post Installation Wizard lel x Internet Connectivity Settings Specify how this server connects to the Internet GFI MailEssentials requires internet access for spam filtering and to download spam filter updates This machine connects directly to the internet This machine connects to the internet through a proxy server Configure proxy server Screenshot 44 Internet connectivity settings 3 In the Internet Connectivity Settings dialog specify how the server where GFI MailEssentials is installed connects to the internet If the server connects through a proxy server click Configure proxy server and specify proxy settings Click Next to continue GFI MailEssentials Post Installation Wizard Inbound email domains Specify the email domains GFI M
34. S 2008 2011 3 From the list of installed software select GFI MailEssentials for Exchange SMTP and click Remove or Uninstall 4 Follow on screen instructions to uninstall GFI MailEssentials Getting Started Guide Uninstalling GFI MailEssentials e 103 9 Troubleshooting and support Introduction This chapter explains how to resolve any GFI MailEssentials issues encountered during installation The main sources of information available to solve these issues are e This manual most issues can be solved through the information in this manual section e GFI Knowledge Base articles e Web forums e Contacting GFI Technical Support 9 2 Troubleshooting Installation issues License key for the previous version is not accepted and the upgraded version is in evaluation mode During installation some errors may be received causing the product not to be installed properly or not to be installed at all e Event Type Warning e EventID 0 e Event Source GFI MailEssentials Legacy Attendant Service e Event Description The GFI MailEssentials Legacy Attendant Service sub process 8 auantiphish2 has terminated with error code 1 The sub process will not be available until the service is restarted Please contact GFI Support if the problem persists During installation some errors may be received causing the product not to be installed properly or not to be installed at all e Err
35. S server Select this option to specify a custom DNS server IP address Click Test DNS Server to test connection with the specified DNS server If test is unsuccessful specify another DNS server Click Next to continue 60 e Installation for Microsoft Exchange 2007 amp 2010 Getting Started Guide GFI MailEssentials Post Installation Wizard lel x Internet Connectivity Settings Specify how this server connects to the Internet GFI MailEssentials requires internet access for spam filtering and to download spam filter updates This machine connects directly to the internet This machine connects to the internet through a proxy server Configure proxy server Screenshot 53 Internet connectivity settings 3 In the Internet Connectivity Settings dialog specify how the server where GFI MailEssentials is installed connects to the internet If the server connects through a proxy server click Configure proxy server and specify proxy settings Click Next to continue GFI MailEssentials Post Installation Wizard Inbound email domains Specify the email domains GFI MailEssentials should treat as inbound Add all inbound email domains in which you recieve email E g If your email address is user afi com add gfi com masterdomain com Add Remove lt Back Screenshot 54 Inbound email domains Getting Started Guide Installation for Microsoft Exchange 2007 amp 2010 61 4 I
36. Screenshot 35 DNS Server settings 2 In the DNS Server dialog select e Use the same DNS server used by this server Select this option to use the same DNS server that is used by the operating system where GFI MailEssentials is installed e Use an alternate DNS server Select this option to specify a custom DNS server IP address Click Test DNS Server to test connection with the specified DNS server lf test is unsuccessful specify another DNS server Click Next to continue Getting Started Guide Installation for Microsoft Exchange 2003 e 39 GFI MailEssentials Post Installation Wizard lel x Internet Connectivity Settings Specify how this server connects to the Internet GFI MailEssentials requires internet access for spam filtering and to download spam filter updates This machine connects directly to the internet This machine connects to the internet through a proxy server Configure proxy server Screenshot 36 Internet connectivity settings 3 In the Internet Connectivity Settings dialog specify how the server where GFI MailEssentials is installed connects to the internet If the server connects through a proxy server click Configure proxy server and specify proxy settings Click Next to continue GFI MailEssentials Post Installation Wizard Inbound email domains Specify the email domains GFI MailEssentials should treat as inbound Add all inbound email domains in which you re
37. Select the Allow the Incoming Mail to be Relayed to this Domain checkbox 70 e Installation for Lotus Domino Getting Started Guide domain com Properties 24x General Advanced pan domain com Select the appropriate settings for your remote domain IV Allow incoming mail to be relayed to this domain I Send HELO instead of EHLO Outbound Security Route domain C Use DNS to route to this domain Forward all mail to smart host o 932 168 0 2 Y Cancel Apply Help Screenshot 59 Configure the domain 3 Select the Forward all mail to smart host option and specify the IP address of the server managing emails in this domain IP address must be enclosed in square brackets e g 123 123 123 123 so to exclude them from all DNS lookup attempts 4 Click OK to finalize your configuration Step 4 Secure your SMTP email relay server If unsecured your mail relay server can be exploited and used as an open relay for spam To avoid this from happening it is recommended that you specifically define which mail servers can route emails through this mail relay server i e allow only specific servers to use this email relaying setup To achieve this 1 Go to Start gt Control Panel gt Administrative Tools 2 Click on Internet Information Services IIS Manager 3 In the left pane expand the respective server node Right click on Default SMTP Virtual Server and select Properties 4 Click on
38. Yes URI DNS Blocklist Yes Yes Yes Yes Yes Yes Yes Header checking Yes Yes Yes Yes Yes Yes Yes Keyword checking Yes Yes Yes Yes Yes Yes Yes New Senders Yes Yes Yes Yes Yes No Yes Bayesian analysis Yes Yes Yes Yes Yes Yes Yes Greylist N A N A N A N A N A N A N A N A Not applicable NOTE The actions for Directory Harvesting are applicable only when Directory Harvesting is executed at full email level Configuration of anti spam filters and actions is possible via the GFI MailEssentials Configuration console For guidelines on how to configure GFI MailEssentials functions and features refer to the GFI MailEssentials Administration and Configuration manual 102 Post install actions Getting Started Guide 8 Uninstalling GFI MailEssentials 8 1 Introduction This chapter describes how to uninstall GFI MailEssentials for all supported operating systems NOTE 1 If you are planning to uninstall and reinstall GFI MailEssentials to fix problems you may be having during installation you should first read the Troubleshooting and support chapter in this manual NOTE 2 Third party components which are required by GFI MailEssentials such as Microsoft NET Framework or Microsoft XML core services will not be uninstalled 8 1 1 Uninstall GFI MailEssentials 1 Exit GFI MailEssentials 2 From the Control Panel select e Add or Remove Programs Windows Server 2003 Windows SBS 2003 Programs and Features Windows Server 2008 Windows SB
39. add the IP address of the other servers in the list For more information about perimeter SMTP servers refer to http kbase gfi com showarticle asp id KBID003296 When using hosted email security products GFI MAX MailProtection or GFI MAX MailEdge enable checkbox Emails are also filtered by For more information refer to http kbase gfi com showarticle asp id KBID003180 Click Next to continue Getting Started Guide Installation for Microsoft Exchange 2003 e 41 GFI MailEssentials Post Installation Wizard Default anti spam action Select the default action when an email is detected as spam Select default anti spam action Quarantine z Emails will be stored in Quarantine Store for 21 days default Quarantine settings can be configured from the GFI MailEssentials Configuration periodic report can be sent to users to check the list of quarantined emails V Send quarantine email report Screenshot 39 Selecting the default anti spam action to use 6 In the Default anti spam action dialog select the default action to be taken when emails are detected as spam Click Next to continue 7 Click Finish to finalize the installation The GFI MailEssentials installation is now complete and the anti spam system is up and running For more information about how to optimize GFI MailEssentials refer to Post install actions chapter Step 4 Add specific GFI MailEssentials services to the Exchange Virtual
40. afe email addresses A custom list of blocked email users or domains Checks if the email received is from senders that are listed on a public DNS list of known spammers Stops emails which contain links to domains listed on public Spam URI Blocklists A module which detects spam by analyzing the email header Spam messages are identified based on blocked keywords in the email subject or body Emails that have been received from senders to whom emails have never been sent before An anti spam technique where a statistical probability index based on training from users is used to identify spam Identifies emails received from Non RFC compliant mail servers such as the ones normally used by spammers Yes No Yes No Yes Yes Yes Yes Yes Yes Yes No No No The default action taken when an email is classified as spam is configured during the Post install wizard Different actions can then be defined for each anti spam filter Getting Started Guide Post install actions e 101 Anti spam filter actions Filters Move to subfolder in user mailbox Move to junk mail Move to specific Forward to email Quarantine address SpamRazer Yes Yes Yes Yes Yes Yes Yes cae g Yes Yes Yes Yes Yes Yes Yes Phishing Yes Yes Yes Yes Yes Yes Yes sidered Yes Yes Yes Yes Yes Yes Yes Whitelist N A N A N A N A N A N A N A Email Blocklist Yes Yes Yes Yes Yes Yes Yes IP DNS Blocklist Yes Yes Yes Yes Yes Yes
41. age GFI MailEssentials Post Installation Wizard OE x DNS Server Specify the DNS server to be used for domain lookups The DNS server is used for domain look ups and by spam filters which query DNS blocklists Use the same DNS server used by this server Use an alternate DNS Server 192 168 1 4 Test DNS Server lt Back Cancel Screenshot 28 DNS Server settings 2 In the DNS Server dialog select e Use the same DNS server used by this server Select this option to use the same DNS server that is used by the operating system where GFI MailEssentials is installed e Use an alternate DNS server Select this option to specify a custom DNS server IP address Click Test DNS Server to test connection with the specified DNS server If test is unsuccessful specify another DNS server Click Next to continue Getting Started Guide Installation for Microsoft Exchange 2003 e 33 GFI MailEssentials Post Installation Wizard lel x Internet Connectivity Settings Specify how this server connects to the Internet GFI MailEssentials requires internet access for spam filtering and to download spam filter updates This machine connects directly to the internet This machine connects to the internet through a proxy server Configure proxy server Screenshot 29 Internet connectivity settings 3 In the Internet Connectivity Settings dialog specify how the server where GFI MailEssentials is
42. ager File Action View Window Help es AmE alH g Internet Information Services El ye WINSERVF local computer jsmith mydomain com Local Default gt Default SMTP Virtual Server test mydomain com Remote Domains Current Sessions Screenshot 71 Internet Information Services IIS Manager 3 In the left pane expand the respective server node Right click on Default SMTP Virtual Server and select Properties 4 Select the IP address currently assigned to your SMTP server and click OK 5 Expand the Default SMTP Virtual Server node 6 Right click Domains and select New gt Domain 7 Select the Remote option and click Next 8 Specify domain name e g test gfi com and click Finish Step 3 Enable email relaying to your remote SMTP server 1 Right click on the new domain e g test gfiiccom and select Properties 2 Select the Allow the Incoming Mail to be Relayed to this Domain checkbox 86 e Installation for SMTP Servers Getting Started Guide domain com Properties 24x General Advanced pan domain com Select the appropriate settings for your remote domain IV Allow incoming mail to be relayed to this domain I Send HELO instead of EHLO Outbound Security Route domain C Use DNS to route to this domain Forward all mail to smart host o 932 168 0 2 Y Cancel Apply Help Screenshot 72 Configure the domain 3 Select the Forward a
43. ailEssentials should treat as inbound Add all inbound email domains in which you recieve email E g If your email address is user afi com add gfi com masterdomain com Add Remove lt Back Screenshot 45 Inbound email domains Getting Started Guide Installation for Microsoft Exchange 2007 amp 2010 51 4 In the Inbound email domains dialog specify all the domains to filter for spam Any local domains that are not specified in this list will not be filtered for spam Click Next to continue NOTE When adding domains select Obtain domain s MX records and include in perimeter servers list to retrieve the domain s MX records and automatically add them to the perimeter SMTP servers list configured in the next step GFI MailEssentials Post Installation Wizard SMTP Servers SMTP servers configuration Specify which SMTP servers receive emails directly from the internet This is the only SMTP server which receives emails directly from the internet The following SMTP servers receive emails directly from the internet and forward them to this server 172 13 45 23 194 124 58 32 Add Delete V Emails are also filtered by GFI MAX MailProtection or GFI MAX MailEdge For more information refer to http kbase gli com showarticle asp id KBID003180 Screenshot 46 SMTP Server settings 5 In the SMTP Servers dialog specify how the server receives external emails If e
