Kaspersky Security Mail Gateway with Zimbra [In progress]

[andi.bogdani]

Hello everybody

I need to configure KSMG with Zimbra but i cant connect it with the MTA. After the configuration of KSMG what should i change to Zimbra MTA ?

Thanks

[Dmitry Eremeev]

Hello everybody

I need to configure KSMG with Zimbra but i cant connect it with the MTA. After the configuration of KSMG what should i change to Zimbra MTA ?

Thanks

 

Hello,

 

please see supported mail servers - http://support.kaspersky.com/klms8#requirements

Thank you.

 

[seaowl]

In fact, Zimbra is based on Postfix and works flawless with KSMG. While this is not explicitly stated in KMGS documentation.
We tested this setup for over 1K users. The detailed configuration depends of your mail routing setup, in general you could configure:

1. Configure KSMG to receive mail for your domains
2. Configure KSMG to forward mail from your Zimbra ("trust" Zimbra IP)

3. Configure Zimbra to receive filtered mail from KMSG (https://wiki.zimbra.com/wiki/ZimbraMtaMyNetworks)
Zimbra Web Administration > Configure > Global Settings > MTA > Inbound SMTP host name > your_KSMG_hostname
Zimbra Web Administration > Configure > Global Settings > MTA > Trusted Networks > your_KSMG_ip_address

4. Configure Zimbra to send outgoing mail via KMSG (https://wiki.zimbra.com/wiki/Sending_mail_through_an_external_relay)
Zimbra Web Administration > Configure > Global Settings > MTA > Relay MTA for External Delivery > your_KSMG_hostname and port 25

5. KSMG mark every email message with special Headers ( X-KSMG-AntiSpam-Status...etc). You should configute Zimbra to understand this headers and act appropriately.
The easy way is to tell Zimbra to check this Headers during spamassassin check.
So, create file /opt/zimbra/data/spamassassin/localrules/ksmg.cf

header KSMG_SPAM X-KSMG-AntiSpam-Status =~ /^spam/
score KSMG_SPAM 10

header KSMG_MASSMAIL X-KSMG-AntiSpam-Status =~ /^mass_mail/
score KSMG_MASSMAIL 10

Thanks to this file, Zimbra Spamassasin will add +10 points score to messages, that detected by KLMS as "spam".
It is sufficient for message automatically go to folder "Spam" in user mailbox.
The other way is simple delete and archive message at KSMG gateway (then you dont need this file).

6.  Restart Zimbra, check if all going ok.
7. Change domain MX records appropriately, as all incoming mail now should go from internet to KLMS first.
8. Change domain SPF, DMARK, DKIM appropriately (if there're exist), as all outgoing mail now should go to internet from KLMS.

Edited October 31, 2017 by seaowl
typo KSMG

[bulletxt]

Hi

Will that still apply to Zimbra 8.8? 

Also how much does the Ksmg more or less cost? Can it be installed on a physical machine with Ubuntu?

[Ivan.Ponomarev]

Hello!

The system requirement are stated here: https://support.kaspersky.com/ksmg#requirements

The prices you can learn at our sales department or your local reseller. 

Thanks!

[seaowl]

6 часов назад, bulletxt сказал:

Will that still apply to Zimbra 8.8? 

Yes, that works in Zimbra 8.8. We use KSMG with Zimbra for two years, and we like it a lot (both).

[bulletxt]

Does KSMG support limiting outbound emails sending?  So for example, can I configure that   user@mydomain.com can send max 1000 emails each 24 hours?