如何将Merak用作MS Exchange服务器的反垃圾邮件和防病毒网关？

钉子

• MS Exchange服务器（以下简称为“Exchange”）未直接与互联网相连，只是与您的邮件服务器相连（以下简称为“Merak”）。
• Merak为Exchange域中的用户接收消息。
• Merak过滤所有带病毒和垃圾邮件的消息。
• Merak将消息转发至Exchange。
• Merak还针对SMTP处理提供很多其它有效特性，如内容过滤器和安全特性等。

工作原理
您可通过普通配置，将Exchange仅作为邮件服务器，如下图所示：
资料来源： Troup, Marty: Merak即时反垃圾邮件功能作为Microsoft Exchange的自动垃圾邮件防御网关; 2003; marty@icewarp.us
Merak可作为中继服务器，即位于互联网与Exchange之间，如下图所示资料来源：Troup, Marty: Merak即时反垃圾邮件功能作为Microsoft Exchange的自动垃圾邮件防御网关; 2003; marty@icewarp.us
所有邮件都通过Merak发送。Merak可以根据设置过滤、转发和删除这些消息。
如何将Merak设置为Exchange的中继服务器？
检查Merak的DNS服务器
在Merak Config中，选择Mail Service -> SMTP Service -> General页签，检查是否选中Use DNS Lookup且正确设置DNS服务器。通过DNS Query Test按钮进行验证。当然，您可以将邮件服务器设置为您想要的主机名。
然后，停止不需要的业务。即，System -> Services中的POP3/IMAP、IM（即时消息业务）和日历功能。
设置病毒防护
进入Anti-Virus菜单节点。启用Active选项，激活Integrated AntiVirus。

然后，设置Update Schedule为自动更新病毒防护数据库。
设置Merak即时反垃圾邮件（以下简称为MIAS）
进入Anti-Spam菜单节点，启用即时反垃圾邮件引擎（Instant AntiSpam Engine）。
您可以根据自身需要进行设置。但是，如果您不熟悉所有选项，建议采用默认设置。关于MIAS的更多信息，请阅读MIAS成套资料（可以从我们的网站www.icewarp.com/download/下载）。
设置不同安全特性
这包括内容过滤器、垃圾邮件防护、黑白名单、静态过滤器等特性。您可以查阅MIAS成套资料和Merak F1帮助，获取更多信息。当Merak在您的机器上运行一段时间后，最好调整Merak设置。
在Merak中设置与Exchange处理的域相对应的域。进入Go to Domains & Accounts -> Management，创建一个与Exchange上名字相同的域。设置域类型为Backup Domain，并设置数值：Exchange所在服务器的IP地址或主机名选项。
点击“Save”保存域设置。
重复上述步骤，设置所有域。
设置DNS记录为Contain Relay Host
• 添加指向Merak所在机器IP地址的A记录为其主机名（例如，添加 merak.mydomain.com为191.191.191.11）
• 添加指向域名的MX记录为Merak所在机器的主机名/IP地址（例如，添加mydomain.com为merak.mydomain.com）。设置MX记录的优先权为较低数字（优先权较高），其优先权高于直接指向Exchange的MX记录的优先权。
• 重复上述步骤，设置所有域。

钉子

这是从别的论坛转过来的，应该是微力的朋友翻译的．其实也并不是很高深的技术．利用Merak在防垃圾，防病毒的优势，用来补允EX在防垃圾，防病毒的不足．除了EX,其它这些方面不强的邮件系统，也可以考虑使用Merak来做网关．

钉子

现在把英文原版转过来大家看看，出自http://www.icewarp.com/support/faq/3030.php：

How do I Use Merak as my AntiSpam and AntiVirus Gateway for MS Exchange Server?Why do I want to do this?

To lose the direct connection of MS Exchange Server (Exchange) to the Internet, affording greater security You use Merak's excellent AntiVirus protection
• You use Merak's excellent AntiSpam protection

How does it work?
Your Exchange configuration probably looks something like the following diagram

Source: Troup, Marty: Merak Instant Antispam as automated spam protection gateway for Microsoft Exchange; 2003; marty@icewarp.us
Your Exchange is connected directly to the Internet and has to deal with all the unsolicited incoming traffic.
To use Merak as an AntiVirus/AntiSpam Gateway, you should reconfigure your setup to look something like this:

Source: Troup, Marty: Merak Instant Antispam as automated spam protection gateway for Microsoft Exchange; 2003; marty@icewarp.us
The Merak server is placed between the Exchange Server and the internet and Merak's Rich Filtering features can be applied to all your incoming messages, offering effective protection for your Exchange Server.
To Set Merak to be a Relay Server for Exchange you should proceed as follows?

Check Merak's DNS servers In Merak's Config go to Mail Service -> SMTP Service -> General tab and check that Use DNS Lookup is selected

Stop any unnecessary services, such as POP3/IMAP, IM (Instant Messaging), Calendaring, FTP etc. in System -> Services. Setup AntiVirus Go to Anti-Virus menu node.
Check Active option to enable Integrated AntiVirus.

Set Merak's AntiVirus settings to suit your requirements. Full details of AntiVirus settings can be found in the Administration manual.
Set the Update Schedule to automate Antivirus DB updates.
Setup Merak Instant AntiSpam (MIAS) Go to Anti-Spam menu node and enable Instant the AntiSpam Engine.

Configure Merak's AntiSpam engine and rules as per your requirements
This includes Content Filters, Intrusion Prevention, Black & White Lists, Static Filters and many others.
For full information please refer to the MIAS documentation.
Set up Domains in Merak corresponding to Domains which are Handled by Exchange In Domains & Accounts -> Management, create a new Domain with the same name as it has on Exchange.
Set the Domain type to Backup domain
Set the Value: option to the IP address or hostname of the server where the Exchange domain is running.

Click Save to save the domain settings.
Repeat this procedure for all your domains.
Setup DNS Records to Contain Relay Host
Add an A record to associate the IP address of the Merak Server with its hostname.
• Add an MX record to associate the domain name with the hostname/IP of the Merak Server. This MX record should be set with a higher priority than the MX record for the Exchange Server.
• Repeat this procedure for all your domains.

Once this is set up correctly, all incoming messages will be

routed to the Merak Server be analysed for Spam be analysed for Viruses be actioned as per your settings (deleted, quarantined etc.)
• and all "clean" messages will be passed to your Exchange Server

dennishan

需要实施以上架构的Exchange/Domino等邮件系统用户，请和我们联系。
上海地区免费上门安装调试，其他地区远程支持。
30天免费试用，看到效果后再付费。
Merak可以和Exchange/Domino安装在同一台服务器,这样对硬件的投入成本为零。

021-51028603

[ 本帖最后由 dennishan 于 2006-11-28 09:03 编辑 ]

tdk

图都没了

dirone

我处理一下,过段时间给大家传个新的

soee

最近正需要软件邮件网关呢,研究下.
可惜要改DNS,麻烦啊

boboli

不错,又出新东西了

vansly

?这个功能挺好的
没怎么明白 ?