44. all the existing version of GFI MailEssentials No Screenshot 75 Confirm the upgrade 2 Click Yes to start the upgrade process and follow on screen instructions For assistance refer to New installations section below 6 4 3 New installations Important notes 1 During installation GFI MailEssentials restarts IIS services This is required to allow GFI MailEssentials components to be registered and started 2 Before starting installation close any running Windows applications Installation procedure 1 Logon to your Microsoft Exchange Server machine using administrator credentials 2 Double click mailessentials2010 exe 32 bit install or mailessentials2010_x64 exe 64 bit install accordingly 3 Select install language and click Next 4 Select whether to check for newer versions builds of GFI MailEssentials and click Next 90 e Installation for SMTP Servers Getting Started Guide 5 Read licensing agreement To proceed with the installation select I accept the license agreement and click Next 6 Click Next to install in default location or click Browse to change path 7 Specify user details and enter license key Click Next to continue i GFI MailEssentials Setup Oe xi Mail Server Mail Server Information Specify the IP address of the machine running the mail server and specify your local domain i e mycompany com IP Address fi 92 168 0 34 on port 25 Local domain Dominotest local
45. and 2 From the command prompt type in nslookup 3 Type in set type mx 4 Specify your mail domain name The MX record should return the IP addresses of the mail relay servers WINNT System32 cmd exe nslookup Microsoft Windows 2000 Version 5 66 2195 lt C gt Copyright 1985 2666 Microsoft Corp C Documents and Settings administrator GHOST gt ns lookup Default Server server qa Address 192 168 0 1 gt set type mx gt qatest com Server server qa Address 192 168 0 1 qatest com MK preference 10 mail exchanger qatest com qatest com internet address 192 168 0 153 gt Screenshot 61 Checking the MX record of your domain Step 7 Test your new mail relay server Before proceeding to install GFI MailEssentials verify that your new mail relay server is working correctly by doing as follows Test IIS SMTP inbound connection via test email 1 Send an email from an external account e g Gmail to an internal email address user 2 Ensure that intended recipient received the test email in the respective email client Getting Started Guide Installation for Lotus Domino e 73 Test IIS SMTP outbound connection via test email 1 Send an email from an internal email account to an external account e g Gmail 2 Ensure that the intended recipient external user received the test email NOTE You can also use Telnet to manually send the test email and obtained more troubleshooti
46. ariety of network services including LDAP like directory services See Active Directory An email reply that is sent automatically to incoming emails An anti spam technique where a statistical probability index based on training from users is used to identify spam A component of Microsoft Windows operating systems that facilitates transfer of files between systems using idle network bandwidth See Background Intelligent Transfer Service A list of email addresses or domains from whom email is not to be received by users A network of infected computers that run autonomously and are controlled by a hacker cracker See Classless Inter Domain Routing An IP addressing notation that defines a range of IP addresses A section of a network that is not part of the internal network and is not directly part of the Internet Its purpose typically is to act as a gateway between internal networks and the internet A statement intended to identify or limit the range of rights and obligations for email recipients A database used by TCP IP networks that enables the translation of hostnames into IP numbers and to provide other domain related information See Demilitarized Zone See Domain Name System See Mail Exchange Rules which enable the replication of emails between email addresses Spam emails that are not detected as spam Legitimate emails that are incorrectly identified as spam An anti spam filter that blocks emails sent fro
47. atively affect anti spam filtering and email flow e Check whether Microsoft XML engine is installed This is automatically installed if not found on UK US English OS For other OS languages this has to be manually downloaded and installed Microsoft XML engine can be downloaded from http www microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F2B428displaylang en e For new installations setup will launch the Post Installation Wizard 10 Installation for Microsoft Exchange 2003 Getting Started Guide Post Installation Wizard 1 Click Next in the welcome page GFI MailEssentials Post Installation Wizard Mel x DNS Server Specify the DNS server to be used for domain lookups The DNS server is used for domain look ups and by spam filters which query DNS blocklists Use the same DNS server used by this server Use an alternate DNS Server 192 168 1 4 Test DNS Server lt Back Cancel Screenshot 4 DNS Server settings 2 In the DNS Server dialog select e Use the same DNS server used by this server Select this option to use the same DNS server that is used by the operating system where GFI MailEssentials is installed e Use an alternate DNS server Select this option to specify a custom DNS server IP address Click Test DNS Server to test connection with the specified DNS server If test is unsuccessful specify another DNS server Click Next to continue Getting Start
48. ault on Windows Server 2003 or later This can be downloaded from http Avwww microsoft com Downloads details aspx familyid 6C050 FE3 C795 4B7D B037 185D0506396C amp displaylang en e Internet Information Services IIS x32 or x64 SMTP service and WWW service e Microsoft XML core services For UK US English OS this is installed automatically by GFI MailEssentials For other languages this can be downloaded from http Avww microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F2B42 amp displaylang en e Microsoft Message Queuing Services Getting Started Guide Installation for SMTP Servers e 83 6 2 2 Hardware Processor e Minimum Intel Pentium or compatible 1 GHz 32 bit processor e Recommended x64 architecture based server with Intel 64 architecture or AMD64 platform Memory e Minimum 1GB e Recommended 2GB RAM Physical Storage e Minimum 500MB for installation 2GB for execution e Recommended 500MB for installation 4GB for execution 6 3 Important settings 6 3 1 Antivirus and backup software Antivirus and backup software may cause GFI MailEssentials to malfunction This occurs when such software denies access to certain files required by GFI MailEssentials Disable third party antivirus and backup software from scanning the following folders x86 installations 32 bit x64 installations 64 bit lt Program Files x86 GFI MailEssentials gt lt Program Files x86
49. automatically create the user or manually specify the credentials and click Set impersonation rights to assign the required rights to the specified user This user must be dedicated to this feature only and the credentials must not be changed otherwise the Move to Exchange folder feature will not work For more information refer to http kbase gfi com showarticle asp id KBID001 788 Getting Started Guide Installation for Microsoft Exchange 2007 amp 2010 e 53 GFI MailEssentials Post Installation Wizard Installation Summary The following GFI MailEssentials components will be installed The wizard detected the following Exchange Server 2007 roles Mailbox Hub Transport The following GFI MailEssentials components will be installed Submitted Agent Routing Transport Agent SMTP Transport Agent SMTP2 Transport Agent Click Next to install Screenshot 48 Server roles detected and list of components to install 7 A list of the Microsoft Exchange Server 2007 2010 server roles detected and GFI MailEssentials components required is displayed Click Next to install the required GFI MailEssentials components 8 Click Finish to finalize the installation The GFI MailEssentials installation is now complete and the anti spam system is up and running For more information about how to optimize GFI MailEssentials refer to Post install actions chapter 4 5 Installing on an email gateway or relay perimeter server
50. cieve email E g If your email address is user afi com add gfi com masterdomain com Add Remove lt Back Screenshot 37 Inbound email domains 40 e Installation for Microsoft Exchange 2003 Getting Started Guide 4 In the Inbound email domains dialog specify all the domains to filter for spam Any local domains that are not specified in this list will not be filtered for spam Click Next to continue NOTE When adding domains select Obtain domain s MX records and include in perimeter servers list to retrieve the domain s MX records and automatically add them to the perimeter SMTP servers list configured in the next step GFI MailEssentials Post Installation Wizard SMTP Servers SMTP servers configuration Specify which SMTP servers receive emails directly from the internet This is the only SMTP server which receives emails directly from the internet The following SMTP servers receive emails directly from the internet and forward them to this server 172 13 45 23 194 124 58 32 Add Delete V Emails are also filtered by GFI MAX MailProtection or GFI MAX MailEdge For more information refer to http kbase gli com showarticle asp id KBID003180 Screenshot 38 SMTP Server settings 5 In the SMTP Servers dialog specify how the server receives external emails If emails are routed through other servers before they are forwarded to the GFI MailEssentials server
51. cify user details and enter license key Click Next to continue 8 Specify the email address where notifications e g failed anti soam 48 e Installation for Microsoft Exchange 2007 amp 2010 Getting Started Guide filters soam digests are sent ii GFI MailEssentials for Exchange SMTP Setup Active Directory Access to Active Directory users a Does this server have access to all the email users in Active Directory cw ves all email users are available on Active Directory rules will be based on Active Directory users No I do not have Active Directory or my network does not have access to Active Directory DMZ rules will be based on SMTP email addresses GFI MailEssentials lt Back L ne gt Cancel Screenshot 41 Selecting SMTP mode or Active Directory mode 9 Specify whether GFI MailEssentials will get the list of email users required for user based configuration rules e g disclaimers from Active Directory or SMTP server Click Next to continue i GFI MailEssentials for Exchange SMTP Setup ile x Microsoft Message Queuing Service GFI MailEssentials makes use of the Microsoft Message Queue Service MSMQ The Message Queueing Services is a scalable system service developed by Microsoft to enable high volume event processing This service is included with every Windows version as from Windows 2000 although not always installed by default The GFI MailEssentials installation can install Microsoft
52. com IP Address fis2 1 68 0 34 on port 25 Local domain Dominotest local GFI MailEssentials lt Back Cancel Screenshot 63 Specify mail server details 8 Specify IP address and listening port of Lotus Domino Server and the external domain name used Click Next to continue Getting Started Guide Installation for Lotus Domino e 75 9 Specify the email address where notifications e g failed anti spam filters soam digests are sent i GFI MailEssentials for Exchange SMTP Setup Active Directory i Access to Active Directory users Does this server have access to all the email users in Active Directory Yes all email users are available on Active Directory rules will be based on Active Directory users sasenvsessnsenscsssessessssenscnsssssensessensescensecssessnsenssensnssessensensennsnssnsseneessecsessesssnssssnsssssssessensecsensenscnsssssnasensessensssseaasnsenseenseeee No do not have Active Directory or my network does not have access to Active Directory DMZ rules will be based on SMTP email addresses svasusnssenssnssncsnsesensssnsnsaseasesenssnssnsanesucssnsnnsunsunssesunsensensennssnsnsusnsunuanusnsensansenusnasenssassnsunseansnuenessnsensensensunesnnensenseneenssnnsneeed GFI MailEssentials lt Back Cancel Screenshot 64 Selecting SMTP mode 10 Select No I do not have Active Directory option to use SMTP server to get the list of email users Click Next to continue i GF
53. dge enable checkbox Emails are also filtered by For more information refer to http kbase gfi com showarticle asp id KBID003180 Click Next to continue 62 e Installation for Microsoft Exchange 2007 amp 2010 Getting Started Guide GFI MailEssentials Post Installation Wizard Default anti spam action Select the default action when an email is detected as spam Select default anti spam action Quarantine z Emails will be stored in Quarantine Store for 21 days default Quarantine settings can be configured from the GFI MailEssentials Configuration 4 periodic report can be sent to users to check the list of quarantined emails V Send quarantine email report Cancel Screenshot 56 Selecting the default anti spam action to use 6 In the Default anti spam action dialog select the default action to be taken when emails are detected as spam Click Next to continue NOTE When installing on Microsoft Exchange 2010 and the default action selected is Move to mailbox sub folder a user with impersonation rights must be created Select whether to let GFI MailEssentials automatically create the user or manually specify the credentials and click Set impersonation rights to assign the required rights to the specified user This user must be dedicated to this feature only and the credentials must not be changed otherwise the Move to Exchange folder feature will not work For more information refer to http kbas
54. e agreement and click Next 6 Click Next to install in default location or click Browse to change path 7 Specify user details and enter license key Click Next to continue 8 Specify the email address where notifications e g failed anti soam filters soam digests are to be sent ie GFI MailEssentials for Exchange SMTP Setup Oe x Active Directory Access to Active Directory users Does this server have access to all the email users in Active Directory Yes all email users are available on Active Directory rules will be based on Active Directory users No I do not have Active Directory or my network does not have access to Active Directory DMZ rules will be based on SMTP email addresses GFI MailEssentials lt Back next gt Cancel Screenshot 18 Selecting SMTP mode or Active Directory mode 9 Specify whether GFI MailEssentials will get the list of email users required for user based configuration rules e g disclaimers from Active Directory or SMTP server Click Next to continue Getting Started Guide Installation for Microsoft Exchange 2003 e 23 ie GFI MailEssentials for Exchange SMTP Setup fel E3 GFI MailEssentials makes use of the Microsoft Message Queue Service MSMQ The Message Queueing Services is a scalable system service developed by Microsoft to enable high volume event processing This service is included with every Windows version as from Windows 2000 alth
55. e gfi com showarticle asp id KBID001 788 Getting Started Guide Installation for Microsoft Exchange 2007 amp 2010 e 63 GFI MailEssentials Post Installation Wizard Installation Summary The following GFI MailEssentials components will be installed The wizard detected the following Exchange Server 2007 roles Mailbox Hub Transport The following GFI MailEssentials components will be installed Submitted Agent Routing Transport Agent SMTP Transport Agent SMTP2 Transport Agent Click Next to install Screenshot 57 Server roles detected and list of components to install 7 A list of the Microsoft Exchange Server 2007 2010 server roles detected and GFI MailEssentials components required is displayed Click Next to install the required GFI MailEssentials components 8 Click Finish to finalize the installation The GFI MailEssentials installation is now complete and the anti spam system is up and running For more information about how to optimize GFI MailEssentials refer to Post install actions chapter 4 6 Installing on Microsoft Exchange Server 2007 clusters On Microsoft Exchange 2007 servers only servers with the Mailbox Role can be part of a cluster Any other roles are required to be installed on separate servers To install GFI MailEssentials as part of a Microsoft Exchange 2007 cluster install GFI MailEssentials on a server running the Hub Transport or the Edge Transport Role Alternatively you
56. e is included with every Windows version as from Windows 2000 although not always installed by default The GFI MailEssentials installation can install Microsoft MSMG for you To complete this process you will require the Windows CD DVD Microsoft MSMQ is a required component for GFI MailEssentials The installation will not continue if Microsoft MSMGQ is not installed Do you want to install the Microsoft MSMQ service now Yes No GFI MailEssentials Screenshot 27 Installing Microsoft Message Queuing Service 10 If Microsoft Message Queuing Services MSMQ is not installed then the dialog in the above screenshot will open Select Yes to install MSMQ Click Next to continue 11 Click Finish to finalize your installation On completion setup will e Ask you to restart the SMTP service Failing to restart the SMTP service will negatively affect anti spam filtering and email flow e Check whether Microsoft XML engine is installed This is automatically installed if not found on UK US English OS For other OS languages this has to be manually downloaded and installed Microsoft XML engine can be downloaded from http Awww microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F2B42 amp displaylang en e For new installations setup will launch the Post Installation Wizard 32 e Installation for Microsoft Exchange 2003 Getting Started Guide Post Installation Wizard 1 Click Next in the welcome p
57. e product running on default settings Manual structure The sections in this manual are self contained and are designed to guide you through the sequence of steps needed to 1 Identify product prerequisites applicable to your network 2 Prepare your environment for product installation 3 Install upgrade GFI MailEssentials 4 Configure test and run the product Follow the instructions for your type of network using the appropriate section in this manual Where applicable each section contains information related to installing GFI MailEssentials on the same server as your mail server on a mail gateway or relay perimeter server or in a clustered environment Administration and Configuration manual Detailed administration and configuration guidelines are provided in a separate manual called GFI MailEssentials Administration and Configuration manual which is installed with the product or separately downloadable from the GFI web site http www gfi com mes manual This Administration and Configuration manual complements this Getting Started Guide by providing more detailed information on how to use and customize the features provided in GFI MailEssentials e g tweaking of anti spam filters Getting Started Guide Introduction e 1 1 2 Terms used in this manual The following terms are used in this manual e NOTE o This provides additional information and references essential to GFI MailEssentials operation
58. e respective server node Right click on Default SMTP Virtual Server and select Properties 4 Select the IP address currently assigned to your SMTP server and click OK 5 Expand the Default SMTP Virtual Server node 6 Right click Domains and select New gt Domain 7 Select the Remote option and click Next 8 Specify domain name e g test gfi com and click Finish Getting Started Guide Installation for Microsoft Exchange 2003 e 17 Step 3 Enable email relaying to your Microsoft Exchange server 1 Right click on the new domain e g test gfi com and select Properties 2 Select the Allow the Incoming Mail to be Relayed to this Domain checkbox domain com Properties 24x General Advanced Z domain com Select the appropriate settings for your remote domain IV Allow incoming mail to be relayed to this domain I Send HELO instead of EHLO Outbound Security Route domain Use DNS to route to this domain Forward all mail to smart host o 932 168 0 2 Screenshot 11 Configure the domain 3 Select the Forward all mail to smart host option and specify the IP address of the server managing emails in this domain IP address must be enclosed in square brackets e g 123 123 123 123 so to exclude them from all DNS lookup attempts 4 Click OK to finalize your configuration Step 4 Secure your SMTP email relay server If unsecured your mail relay server can be exploited and used
59. e time retain all your existing configuration settings 56 e Installation for Microsoft Exchange 2007 amp 2010 Getting Started Guide Important notes e Upgrades cannot be undone i e you cannot downgrade to an earlier version once you have installed the latest version e On upgrading an existing installation licensing reverts to trial version and a new fully purchased license key for the GFI MailEssentials 2010 is required For more information on new license keys refer to http customers gfi com e You cannot change the installation path during GFI MailEssentials upgrades e When upgrading from GFI MailEssentials 9 the current Bayesian weights file will be upgraded to the new format used in GFI MailEssentials 10 or later The new format is more compact and uses less memory NO DATA WILL BE LOST 4 5 3 Upgrade procedure 1 Launch GFI MailEssentials installation on the server where your earlier version of GFI MailEssentials is installed GFI MailEssentials must uninstall the existing version before installing GFI 2 GFI MailEssentials version 15 0 321 6753 is already installed You MailEssentials version 15 0 328 3696 IMPORTANT The new build requires the Microsoft NET Framework 2 0 and Microsoft MSMQ installed on this machine Do you want to uninstall the existing version of GFI MailEssentials Screenshot 49 Confirm the upgrade 2 Click Yes to start the upgrade process and follow on screen instructions For
60. ects to the internet If the server connects through a proxy server click Configure proxy server and specify proxy settings Click Next to continue 78 e Installation for Lotus Domino Getting Started Guide GFI MailEssentials Post Installation Wizard Iof x Inbound email domains Specify the email domains GFI MailEssentials should treat as inbound Add all inbound email domains in which you recieve email E g If your email address is user qgfi com add gfi com masterdomain com Add Remove Screenshot 68 Inbound email domains 4 In the Inbound email domains dialog specify all the domains to filter for spam Any local domains that are not specified in this list will not be filtered for spam Click Next to continue NOTE When adding domains select Obtain domain s MX records and include in perimeter servers list to retrieve the domain s MX records and automatically add them to the perimeter SMTP servers list configured in the next step Getting Started Guide Installation for Lotus Domino e 79 GFI MailEssentials Post Installation Wizard Iof x SMTP Servers SMTP servers configuration Specify which SMTP servers receive emails directly from the internet This is the only SMTP server which receives emails directly from the internet The following SMTP servers receive emails directly from the internet and forward them to this server 172 13 45 23 194 124 58 32 Add De
61. ed Guide Installation for Microsoft Exchange 2003 e 11 GFI MailEssentials Post Installation Wizard lel x Internet Connectivity Settings Specify how this server connects to the Internet GFI MailEssentials requires internet access for spam filtering and to download spam filter updates This machine connects directly to the internet This machine connects to the internet through a proxy server Configure proxy server Screenshot 5 Internet connectivity settings 3 In the Internet Connectivity Settings dialog specify how the server where GFI MailEssentials is installed connects to the internet If the server connects through a proxy server click Configure proxy server and specify proxy settings Click Next to continue GFI MailEssentials Post Installation Wizard Inbound email domains Specify the email domains GFI MailEssentials should treat as inbound Add all inbound email domains in which you recieve email E g If your email address is user afi com add gfi com masterdomain com Add Remove lt Back Screenshot 6 Inbound email domains 12 e Installation for Microsoft Exchange 2003 Getting Started Guide 4 In the Inbound email domains dialog specify all the domains to filter for spam Any local domains that are not specified in this list will not be filtered for spam Click Next to continue NOTE When adding domains select Obtain domain s MX records and include
62. elp Screenshot 85 Windows Components Wizard 3 If the Message Queuing checkbox is selected it means the service is already installed and you can thus skip the rest of this section If it is not then you need to follow the rest of the steps below to install the message queuing service In the Application Server dialog click on Message Queuing and then click Details Getting Started Guide Appendix Installing MSMQ e 109 Application Server xi To add or remove a component click the check box 4 shaded box means that only part of the component will be installed To see what s included in a component click Details Subcomponents of Application Server a e Application Server Console 0 0 MB B Enable network COM access 0 0 MB C g Enable network DTC access 0 0 MB B Internet Information Services IIS 7 6 MB 7 0 MB ge Queuing ig Description Provides guaranteed message delivery efficient routing security and transactional support Total disk space required 52 7 MB Details 15741 9 MB Space available on disk Cancel Screenshot 86 Message queuing component 4 In the Message Queuing dialog select the Core functionality checkbox and then click OK Message Queuing xi To add or remove a component click the check box A shaded box means that only part of the component will be installed To see what s included in a componert click Details Subcomponents of Message Queuing a Active
63. enshot 2 Selecting SMTP mode or Active Directory mode 9 Specify whether GFI MailEssentials will get the list of email users required for user based configuration rules e g disclaimers from Active Directory or SMTP server Click Next to continue Getting Started Guide Installation for Microsoft Exchange 2003 e 9 ie GFI MailEssentials for Exchange SMTP Setup fel E3 GFI MailEssentials makes use of the Microsoft Message Queue Service MSMQ The Message Queueing Services is a scalable system service developed by Microsoft to enable high volume event processing This service is included with every Windows version as from Windows 2000 although not always installed by default The GFI MailEssentials installation can install Microsoft MSMG for you To complete this process you will require the Windows CD DVD Microsoft MSMQ is a required component for GFI MailEssentials The installation will not continue if Microsoft MSMGQ is not installed Do you want to install the Microsoft MSMQ service now Yes No GFI MailEssentials Screenshot 3 Installing Microsoft Message Queuing Service 10 If Microsoft Message Queuing Services MSMQ is not installed then the dialog in the above screenshot will open Select Yes to install MSMQ Click Next to continue 11 Click Finish to finalize your installation On completion setup will e Ask you to restart the SMTP service IMPORTANT Failing to restart the SMTP service will neg
64. entation for Windows Server operating systems A Microsoft technology that gives developers a homogeneous and consistent way of developing software that can access almost any data store See Multipurpose Internet Mail Extensions See Microsoft Message Queuing Services A standard that extends the format of e mail to support text other than ASCII non text attachments message bodies with multiple parts and header information in non ASCII character sets See Non Delivery Report An automated electronic mail message sent to the sender on an email delivery problem The computer server in a LAN that is directly connected to an external network In GFI MailEssentials perimeter gateway refers to the email servers within the company that first receive email from external domains The process of acquiring sensitive personal information with the aim of defrauding individuals typically through the use of fake communications A system that collects email messages from POP3 mailboxes and routes them to mail server See Post Office Protocol ver 3 A protocol used by local email clients to retrieve emails from mailboxes over a TCP IP connection A common folder that allows Microsoft Exchange user to share information A database where all inbound emails detected as spam are retained for a number of days See Realtime Blocklist Online databases of spam IP addresses Incoming emails are compared to these lists to determine if they are
65. er in a Windows Server cluster you must first create a cluster resource group This is the unit of failover in a Windows Server cluster When Exchange Server is running in a Windows Server cluster the cluster resource group that contains the Exchange cluster resources is referred to as an Exchange Virtual Server To create a resource group for an Exchange Virtual Server in a Windows Server cluster do as follows 1 Start Cluster Administrator On prompt specify cluster details e g name or click the browse button to select cluster in which you want to create an Exchange Virtual Server 2 In the console tree right click Groups and select New gt Group 3 In the New Group Wizard that starts automatically specify a name for the new cluster group and click Next 4 Click Finish to finalize your configuration This new group object is displayed under Groups in Cluster Administrator 30 e Installation for Microsoft Exchange 2003 Getting Started Guide Installation procedure Step 1 Install GFI MailEssentials in the shared hard drive on active server 1 Logon to the active node of your Microsoft Exchange cluster using administrator credentials 2 Double click mailessentials2010 exe 32 bit install or mailessentials2010_x64 exe 64 bit install accordingly 3 Select install language and click Next 4 Select whether to check for newer versions builds of GFI MailEssentials and click Next 5 Read licensing agreement T
66. gured as an email gateway server also known as Smart host or Mail relay server for all your email All inbound and outbound email must pass through this server for scanning before being relayed to the mail server for distribution 5 2 System requirements 5 2 1 Software Supported operating systems e Microsoft Windows Server 2008 x86 or x64 e Microsoft Windows Server 2003 Standard Enterprise x86 or x64 Mail Servers e Lotus Domino 6 or later Other components e Microsoft NET Framework 2 0 e Microsoft Data Access Components MDAC 2 8 included by default on Windows Server 2003 or later This can be downloaded from http Avww microsoft com Downloads details aspx familyid 6C050 FE3 C795 4B7D B037 185D0506396C amp displaylang en e Internet Information Services IIS x32 or x64 SMTP service and WWW service e Microsoft XML core services For UK US English OS this is installed automatically by GFI MailEssentials For other languages this can be downloaded from http Awww microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F2B42 amp displaylang en e Microsoft Message Queuing Services Getting Started Guide Installation for Lotus Domino e 67 5 2 2 Hardware Processor e Minimum Intel Pentium or compatible 1 GHz 32 bit processor e Recommended x64 architecture based server with Intel 64 architecture or AMD64 platform Memory e Minimum 1GB e Recommended 2GB RAM Physical St
67. ific domain to relay emails through this server NOTE The Domain option adds a processing overhead that can degrade SMTP service performance This is due to the reverse DNS lookup processes triggered on all IP addresses within that domain that try to route emails through this relay server Getting Started Guide Installation for Microsoft Exchange 2003 e 19 Step 5 Enable your Microsoft Exchange Server to route emails via mail relay server GFl MailEssentials ge Exchange System Manager Global Settings Recipients Servers There are no items to show in this view Screenshot 13 Forwarding email to GFI MailEssentials machine 1 Launch Exchange System Manager 2 Right click Connectors node and select New gt SMTP Connector GFI MailEssentials Properties TESTMCH P1 Default SMTP Virtual Server Screenshot 14 Specifying IP of GFI MailEssentials machine 3 Select the Forward all mail through this connector to the following smart host option and specify the IP of your mail relay server within square brackets i e the IP of the machine on which GFI 20 Installation for Microsoft Exchange 2003 Getting Started Guide MailEssentials is installed e g 123 123 1 123 Add Bridgehead TESTMCH P1 Screenshot 15 Adding a bridgehead 4 Click Add and select the virtual SMTP Server i e the email relay server on which GFI MailEssentials is running GFI MailEssentials Pro
68. ilEssentials 2010 is required For more information on new license keys refer to http customers gfi com e You cannot change the installation path during GFI MailEssentials upgrades e When upgrading from GFI MailEssentials 9 the current Bayesian weights file will be upgraded to the new format used in GFI MailEssentials 10 or later The new format is more compact and uses less memory No data will be lost Upgrade procedure 1 Launch GFI MailEssentials installation on the server where your earlier version of GFI MailEssentials is installed GFI MailEssentials Ah GFI MailEssentials version 15 0 321 6753 is already installed You must uninstall the existing version before installing GFI MailEssentials version 15 0 328 3696 IMPORTANT The new build requires the Microsoft NET Framework 2 0 and Microsoft MSMQ installed on this machine Do you want to uninstall the existing version of GFI MailEssentials No Screenshot 1 Confirm the upgrade 2 Click Yes to start the upgrade process and follow on screen instructions For assistance refer to New installations section below 3 4 2 New installations Pre install actions No pre install actions or configurations are required Important notes 1 At the end of the installation process GFI MailEssentials will restart Microsoft Exchange Server services This is required to allow GFI MailEssentials components to be registered and started Failing to restart the SMTP
69. ilEssentials for Exchange SMTP Setup Active Directory Access to Active Directory users o Does this server have access to all the email users in Active Directory Yes all email users are available on Active Directory rules will be based on Active Directory users No I do not have Active Directory or my network does not have access to Active Directory DMZ rules will be based on SMTP email addresses GFI MailEssentials lt Back next gt Cancel Screenshot 33 Selecting SMTP mode or Active Directory mode 9 Specify whether GFI MailEssentials will get the list of email users required for user based configuration rules e g disclaimers from Active Directory or SMTP server Click Next to continue Getting Started Guide Installation for Microsoft Exchange 2003 e 37 ie GFI MailEssentials for Exchange SMTP Setup fel E3 GFI MailEssentials makes use of the Microsoft Message Queue Service MSMQ The Message Queueing Services is a scalable system service developed by Microsoft to enable high volume event processing This service is included with every Windows version as from Windows 2000 although not always installed by default The GFI MailEssentials installation can install Microsoft MSMG for you To complete this process you will require the Windows CD DVD Microsoft MSMQ is a required component for GFI MailEssentials The installation will not continue if Microsoft MSMGQ is not installed Do
70. in perimeter servers list to retrieve the domain s MX records and automatically add them to the perimeter SMTP servers list configured in the next step GFI MailEssentials Post Installation Wizard SMTP Servers SMTP servers configuration Specify which SMTP servers receive emails directly from the internet This is the only SMTP server which receives emails directly from the internet The following SMTP servers receive emails directly from the internet and forward them to this server 172 13 45 23 194 124 58 32 Add Delete V Emails are also filtered by GFI MAX MailProtection or GFI MAX MailEdge For more information refer to http kbase gli com showarticle asp id KBID003180 Screenshot 7 SMTP Server settings 5 In the SMTP Servers dialog specify how the server receives external emails If emails are routed through other servers before they are forwarded to the GFI MailEssentials server add the IP address of the other servers in the list For more information about perimeter SMTP servers refer to http kbase gfi com showarticle asp id KBID003296 When using hosted email security products GFI MAX MailProtection or GFI MAX MailEdge enable checkbox Emails are also filtered by For more information refer to http kbase gfi com showarticle asp id KBID003180 Click Next to continue Getting Started Guide Installation for Microsoft Exchange 2003 e 13 GFI MailEssentials Post Instal
71. install GFI MailEssentials on a separate machine in gateway perimeter server mode e On Microsoft Exchange 2007 server clusters without the Mailbox role the option to move SPAM to subfolders of the users mailbox is disabled e High availability for the Hub Transport Edge Transport Client Access and Unified Messaging server roles is achieved through a combination of server redundancy Network Load Balancing NLB hardware load balancing Domain Name System DNS round robin as well as proactive server service and infrastructure management In this case GFI MailEssentials will need to be installed on all servers running the Hub Transport roles or all 64 e Installation for Microsoft Exchange 2007 amp 2010 Getting Started Guide servers running the Edge Transport roles Instructions on how to install GFI MailEssentials are provided in the previous sections Getting Started Guide Installation for Microsoft Exchange 2007 amp 2010 65 5 Installation for Lotus Domino 5 1 Introduction Installing GFI MailEssentials with Lotus Domino enables you to scan all inbound emails received from outside i e the internet for spam before reaching your Lotus Domino server Outbound emails relayed to GFI MailEssentials are also processed e g adding of disclaimers and auto whitelisting before these are sent via internet To install GFI MailEssentials with Lotus Domino the server where GFI MailEssentials is installed must be confi
72. installed connects to the internet If the server connects through a proxy server click Configure proxy server and specify proxy settings Click Next to continue GFI MailEssentials Post Installation Wizard Inbound email domains Specify the email domains GFI MailEssentials should treat as inbound Add all inbound email domains in which you recieve email E g If your email address is user agfi com add gfi com masterdomain com Add Remove lt Back Screenshot 30 Inbound email domains 34 e Installation for Microsoft Exchange 2003 Getting Started Guide 4 In the Inbound email domains dialog specify all the domains to filter for spam Any local domains that are not specified in this list will not be filtered for spam Click Next to continue NOTE When adding domains select Obtain domain s MX records and include in perimeter servers list to retrieve the domain s MX records and automatically add them to the perimeter SMTP servers list configured in the next step GFI MailEssentials Post Installation Wizard SMTP Servers SMTP servers configuration Specify which SMTP servers receive emails directly from the internet This is the only SMTP server which receives emails directly from the internet The following SMTP servers receive emails directly from the internet and forward them to this server 172 13 45 23 194 124 58 32 Add Delete V Emails are also filtered b
73. ion refer to http kbase gli com showarticle asp id KBID003180 Screenshot 23 SMTP Server settings 5 In the SMTP Servers dialog specify how the server receives external emails If emails are routed through other servers before they are forwarded to the GFI MailEssentials server add the IP address of the other servers in the list For more information about perimeter SMTP servers refer to http kbase gfi com showarticle asp id KBID003296 When using hosted email security products GFI MAX MailProtection or GFI MAX MailEdge enable checkbox Emails are also filtered by For more information refer to http kbase gfi com showarticle asp id KBID003180 Click Next to continue Getting Started Guide Installation for Microsoft Exchange 2003 e 27 GFI MailEssentials Post Installation Wizard Default anti spam action Select the default action when an email is detected as spam Select default anti spam action Quarantine z Emails will be stored in Quarantine Store for 21 days default Quarantine settings can be configured from the GFI MailEssentials Configuration periodic report can be sent to users to check the list of quarantined emails V Send quarantine email report Screenshot 24 Selecting the default anti spam action to use 6 In the Default anti spam action dialog select the default action to be taken when emails are detected as spam Click Next to continue 7 Click Finish
74. l the GFI MailEssentials processes run on the same server NOTE Ensure that no other applications except GFI MailEssentials are listening on port 8021 e OPTIONAL LDAP Port 389 Used by GFI MailEssentials to get email addresses from SMTP server ONLY required if the server running GFI MailEssentials does not have access cannot get list of users from Active Directory e g in a DMZ environment or other environment which does not use Active Directory 4 4 Installing on Microsoft Exchange or SBS server 4 4 1 Upgrade from earlier version If you are currently using a previous version of GFI MailEssentials version 12 or 14 you can upgrade your current installation while at the same time retain all your existing configuration settings Important notes e Upgrades cannot be undone i e you cannot downgrade to an earlier version once you have installed the latest version e On upgrading an existing installation licensing reverts to trial version and a new fully purchased license key for the GFI MailEssentials 2010 is required For more information on new license keys refer to http customers gfi com Getting Started Guide Installation for Microsoft Exchange 2007 amp 2010 e 47 e You cannot change the installation path during GFI MailEssentials upgrades Upgrade procedure 1 Launch GFI MailEssentials installation on the server where your earlier version of GFI MailEssentials is installed GFI MailEssentials GFI MailE
75. lation Wizard Iof x Default anti spam action Select the default action when an email is detected as spam Select default anti spam action Quarantine z Emails will be stored in Quarantine Store for 21 days default Quarantine settings can be configured from the GFI MailEssentials Configuration 4 periodic report can be sent to users to check the list of quarantined emails J Send quarantine email report Screenshot 8 Selecting the default anti spam action to use 6 In the Default anti spam action dialog select the default action to be taken when emails are detected as spam Click Next to continue 7 Click Finish to finalize the installation The GFI MailEssentials installation is now complete and the anti spam system is up and running For more information about how to optimize GFI MailEssentials refer to Post install actions chapter 14 e Installation for Microsoft Exchange 2003 Getting Started Guide 3 5 Installing on an email gateway or relay perimeter server Introduction GFI MailEssentials can be installed e Onaperimeter server e g in a DMZ e As a mail relay server between the perimeter gateway SMTP server and the recipients inboxes Both setups enable you to reduce unnecessary email traffic by using your Active Directory resources at a perimeter gateway server level to drop connections for non existent email recipients in incoming email This helps counter spamming techniques such as
76. lect Yes to install MSMQ Click Next to continue 11 Click Finish to finalize your installation On completion setup will e Ask you to restart the SMTP service IMPORTANT Failing to restart the SMTP service will negatively affect anti spam filtering and email flow e Check whether Microsoft XML engine is installed This is automatically installed if not found on UK US English OS For other OS languages this has to be manually downloaded and installed Microsoft XML engine can be downloaded from http Avww microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F2B42 amp displaylang en e For new installations setup will launch the Post Installation Wizard Getting Started Guide Installation for Microsoft Exchange 2007 amp 2010 e 59 Post Installation Wizard 1 Click Next in the welcome page GFI MailEssentials Post Installation Wizard Mel x DNS Server Specify the DNS server to be used for domain lookups The DNS server is used for domain look ups and by spam filters which query DNS blocklists Use the same DNS server used by this server Use an alternate DNS Server 192 168 1 4 Test DNS Server lt Back Cancel Screenshot 52 DNS Server settings 2 In the DNS Server dialog select e Use the same DNS server used by this server Select this option to use the same DNS server that is used by the operating system where GFI MailEssentials is installed e Use an alternate DN
77. lect this option if GFI MailEssentials is installed on a server which is not part of your Active Directory domain e g GFI MailEssentials is installed in the DMZ Directory Harvesting will use LDAP to query Active Directory see Installation procedure section above step 9 In addition o Unselect the Anonymous bind option if your LDAP server requires authentication Enter the authentication details using Domain User format o Click Test button to test your LDAP configuration settings Step 3 Configure whitelists This filter allows you to specify lists of friendly email domains email addresses or IP addresses WARNING USE THIS FEATURE WITH CAUTION Entries in this list will not be scanned for spam and will bypass all anti spam filtering 1 Right click Anti spam gt Whitelist node and select Properties 2 Click on the Whitelist tab 3 Click Add and specify domains email addresses or IP addresses to whitelist 4 Click OK to finalize your configuration Getting Started Guide Post install actions e 99 Step 4 Enable Greylist The Greylist filter temporarily blocks incoming emails received from unknown senders and sends a retry message A legitimate SMTP server will try to resend an email if a retry message is received while spam servers normally ignore error messages NOTE To enable Greylist GFI MailEssentials must be installed on the perimeter SMTP server 1 Right click Anti spam gt Anti Spam Filters
78. lete V Emails are also filtered by GFI MAX MailProtection or GFI MAX MailEdge For more information refer to http kbase afi com showarticle asp id KBID003180 Screenshot 69 SMTP Server settings 5 In the SMTP Servers dialog specify how the server receives external emails If emails are routed through other servers before they are forwarded to the GFI MailEssentials server add the IP address of the other servers in the list For more information about perimeter SMTP servers refer to http kbase gfi com showarticle asp id KBID003296 When using hosted email security products GFI MAX MailProtection or GFI MAX MailEdge enable checkbox Emails are also filtered by For more information refer to http kbase gfi com showarticle asp id KBID003180 Click Next to continue 80 e Installation for Lotus Domino Getting Started Guide GFI MailEssentials Post Installation Wizard Iof x Default anti spam action Select the default action when an email is detected as spam Select default anti spam action Quarantine z Emails will be stored in Quarantine Store for 21 days default Quarantine settings can be configured from the GFI MailEssentials Configuration 4 periodic report can be sent to users to check the list of quarantined emails J Send quarantine email report Screenshot 70 Selecting the default anti spam action to use 6 In the Default anti spam action dialog select the default action to
79. ll mail to smart host option and specify the IP address of the server managing emails in this domain IP address must be enclosed in square brackets e g 123 123 123 123 so to exclude them from all DNS lookup attempts 4 Click OK to finalize your configuration Step 4 Secure your SMTP email relay server If unsecured your mail relay server can be exploited and used as an open relay for spam To avoid this from happening it is recommended that you specifically define which mail servers can route emails through this mail relay server i e allow only specific servers to use this email relaying setup To achieve this 1 Go to Start gt Control Panel gt Administrative Tools 2 Click on Internet Information Services IIS Manager 3 In the left pane expand the respective server node Right click on Default SMTP Virtual Server and select Properties 4 Click on the Access tab and select Relay Getting Started Guide Installation for SMTP Servers e 87 Relay Restrictions Ed Select which computer may relay through this virtual server Only the list below C Allexcept the list below Computers Access IP Address Mask Domain Name Add Remove I Allow all computers which successfully authenticate to relay regardless of the list above Cancel Help Screenshot 73 Relay options 5 Select the Only the list below option and click Add 6 Specify IP s of the mail server s that are allowed to r
80. llation for Lotus Domino Getting Started Guide o http db11 spamcatcher net GFI MailEssentials 14 or earlier o http sn92 mailshell net GFI MailEssentials 14 SR1 or later e Remoting Ports 8021 Used in the latest builds of GFI MailEssentials for inter process communication No firewall configuration is required to allow connections to or from the remoting ports since all the GFI MailEssentials processes run on the same server NOTE Ensure that no other applications except GFI MailEssentials are listening on port 8021 e LDAP Port 389 Used by GFI MailEssentials to get email addresses from Lotus Domino server 5 4 Installing on gateway servers for Lotus Domino 5 4 1 Pre install actions GFI MailEssentials uses the IIS SMTP service as its SMTP Server and therefore the IIS SMTP service must be configured to act as a mail relay server This is achieved as follows Step 1 Enable IIS SMTP Service Windows Server 2003 1 Go to Start gt Control Panel gt Add or Remove Programs gt Add Remove Windows Components 2 Select Internet Information Services IIS and click Details 3 Select the SMTP Service option and click OK 4 Click Next to finalize your configuration Windows Server 2008 1 Launch the Windows Server Manager 2 Navigate to the Features node and select Add Features 3 From the Add Features Wizard select SMTP Server checkbox NOTE The SMTP Server feature might require the insta
81. llation for Microsoft Exchange 2003 e 5 MailEssentials reporter to enable anti spam report generation For UK US English OS this is installed automatically by GFI MailEssentials For other languages this can be downloaded from http www microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F 2B428displaylang en e Microsoft Virtual Server cluster group resource with a physical disc cluster This is required ONLY for environments running Microsoft Exchange 2003 clusters For more information refer to http technet microsoft com en us library bb124318 EXCHG 65 aspx e Microsoft Message Queuing Services e Internet Information Services IIS SMTP service e Internet Information Services IIS 6 or 7 WWW service when using Quarantine or Archive Web Interface e Microsoft Data Access Components MDAC 2 8 included by default on Windows Server 2003 or later This can be downloaded from http Avww microsoft com Downloads details aspx familyid 6C050 FE3 C795 4B7D B037 185D0506396C amp displaylang en 3 2 2 Hardware Processor e Minimum Intel Pentium or compatible 1 GHz 32 bit processor e Recommended x64 architecture based server with Intel 64 architecture or AMD64 platform Memory e Minimum 1GB e Recommended 2GB RAM Physical Storage e Minimum 500MB for installation 2GB for execution e Recommended 500MB for installation 4GB for execution 3 3 Important settings 3 3 1 Antivirus and
82. llation of additional role services and features Click Add Required Role Services to proceed with installation 4 In the following screens click Next to configure any required role services and features and click Install to start the installation 5 Click Close to finalize the configuration Step 2 Create SMTP domain s for email relaying 1 Go to Start gt Control Panel gt Administrative Tools 2 Click on Internet Information Services IIS Manager Getting Started Guide Installation for Lotus Domino e 69 Internet Information Services IIS 6 0 Manager File Action View Window Help es AmE alH g Internet Information Services El ye WINSERVF local computer jsmith mydomain com Local Default gt Default SMTP Virtual Server test mydomain com Remote Domains Current Sessions Screenshot 58 Internet Information Services IIS Manager 3 In the left pane expand the respective server node Right click on Default SMTP Virtual Server and select Properties 4 Select the IP address currently assigned to your SMTP server and click OK 5 Expand the Default SMTP Virtual Server node 6 Right click Domains and select New gt Domain 7 Select the Remote option and click Next 8 Specify domain name e g test gfi com and click Finish Step 3 Enable email relaying to your Microsoft Exchange server 1 Right click on the new domain e g test gfi com and select Properties 2
83. ltering 3 Getting Started Guide Internal email 22 73 100 IP DNS Blocklist 7 68 101 K Keyword checking 100 102 L LDAP lookups 16 99 Legitimate email 113 Licensing 2 8 15 29 36 47 57 74 90 Lotus Domino 67 69 72 73 M MAPI 46 114 Microsoft Exchange Server 5 8 15 18 23 45 48 54 55 56 57 70 MSMQ 10 24 32 38 50 59 77 92 109 111 114 N New Senders 3 101 102 Newsletter 114 O Outbound mail filtering 4 P perimeter server 1 5 15 45 54 114 Phishing 7 68 101 114 POP2Exchange 29 114 POP3 114 Q Quarantine 6 100 Index e 117 R Remote commands 4 115 S Sender Policy Framework 7 68 101 SMTP Server 9 16 17 23 37 49 58 69 70 83 85 86 88 92 100 SMTP Virtual Server 17 18 70 86 87 118 e Glossary Spam actions 115 SpamRazer 7 68 101 U Updates 7 68 URI DNS Blocklist 101 W WebDAV 115 Whitelist 4 99 101 Getting Started Guide
84. m spammers that do not resend a message when a retry message is received Legitimate e mail See Internet Information Services Glossary e 113 114 e Glossary Internet Information Services IMAP Internet Message Access Protocol LDAP Lightweight Directory Access Protocol List server Mail Exchange MAPI MDAC Messaging Application Programming Interface Microsoft Message Queuing Services Microsoft Data Access Components MIME MSMQ Multipurpose Internet Mail Extensions NDR Non Delivery Report Perimeter server gateway Phishing POP2Exchange POP3 Post Office Protocol ver 3 Public folder Quarantine RBL Realtime Blocklist A set of Internet based services created by Microsoft Corporation for internet servers See Internet Message Access Protocol One of the two most commonly used Internet standard protocols for e mail retrieval the other being POPS See Lightweight Directory Access Protocol An application protocol used to query and modify directory services running over TCP IP A server that distributes emails sent to discussions lists and newsletter lists and manages subscription requests The DNS record used to identify the IP addresses of the domain s mail servers See Messaging Application Programming Interface See Microsoft Data Access Components A messaging architecture and a Component Object Model based API for Microsoft Exchange A message queue implem
85. mails are routed through other servers before they are forwarded to the GFI MailEssentials server add the IP address of the other servers in the list For more information about perimeter SMTP servers refer to http kbase gfi com showarticle asp id KBID003296 When using hosted email security products GFI MAX MailProtection or GFI MAX MailEdge enable checkbox Emails are also filtered by For more information refer to http kbase gfi com showarticle asp id KBID003180 Click Next to continue 52 e Installation for Microsoft Exchange 2007 amp 2010 Getting Started Guide GFI MailEssentials Post Installation Wizard Default anti spam action Select the default action when an email is detected as spam Select default anti spam action Quarantine z Emails will be stored in Quarantine Store for 21 days default Quarantine settings can be configured from the GFI MailEssentials Configuration 4 periodic report can be sent to users to check the list of quarantined emails V Send quarantine email report Cancel Screenshot 47 Selecting the default anti spam action to use 6 In the Default anti spam action dialog select the default action to be taken when emails are detected as spam Click Next to continue NOTE When installing on Microsoft Exchange 2010 and the default action selected is Move to mailbox sub folder a user with impersonation rights must be created Select whether to let GFI MailEssentials
86. must be upgraded i e GFI MailEssentials must be upgraded on all cluster nodes servers making part of the cluster Upgrade procedure 1 Launch GFI MailEssentials installation on the server where your earlier version of GFI MailEssentials is installed Getting Started Guide Installation for Microsoft Exchange 2003 e 29 GFI MailEssentials Ah GFI MailEssentials version 15 0 321 6753 is already installed You must uninstall the existing version before installing GFI MailEssentials version 15 0 328 3696 IMPORTANT The new build requires the Microsoft NET Framework 2 0 and Microsoft MSMQ installed on this machine Do you want to uninstall the existing version of GFI MailEssentials lt a e Screenshot 25 Confirm the upgrade 2 Click Yes to start the upgrade process and follow on screen instructions For assistance refer to the Installation procedure chapter in the section below 3 6 2 New installations Important notes 1 Only active passive cluster setups are supported 2 Before starting installation close any running Windows applications 3 Before starting installation Microsoft Exchange Server 2003 needs to be installed in clustered mode 4 Before starting installation ensure that you have a Microsoft Virtual Server cluster group resource with a physical disc cluster available Pre install actions Create Microsoft Virtual Server cluster group resource Before you can create an Exchange Virtual Serv
87. n the Inbound email domains dialog specify all the domains to filter for spam Any local domains that are not specified in this list will not be filtered for spam Click Next to continue NOTE When adding domains select Obtain domain s MX records and include in perimeter servers list to retrieve the domain s MX records and automatically add them to the perimeter SMTP servers list configured in the next step GFI MailEssentials Post Installation Wizard SMTP Servers SMTP servers configuration Specify which SMTP servers receive emails directly from the internet This is the only SMTP server which receives emails directly from the internet The following SMTP servers receive emails directly from the internet and forward them to this server 172 13 45 23 194 124 58 32 Add Delete V Emails are also filtered by GFI MAX MailProtection or GFI MAX MailEdge For more information refer to http kbase gli com showarticle asp id KBID003180 Screenshot 55 SMTP Server settings 5 In the SMTP Servers dialog specify how the server receives external emails If emails are routed through other servers before they are forwarded to the GFI MailEssentials server add the IP address of the other servers in the list For more information about perimeter SMTP servers refer to http kbase gfi com showarticle asp id KBID003296 When using hosted email security products GFI MAX MailProtection or GFI MAX MailE
88. ng http kbase gfi com 9 4 Web Forum User to user technical support is available via the GFI web forum Access the web forum by visiting http forums gfi com 106 e Troubleshooting and support Getting Started Guide 9 5 Request technical support If none of the resources listed above enable you to solve your issues contact the GFI Technical Support team by filling in an online support request form or by phone e Online Fill out the support request form and follow the instructions on this page closely to submit your support request on http support gfi com supportrequestform asp e Phone To obtain the correct technical support phone number for your region please visit http Avww gfi com company contact htm NOTE Before you contact our Technical Support team please have your Customer ID available Your Customer ID is the online account number that is assigned to you when you first register your license keys in our Customer Area at http customers gfi com We will answer your query within 24 hours or less depending on your time zone 9 6 Build notifications We strongly suggest that you subscribe to our build notifications list This way you will be immediately notified about new product builds To subscribe to our build notifications visit http Awww gfi com pages productmailing htm 9 7 Documentation If this manual does not satisfy your expectations or if you think that this documentation can be
89. ng information For more information refer to http support microsoft com support kb articles Q153 1 19 asp 5 4 2 Upgrade from earlier version If you are currently using a previous version of GFI MailEssentials versions 9 10 11 12 and 14 you can upgrade your current installation while at the same time retain all your existing configuration settings Important notes e Upgrades cannot be undone i e you cannot downgrade to an earlier version once you have installed the latest version e On upgrading an existing installation licensing reverts to trial version and a new fully purchased license key for the GFI MailEssentials 2010 is required For more information on new license keys refer to http customers gfi com e You cannot change the installation path during GFI MailEssentials upgrades e When upgrading from GFI MailEssentials 9 the current Bayesian weights file will be upgraded to the new format used in GFI MailEssentials 10 or later The new format is more compact and uses less memory NO DATA WILL BE LOST Upgrade procedure 1 Launch GFI MailEssentials installation on the server where your earlier version of GFI MailEssentials is installed GFI MailEssentials GFI MailEssentials version 15 0 321 6753 is already installed You must uninstall the existing version before installing GFI MailEssentials version 15 0 328 3696 IMPORTANT The new build requires the Microsoft NET Framework 2 0 and Microsoft MSMQ
90. o I do not have Active Directory or my network does not have access to Active Directory DMZ rules will be based on SMTP email addresses GFI MailEssentials lt Back ne gt Cancel Screenshot 50 Selecting SMTP mode or Active Directory mode 9 Specify whether GFI MailEssentials will get the list of email users required for user based configuration rules e g disclaimers from Active Directory or SMTP server Click Next to continue 58 e Installation for Microsoft Exchange 2007 amp 2010 Getting Started Guide ie GFI MailEssentials for Exchange SMTP Setup fel E3 GFI MailEssentials makes use of the Microsoft Message Queue Service MSMQ The Message Queueing Services is a scalable system service developed by Microsoft to enable high volume event processing This service is included with every Windows version as from Windows 2000 although not always installed by default The GFI MailEssentials installation can install Microsoft MSMG for you To complete this process you will require the Windows CD DVD Microsoft MSMQ is a required component for GFI MailEssentials The installation will not continue if Microsoft MSMGQ is not installed Do you want to install the Microsoft MSMQ service now Yes No GFI MailEssentials Screenshot 51 Installing Microsoft Message Queuing Service 10 If Microsoft Message Queuing Services MSMQ is not installed then the dialog in the above screenshot will open Se
91. o proceed with the installation select I accept the license agreement and click Next 6 Click Next to install in default location or click Browse to change path 7 Specify user details and enter license key Click Next to continue 8 Specify the email address where notifications e g failed anti soam filters soam digests are sent ie GFI MailEssentials for Exchange SMTP Setup Active Directory Access to Active Directory users o Does this server have access to all the email users in Active Directory Yes all email users are available on Active Directory rules will be based on Active Directory users No I do not have Active Directory or my network does not have access to Active Directory DMZ rules will be based on SMTP email addresses GFI MailEssentials lt Back L ne gt Cancel Screenshot 26 Selecting SMTP mode or Active Directory mode 9 Specify whether GFI MailEssentials will get the list of email users required for user based configuration rules e g disclaimers from Active Directory or SMTP server Click Next to continue Getting Started Guide Installation for Microsoft Exchange 2003 e 31 ie GFI MailEssentials for Exchange SMTP Setup fel E3 Microsoft Message Queuing Service GFI MailEssentials makes use of the Microsoft Message Queue Service MSMQ The Message Queueing Services is a scalable system service developed by Microsoft to enable high volume event processing This servic
92. ollowing SMTP servers receive emails directly from the internet and forward them to this server 172 13 45 23 194 124 58 32 Add Delete V Emails are also filtered by GFI MAX MailProtection or GFI MAX MailEdge For more information refer to http kbase gli com showarticle asp id KBID003180 Screenshot 82 SMTP Server settings 5 In the SMTP Servers dialog specify how the server receives external emails If emails are routed through other servers before they are forwarded to the GFI MailEssentials server add the IP address of the other servers in the list For more information about perimeter SMTP servers refer to http kbase gfi com showarticle asp id KBID003296 When using hosted email security products GFI MAX MailProtection or GFI MAX MailEdge enable checkbox Emails are also filtered by For more information refer to http kbase gfi com showarticle asp id KBID003180 Click Next to continue 96 e Installation for SMTP Servers Getting Started Guide GFI MailEssentials Post Installation Wizard Iof x Default anti spam action Select the default action when an email is detected as spam Select default anti spam action Quarantine z Emails will be stored in Quarantine Store for 21 days default Quarantine settings can be configured from the GFI MailEssentials Configuration 4 periodic report can be sent to users to check the list of quarantined emails J Send quarantine email repo
93. ons item under the server node 2 From the Configurations main window select the server to use with GFI MailEssentials and click edit configuration 3 Select Router SMTP tab and ensure Basics is selected 4 Double click on the content to edit Select Relay host for messages leaving the local internet domain option and key in the IP address of the mail gateway server where GFI MailEssentials is installed 72 e Installation for Lotus Domino Getting Started Guide 5 Click Save and Close to save configuration b Configure Lotus Domino LDAP settings 1 From the Directory Assistance database click on Add directory assistance to create a new Assistance document 2 Select the LDAP Clients checkbox from the Make this domain available to option 3 From the server configuration edit the credentials under the configuration Enable Anonymous authentication to allow GFI MailEssentials to access Lotus Domino LDAP Step 6 Update your domain MX record to point to mail relay server Update the MX record of your domain to point to the IP of the new mail relay server If your DNS server is managed by your ISP ask your ISP to update the MX record for you If MX record is not updated all emails will be routed directly to your email server hence by pass GFI MailEssentials anti spam filters Verify that MX record has been successfully updated To verify whether MX record is updated 1 Click Start gt Run and type Comm
94. or 1720 There is a problem with this Windows Installer package e A script required for this Getting Started Guide When upgrading to a new version of GFI MailEssentials you are required to upgrade your license key For more information on how to upgrade your key refer to http kbase gfi com showarticle asp id KBID003408 The Microsoft Event log warnings are created due to a missing requirement for the GFI MailEssentials Legacy Attendant service This requirement is configured by the post installation wizard and therefore no warnings of the same type will be reported in the Microsoft event logs after completing the GFI MailEssentials post installation wizard 1 Disable any real time scanning software such as antivirus software 2 Ensure that you do not have any software that automatically removes files from the TEMP folder 3 Log in with Domain Administrator privileges 4 Download and install the latest version of Windows Scripting Host amp Windows Installer for your Windows Operating System from http www microsoft com downloads Troubleshooting and support e 105 install to complete could not be run Contact your support personnel or package vendor e Setup failed to launch installation engine Access is denied or e Error installing Ikernel exe access is denied 9 3 Knowledge Base 5 Ensure that the following Microsoft Windows technologies are installed correctly and not corrup
95. orage e Minimum 500MB for installation 2GB for execution e Recommended 500MB for installation 4GB for execution 5 3 Important settings 5 3 1 Antivirus and backup software Antivirus and backup software may cause GFI MailEssentials to malfunction This occurs when such software denies access to certain files required by GFI MailEssentials Disable third party antivirus and backup software from scanning the following folders x86 installations 32 bit x64 installations 64 bit lt Program Files lt Program Files GFI MailEssentials gt x86 GFI MailEssentials gt lt Program Files x86 Common lt Program Files Common Files GFI gt Fae lt netpub mailroot gt If installed on a gateway machine 5 3 2 Firewall port settings Configure your firewall to allow the following port connections These ports are used by GFI MailEssentials to connect to GFI servers e DNS Port 53 Used by anti spam filters IP DNS Blocklist Sender Policy Framework Header Checking e FTP Ports 20 and 21 Used by GFI MailEssentials to connect to ftp gfisoftware com and retrieve latest product version information e HTTP Port 80 Used by GFI MailEssentials to download product patch and anti spam filter updates i e SoamRazer Anti Phishing and Bayesian anti spam filters from the following locations o http update gfi com o http update gfisoftware com o http support gfi com 68 e Insta
96. ough a proxy server click Configure proxy server and specify proxy settings Click Next to continue GFI MailEssentials Post Installation Wizard Inbound email domains Specify the email domains GFI MailEssentials should treat as inbound Add all inbound email domains in which you recieve email E g If your email address is user afi com add gfi com masterdomain com Add Remove lt Back Screenshot 22 Inbound email domains 26 e Installation for Microsoft Exchange 2003 Getting Started Guide 4 In the Inbound email domains dialog specify all the domains to filter for spam Any local domains that are not specified in this list will not be filtered for spam Click Next to continue NOTE When adding domains select Obtain domain s MX records and include in perimeter servers list to retrieve the domain s MX records and automatically add them to the perimeter SMTP servers list configured in the next step GFI MailEssentials Post Installation Wizard SMTP Servers SMTP servers configuration Specify which SMTP servers receive emails directly from the internet This is the only SMTP server which receives emails directly from the internet The following SMTP servers receive emails directly from the internet and forward them to this server 172 13 45 23 194 124 58 32 Add Delete V Emails are also filtered by GFI MAX MailProtection or GFI MAX MailEdge For more informat
97. ough not always installed by default The GFI MailEssentials installation can install Microsoft MSMG for you To complete this process you will require the Windows CD DVD Microsoft MSMQ is a required component for GFI MailEssentials The installation will not continue if Microsoft MSMGQ is not installed Do you want to install the Microsoft MSMQ service now Yes No GFI MailEssentials Screenshot 19 Installing Microsoft Message Queuing Service 10 If Microsoft Message Queuing Services MSMQ is not installed then the dialog in the above screenshot will open Select Yes to install MSMQ Click Next to continue 11 Click Finish to finalize your installation On completion setup will e Ask you to restart the SMTP service IMPORTANT Failing to restart the SMTP service will negatively affect anti spam filtering and email flow e Check whether Microsoft XML engine is installed This is automatically installed if not found on UK US English OS For other OS languages this has to be manually downloaded and installed Microsoft XML engine can be downloaded from http www microsoft com downloads details aspx Familyld 3144 B72B B4F2 46DA B4B6 C5D7485F2B428displaylang en e For new installations setup will launch the Post Installation Wizard 24 e Installation for Microsoft Exchange 2003 Getting Started Guide Post Installation Wizard 1 Click Next in the welcome page GFI MailEssentials Post Installation Wizard Mel x
98. oute emails through your mail relay server You can specify e Single computer i e Authorize one specific machine to relay email through this server Use the DNS Lookup button to lookup an IP address for a specific host e Group of computers i e Authorize specific computer s to relay emails through this server e Domain Allow all computers in a specific domain to relay emails through this server NOTE The Domain option adds a processing overhead that can degrade SMTP service performance This is due to the reverse DNS lookup processes triggered on all IP addresses within that domain that try to route emails through this relay server Step 5 Configure your SMTP server for GFI MailEssentials Refer to the SMTP server documentation on forwarding email to the GFI MailEssentials server Step 6 Update your domain MX record to point to mail relay server Update the MX record of your domain to point to the IP of the new mail relay server If your DNS server is managed by your ISP ask your ISP to update the MX record for you If the MX record is not updated all emails will be routed directly to your email server hence by pass GFI MailEssentials anti spam filters 88 e Installation for SMTP Servers Getting Started Guide Verify that MX record has been successfully updated To verify whether MX record is updated do as follows 1 Click Start gt Run and type in Command 2 From the command prompt type in nslookup 3 T
99. perties GG HENGE Screenshot 16 Adding SMTP as address space 5 Click on the Address Space tab then click Add Getting Started Guide Installation for Microsoft Exchange 2003 e 21 6 Select SMTP and click OK 7 Click OK to finalize your configuration All emails will now be forwarded to the GFI MailEssentials server Step 6 Update your domain MX record to point to mail relay server Update the MX record of your domain to point to the IP of the new mail relay server If your DNS server is managed by your ISP ask your ISP to update the MX record for you If MX record is not updated all emails will be routed directly to your email server hence by pass GFI MailEssentials anti spam filters Verify that MX record has been successfully updated To verify whether MX record is updated do as follows 1 Click Start gt Run and type Command 2 From the command prompt type in nslookup 3 Type in set type mx 4 Specify your mail domain name The MX record should return the IP addresses of the mail relay servers WINNT System32 cmd exe nslookup icrosoft Windows 2000 Version 5 00 2195 lt C gt Copyright 1985 2666 Microsoft Corp C Documents and Settings administrator GHOST gt ns lookup Default Server server qa Address 192 168 0 1 gt set type mx gt qatest com Server server qa Address 192 168 0 1 qatest com M3 preference 18 mail exchanger qatest com qatest com internet addre
100. pport gfi com o http db11 spamcatcher net GFI MailEssentials 14 or earlier o http sn92 mailshell net GFI MailEssentials 14 SR1 or later e Remoting Ports 8021 Used in the latest builds of GFI MailEssentials for inter process communication No firewall configuration is required to allow connections to or from the remoting ports since all the GFI MailEssentials processes run on the same server NOTE Ensure that no other applications except GFI MailEssentials are listening on port 8021 e OPTIONAL LDAP Port 389 Used by GFI MailEssentials to get email addresses from SMTP server Only required if the server running GFI MailEssentials does not have access cannot get list of users from Active Directory e g in a DMZ environment or other environment which does not use Active Directory 3 4 Installing on Microsoft Exchange Server 2003 3 4 1 Upgrade from earlier version If you are currently using a previous version of GFI MailEssentials versions 9 10 11 12 and 14 you can upgrade your current installation while at the same time retain all your existing configuration settings Important notes e Upgrades cannot be undone i e you cannot downgrade to an earlier version once you have installed the latest version Getting Started Guide Installation for Microsoft Exchange 2003 e 7 e On upgrading an existing installation licensing reverts to trial version and a new fully purchased license key for the GFI Ma
101. re detected as spam Click Next to continue 7 Click Finish to finalize the installation The GFI MailEssentials installation is now complete and the anti spam system is up and running For more information about how to optimize GFI MailEssentials refer to Post install actions chapter Step 2 Move the Exchange Virtual Server cluster group 1 Go to Control Panel gt Administrative Tools gt Cluster Administrator 2 Stop the GFI MailEssentials Legacy Attendant and the GFI POP2Exchange cluster resources 3 Move the Exchange Virtual Server cluster group resource to another node Step 3 Install GFI MailEssentials on a passive server 1 Logon to the passive node of your Microsoft Exchange cluster using administrator credentials 2 Double click mailessentials2010 exe 32 bit install or mailessentials2010_x64 exe 64 bit install accordingly 3 Select install language and click Next 4 Select whether to check for newer versions builds of GFI MailEssentials and click Next 5 Read licensing agreement To proceed with the installation select I accept the license agreement and click Next 36 e Installation for Microsoft Exchange 2003 Getting Started Guide 6 Click Next to install in default location or click Browse to change path 7 Specify user details and enter license key Click Next to continue 8 Specify the email address where notifications e g failed anti soam filters soam digests are sent fe GFI Ma
102. rt Screenshot 83 Selecting the default anti spam action to use 6 In the Default anti spam action dialog select the default action to be taken when emails are detected as spam Click Next to continue 7 Click Finish to finalize the installation The GFI MailEssentials installation is now complete and the anti spam system is up and running For more information about how to optimize GFI MailEssentials refer to Post install actions chapter Getting Started Guide Installation for SMTP Servers e 97 7 Post install actions To ensure that your GFI MailEssentials anti spam system is effectively up and running perform the following post install actions Step 1 Launch GFI MailEssentials Configuration console Click on Start gt All Programs gt GFI MailEssentials GFI MailEssentials Configuration Step 2 Enable Directory Harvesting This filter uses Active directory or LDAP lookups to verify whether inbound emails are addressed to legitimate internal email accounts To enable this filter 1 Right click Anti spam gt Anti Spam Filters gt Directory Harvesting node and select Properties 2 Select Enable directory harvesting protection 3 Select the lookups method to be used e Use native Active Directory lookups option Select this option if during installation you selected to get the list of email users from Active Directory see Installation procedure section above step 9 e Use LDAP lookups Se
103. rver running Microsoft Exchange or SBS This setup is typically used to filter email spam on Microsoft Exchange or SBS servers set to receive emails directly from outside i e the internet Mail gateway or relay perimeter server This type of installation is commonly used to filter soam in distributed email infrastructures especially those running a DMZ In this environment a dedicated machine is set to relay emails to another server running Microsoft Exchange Here GFI MailEssentials is typically installed on the mail relay server so that email spam is filtered before reaching your Microsoft Exchange server This setup reduces network traffic email storage and processing requirements on your email infrastructure Microsoft Exchange Server 2007 2010 clusters This type of installation is commonly used to filter spam within environments where clusters are used as disaster prevention and recovery mechanisms 4 2 System requirements 4 2 1 Software Supported operating systems Microsoft Windows Server 2008 x64 Microsoft Windows Server 2008 x86 Installations on gateway perimeter server only Microsoft Small Business Server SBS 2008 2011 Standard Mail Servers Getting Started Guide Microsoft Exchange Server 2010 Microsoft Exchange Server 2007 Installation for Microsoft Exchange 2007 amp 2010 e 45 Other components e Microsoft NET Framework 2 0 e Microsoft XML core services This is required by the GFI Mail
104. s gt lt Program Files x86 Common Files GFI gt lt Inetoub mailroot gt lf installed on a gateway machine lt Program Files GFI MailEssentials gt lt Program Files Common Files GFl gt 46 e Installation for Microsoft Exchange 2007 amp 2010 Getting Started Guide lt Program Files Exchsrvr Mailroot gt f installed on the same machine as Microsoft Exchange 2007 2010 4 3 2 Firewall port settings Configure your firewall to allow the following port connections These ports are used by GFI MailEssentials to connect to GFI servers e DNS Port 53 Used by anti spam filters IP DNS Blocklist Sender Policy Framework Header Checking e FTP Ports 20 and 21 Used by GFI MailEssentials to connect to ftp gfisoftware com and retrieve latest product version information e HTTP Port 80 Used by GFI MailEssentials to download product patch and anti spam filter updates i e SoamRazer Anti Phishing and Bayesian anti spam filters from the following locations o http update gfi com o http update gfisoftware com o http support gfi com o http db11 spamcatcher net GFI MailEssentials 14 or earlier o http sn92 mailshell net GFI MailEssentials 14 SR1 or later e Remoting Ports 8021 Used in the latest builds of GFI MailEssentials for inter process communication No firewall configuration is required to allow connections to or from the remoting ports since al
105. service will negatively affect anti spam filtering and email flow 2 Before starting installation close any running Windows applications Installation procedure 1 Logon to the Microsoft Exchange Server machine using administrator credentials 2 Double click mailessentials2010 exe 32 bit install or 8 e Installation for Microsoft Exchange 2003 Getting Started Guide mailessentials2010_x64 exe 64 bit install accordingly 3 Select installation language and click Next 4 Select whether to check for newer versions builds of GFI MailEssentials and click Next 5 Read licensing agreement To proceed with the installation select accept the license agreement and click Next 6 Click Next to install in default location or click Browse to change path 7 Specify user details and enter license key Click Next to continue 8 Specify the email address where notifications e g failed anti soam filters soam digests are sent i GFI MailEssentials for Exchange SMTP Setup lel E3 Active Directory Access to Active Directory users e Does this server have access to all the email users in Active Directory Yes all email users are available on Active Directory rules will be based on Active Directory users No I do not have Active Directory or my network does not have access to Active Directory DMZ rules will be based on SMTP email addresses GFI MailEssentials lt Back next gt Cancel Scre
106. ss 192 168 0 153 gt Screenshot 17 Checking the MX record of your domain Step 7 Test your new mail relay server Before proceeding to install GFI MailEssentials verify that your new mail relay server is working correctly by doing as follows Test IIS SMTP inbound connection via test email 1 Send an email from an external account e g Gmail to an internal email address user 2 Ensure that intended recipient received the test email in the respective email client Test IIS SMTP outbound connection via test email 1 Send an email from an internal email account to an external account e g Gmail 2 Ensure that the intended recipient external user received the test email NOTE You can also use Telnet to manually send the test email and obtained more troubleshooting information For more information refer 22 e Installation for Microsoft Exchange 2003 Getting Started Guide to http support microsoft com support kb articles Q153 1 19 asp Installation procedure 1 Logon to your Microsoft Exchange Server machine using administrator credentials 2 Double click mailessentials2010 exe 32 bit install or mailessentials2010_x64 exe 64 bit install accordingly 3 Select preferred install language and click Next 4 Select whether to check for newer versions builds of GFI MailEssentials and click Next 5 Read licensing agreement To proceed with this installation select accept the licens
107. ssentials version 15 0 321 6753 is already installed You i must uninstall the existing version before installing GFI z MailEssentials version 15 0 328 3696 IMPORTANT The new build requires the Microsoft NET Framework 2 0 and Microsoft MSMQ installed on this machine Do you want to uninstall the existing version of GFI MailEssentials No Screenshot 40 Confirm the upgrade 2 Click Yes to start the upgrade process and follow on screen instructions For assistance refer to New installations section below 4 4 2 New installations Important notes 1 During installation GFI MailEssentials restarts Microsoft Exchange Server services This is required to alow GFI MailEssentials components to be registered and started 2 Before starting installation close any running Windows applications 3 Since Microsoft Exchange Server 2007 2010 can only be installed on Windows Server 2008 64 bit GFI MailEssentials 64 bit version is required Installation procedure 1 Logon to your Microsoft Exchange Server machine using administrator credentials 2 Double click mailessentials2010_x64 exe 3 Select install language and click Next 4 Select whether to check for newer versions builds of GFI MailEssentials and click Next 5 Read licensing agreement To proceed with the installation select I accept the license agreement and click Next 6 Click Next to install in default location or click Browse to change path 7 Spe
108. t e Microsoft Windows Management Instrumentation WMI e Microsoft Windows Installer e Microsoft Net Framework e Microsoft Data Access Components MDAC 6 Ensure that the following system libraries located at lt Windows System32 gt are correctly registered e urlmon dll e Oleaut32 dll e ole32 dll e Actxprxy dll e Shell32 dll e Shdocvw dll e Mshtml dil e Browseui dll e Scrrun dll To register system libraries perform the following steps a Click Start and select Run b Key in cmd exe c Key in regsvr32 lt path amp filename of dll gt Example regsvr32 c windows system32 urlmon dll 7 Place the installation file in a temporary directory on the server where you are installing the GFI product and retry installing GFI MailEssentials 8 Check Distributed Component Object Model DCOM permissions as explained in http support microsoft com default aspx scid kb en us 295278 NOTE For more information on how to resolve common Windows Installer problems refer to http support microsoft com default aspx scid kb en us 555175 GFI maintains a comprehensive Knowledge Base repository which includes answers to the most common installation problems In case that the information in this manual does not solve your installation problems next refer to the Knowledge Base The Knowledge Base always has the most up to date listing of technical support questions and patches Access the Knowledge Base by visiti
109. t Exchange server to forward all emails to the GFI MailEssentials machine Getting Started Guide From the Microsoft Exchange Server Management Console select Organization Configuration gt Hub Transport gt Actions gt New Send Connector In the New SMTP connector wizard key in the name for the connector in the introduction screen NOTE You can use GFI MailEssentials SMTP Connector From the Select the intended use for this Send Connector drop down list box select Internet From the Address space screen click Add and key in Click Ok and click Next Choose Route mail through the following smart host click Add and specify the IP address of the server where GFI MailEssentials is installed Click Next Set the authentication for the GFI MailEssentials machine if Installation for Microsoft Exchange 2007 amp 2010 e 55 required and click Next e Select the Hub Transport server with which this connector will be associated and click Next e Verify the configuration summary and click New to create the new send connector NOTE On completion the GFI MailEssentials connector will be available in the Send Connectors tab and is enabled by default 2 Add a Receive Connector to Microsoft Exchange server to accept emails from the GFI MailEssentials Machine e From the Exchange Management Shell key in the following command new receiveconnector name GFI MailEssentials Bindings 0
110. to finalize the installation The GFI MailEssentials installation is now complete and the anti spam system is up and running For more information about how to optimize GFI MailEssentials refer to Post install actions chapter 3 6 Installing on Microsoft Exchange 2003 cluster Introduction A cluster is a group of servers technically known as nodes working collectively as a single server Such environment provides high availability and fail over mechanisms to ensure constant availability of resources and applications including email infrastructures If one of the nodes in the cluster fails is not available resources and applications switch to another cluster node A Microsoft Exchange cluster can be set up in one of 2 modes active active or active passive GFI MailEssentials supports ONLY active passive clusters In an active passive cluster a failover mechanism ensures that whenever an active cluster fails one of the available passive nodes becomes active i e takes over the role of the failed node In view of the way clusters work GFI MailEssentials must be installed on all servers cluster nodes in order to ensure uninterrupted email spam management GFI MailEssentials installation in a Microsoft Exchange 2003 cluster is a 4 tier process 28 e Installation for Microsoft Exchange 2003 Getting Started Guide e Process 1 Install GFI MailEssentials on the Active cluster node e Process 2 Stop the GFI MailEssentials Legacy
111. ured email monitoring is next executed and the appropriate actions taken Q The new senders filter is now executed Q Email is sent to the user s mailbox Getting Started Guide How does GFI MailEssentials work e 3 2 2 Outbound mail filtering Outbound mail filtering is the process through which email sent by users within a company is processed before it is sent out GFI MailEssentials Internet Mailbox Figure 2 Outbound mail filtering Q User creates and sends email 2 Remote commands check executes any remote commands in email if any are found If none are found email goes to the next stage 9 Email is next checked to see if it should be archived If archiving is enabled email is saved in the archiving database Q If configured the applicable disclaimer is next added to the email Q Email is checked for any mail monitoring which may apply and action is taken according to any rules configured Q If enabled auto whitelist adds the recipients email address to the whitelist This automatically enables replies from such recipients to go to the sender without being checked for spam After this check the email is sent to the recipients 4 e How does GFI MailEssentials work Getting Started Guide 3 Installation for Microsoft Exchange 2003 3 1 Introduction GFI MailEssentials installation depends on how your network is configured for Exchange 2003 You can install this product on e The Microsoft Exchange 200
112. ver Configure proxy server Screenshot 80 Internet connectivity settings 3 In the Internet Connectivity Settings dialog specify how the server where GFI MailEssentials is installed connects to the internet If the server connects through a proxy server click Configure proxy server and specify proxy settings Click Next to continue GFI MailEssentials Post Installation Wizard Inbound email domains Specify the email domains GFI MailEssentials should treat as inbound Add all inbound email domains in which you recieve email E g If your email address is user afi com add gfi com masterdomain com Add Remove lt Back Screenshot 81 Inbound email domains Getting Started Guide Installation for SMTP Servers e 95 4 In the Inbound email domains dialog specify all the domains to filter for spam Any local domains that are not specified in this list will not be filtered for soam Click Next to continue NOTE When adding domains select Obtain domain s MX records and include in perimeter servers list to retrieve the domain s MX records and automatically add them to the perimeter SMTP servers list configured in the next step GFI MailEssentials Post Installation Wizard SMTP Servers SMTP servers configuration Specify which SMTP servers receive emails directly from the internet This is the only SMTP server which receives emails directly from the internet The f
113. welcome page GFI MailEssentials Post Installation Wizard DNS Server Specify the DNS server to be used for domain lookups The DNS server is used for domain look ups and by spam filters which query DNS blocklists Use the same DNS server used by this server Use an alternate DNS Server 192 168 1 4 Test DNS Server lt Back Cancel Screenshot 66 DNS Server settings 2 In the DNS Server dialog select e Use the same DNS server used by this server Select this option to use the same DNS server that is used by the operating system where GFI MailEssentials is installed e Use an alternate DNS server Select this option to specify a custom DNS server IP address Click Test DNS Server to test connection with the specified DNS Getting Started Guide Installation for Lotus Domino e 77 server If test is unsuccessful specify another DNS server Click Next to continue GFI MailEssentials Post Installation Wizard iof x Internet Connectivity Settings Specify how this server connects to the Internet GFI MailEssentials requires internet access for spam filtering and to download spam filter updates This machine connects directly to the internet This machine connects to the internet through a proxy server Configure proxy server Screenshot 67 Internet connectivity settings 3 In the Internet Connectivity Settings dialog specify how the server where GFI MailEssentials is installed conn
114. where your earlier version of GFI MailEssentials is installed GFI MailEssentials Eh GFI MailEssentials version 15 0 321 6753 is already installed You must uninstall the existing version before installing GFI MailEssentials version 15 0 328 3696 IMPORTANT The new build requires the Microsoft NET Framework 2 0 and Microsoft MSMQ installed on this machine Do you want to uninstall the existing version of GFI MailEssentials No Screenshot 9 Confirm the upgrade 2 Click Yes to start the upgrade process and follow on screen instructions For assistance refer to New installations section below 3 5 2 New installations Important notes 1 During installation GFI MailEssentials restarts Microsoft Exchange Server services This is required to allow GFI MailEssentials components to be registered and started 2 Before starting installation close any running Windows applications 3 When installing GFI MailEssentials on a DMZ we recommend you use LDAP lookups to get the list of email users required for user based configuration rules e g disclaimers from your SMTP server The AD of a DMZ usually will NOT include all the network users email recipients Pre install actions GFI MailEssentials uses the IIS SMTP service as its SMTP Server and therefore the IIS SMTP service must be configured to act as a mail relay server This is achieved as follows 16 o Installation for Microsoft Exchange 2003 Getting Started Guide
115. y GFI MAX MailProtection or GFI MAX MailEdge For more information refer to http kbase gli com showarticle asp id KBID003180 Screenshot 31 SMTP Server settings 5 In the SMTP Servers dialog specify how the server receives external emails If emails are routed through other servers before they are forwarded to the GFI MailEssentials server add the IP address of the other servers in the list For more information about perimeter SMTP servers refer to http kbase gfi com showarticle asp id KBID003296 When using hosted email security products GFI MAX MailProtection or GFI MAX MailEdge enable checkbox Emails are also filtered by For more information refer to http kbase gfi com showarticle asp id KBID003180 Click Next to continue Getting Started Guide Installation for Microsoft Exchange 2003 e 35 GFI MailEssentials Post Installation Wizard Default anti spam action Select the default action when an email is detected as spam Select default anti spam action Quarantine z Emails will be stored in Quarantine Store for 21 days default Quarantine settings can be configured from the GFI MailEssentials Configuration periodic report can be sent to users to check the list of quarantined emails V Send quarantine email report Screenshot 32 Selecting the default anti spam action to use 6 In the Default anti spam action dialog select the default action to be taken when emails a
116. ylang en e For new installations setup will launch the Post Installation Wizard Getting Started Guide Installation for SMTP Servers e 93 Post Installation Wizard 1 Click Next in the welcome page GFI MailEssentials Post Installation Wizard Mel x DNS Server Specify the DNS server to be used for domain lookups The DNS server is used for domain look ups and by spam filters which query DNS blocklists Use the same DNS server used by this server Use an alternate DNS Server 192 168 1 4 Test DNS Server lt Back Cancel Screenshot 79 DNS Server settings 2 In the DNS Server dialog select e Use the same DNS server used by this server Select this option to use the same DNS server that is used by the operating system where GFI MailEssentials is installed e Use an alternate DNS server Select this option to specify a custom DNS server IP address Click Test DNS Server to test connection with the specified DNS server If test is unsuccessful specify another DNS server Click Next to continue 94 e Installation for SMTP Servers Getting Started Guide GFI MailEssentials Post Installation Wizard lel x Internet Connectivity Settings Specify how this server connects to the Internet GFI MailEssentials requires internet access for spam filtering and to download spam filter updates This machine connects directly to the internet This machine connects to the internet through a proxy ser
117. ype in set type mx 4 Specify your mail domain name The MX record should return the IP addresses of the mail relay servers WINNT System32 cmd exe nslookup Microsoft Windows 2666 Version 5 66 2195 lt C Copyright 1985 2000 Microsoft Corp C Documents and Settings administrator GHOST gt ns lookup Default Server server qa Address 192 168 0 1 gt set type mx gt qatest com Server server qa Address 192 168 0 1 qatest com MX preference 16 mail exchanger qatest com qatest com internet address 192 168 6 153 gt Screenshot 74 Checking the MX record of your domain Step 7 Test your new mail relay server Before proceeding to install GFI MailEssentials verify that your new mail relay server is working correctly by doing as follows Test IIS SMTP inbound connection via test email 1 Send an email from an external account e g Gmail to an internal email address user 2 Ensure that intended recipient received the test email in the respective email client Test IIS SMTP outbound connection via test email 1 Send an email from an internal email account to an external account e g Gmail 2 Ensure that the intended recipient external user received the test email NOTE You can also use Telnet to manually send the test email and obtained more troubleshooting information For more information refer to http support microsoft com support kb articles Q153 1 19 asp 6

GFI MailDefense Suite, 100-249u, 1Y, SMA RNW

Contents

Download Pdf Manuals

Related Search

Related Contents