IBM Lotus Protector for Mail Security
ΓU
2.8.1
vn
© Copyright IBM Corporation 2006, 2013.
U.S. Government Users Restricted Rights — Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM
Corp.
XΘG2013 10 δ
²
1 º[ . . . . . . . . . . . . . 1
2 W . . . . . . . . . . . 3
tD . . . .
¼í . . . .
O. . . . . .
í≥ótmΩT .
t≈MLk
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
4
4
5
5
6
3 w . . . . . . . . . . . . . 7
Uⁿ≤s.
.
.
.
.
.
.
.
.
.
© Copyright IBM Corp. 2006 , 2013 .
.
.
.
.
w≤s. . .
τwi .
τw. . .
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
. 8
. 8
. 9
4 NΣ . . . . . . . . . . 11
N . . . . . . . . . . . . . . 13
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
. 14
. . . . . . . . . . . . . . . . 15
. 7
iii
iv
Lotus Protector for Mail Security 2.8.1G ΓU
1 º[
Lotus® Protector for Mail Security 2.8.x iHbHú@w SUSE Linux Enterprise Server 10 W⌡μC
Lotus Protector for Mail Security version 2.8.1.0 N@t SUSE Linux Enterprise Server
11C
{Od{]wΩABunÑu÷¼íC
pí{p≤ΩTA\yWzC
© Copyright IBM Corp. 2006 , 2013 1
2
Lotus Protector for Mail Security 2.8.1G ΓU
2 W
{XÑqCTOzFΦíBníAHp≤⌠Cπwj 1 pC
²OApGzíú¼HiμAiαn≤hí[HCMzí°xsΩqºú
PAiαnXpXíC
UϕJío≤G
ϕ 1. {Ñq. ϕμCX{UÑqA@@íC
ÑqX
ÑqKn
í
1
Uⁿ≤s
Uⁿ≤síA]⌠⌠ΩyqMiWeúPC
2
ws@t
≤s@tHI{wC@t≤sbt@P⌡μ{μ@t
úPW⌡μC]AziHb Lotus Protector for Mail
Security ≥⌡μPAUⁿw≤sC²OAbn 20 [H¿
ÑqñAl≤BzαC 50%C
q@ºßAw{≥iμABún
JBzC
YnεαCvTA{A²s@twb@δq
CiμC
Yzb@tíJAiHε{AúvT⌡μñ
tC
w@tnúPμíTºPtmΩCws@tºßAt
÷¼A]Ñq 3NΩ૨nμí]Ñq 4 - 5C
3
A÷¼
4
TºxsΩwH α½TΩA{≈TºxsΩwCbÑq 4 Ñq 9 iμα
íAtLkCIBM® xSeries 3650 M3 wΘwp÷¼í 30 HUC
Ω÷¼í°iΩHnαΩqúPC VMware t
qn≤híC
5
{μtm≈
6
½sΩΘΩ b૨ºßAtN½sC
mC
7
NΩαsTº {TºΩ૨ SUSE Linux Enterprise Server 11 nμíC¿
xsΩw
{ºßATºΩNúαAP@teC
8
wstm
{tmΩ૨ SUSE Linux Enterprise Server 11 nμíC¿
{ºßAtmΩNúαAP@teC
9
Mú
úαísC
10
½sA
¿ºß½sAABt@δ@C
© Copyright IBM Corp. 2006 , 2013 α½tmΩA{≈{μtmΩC
3
tD
bz}l{ºeA²τzt⌡μ≥Θh
AB¼≈iíC
ΘD
zt⌡μ 2.8.0.0 ≤sΘAiiμ≤sCYwΘO 2.7.0.0 ≤
Ab≥iμσ≤ñⁿºeA²NΘ 2.8.0.0 C
Ynq Lotus Protector Manager °{μΘh
A÷@U > tC Lotus Protector Manager O Lotus
Protector for Mail Security Web ¼z
A]z
LMIC
íD
zWn 50% iíA Lotus Protector for Mail Security Ωwqll≤Tºxs
ºCYΓniíúú¼A{oX⌠Aú≤tCbz±≤h
íºßAYiA
⌡μC
Yn°{μíAb Lotus Protector Manager ÷@U > ΩC z]iHzL SSH root
v¡nJDxA⌡μUCⁿOGdf -h
¼í
Yz]íú¼Lk≥AiH Lotus Protector uπ¼íC
÷≤o@
ⁿLotus Protector for Mail Security ΩwPTºs±A 50% iíAα⌡μ
CpnAziHε Lotus Protector Odqll≤TºPΘxΩí°
¼íC
{
v YnεTºs±Odqll≤íAb Lotus Protector Manager ñA÷@U Mail Security > h½≤ > Tºs±C
v YnεOd SMTP ΘxíAb Lotus Protector Manager ñA÷@U SMTP > tm > @C
v YnεOdTºlΘxíAb Lotus Protector Manager ñA÷@U Mail Security > h > T
ºl/ú°iC
4
Lotus Protector for Mail Security 2.8.1G ΓU
O
QßOmC
b Lotus Protector for Mail Security ≤h½°AΩiμOípñA@²ñm]Oñ
CiΣL¿C
O¿⌡μ 2.8 ≤s Lotus Protector for Mail SecurityCbuOñvºßA
zúnYΣLO¿C²OA≥ 2.8.1.0 jq]]A≤δ}ºtP¡wA
OñC¿D½nC
í≥ótmΩT
ímΩTbíiα≥óC IP }ⁿwiα≤ABh½≤ºY\αiα
ñC
≤ IP }ⁿú
Yz DHCP ⁿú IP }Abm½sßAiαoMeúP}C]}ⁿú≤
iαñl≤ΘAbmºeA²Σⁿú@RAIP }C¿ºßAiHA∩
DHCPC
$(FILE) ¿S⌠≤hα
bYípUAh½≤ $(FILE) ¿
¬eCw]A{úOdHoΦí
C]AhLk÷w⌡μCYnTOúzZhμA≈h½≤ñ $(FILE) ¿
C¿ºßANsßmC
GLotus Protector for Mail Security w]tmú $(FILE) ¿CúDzNhq $(FILE) ¿
Ahún⌡μ⌠≤@C
ziH° $(FILE) ¿ºh½≤MμCzL SSH root v¡nJDxAMßΣJUCⁿ
OG
grep -B 1 "JChGSUxFL" /etc/mailsec/cpe/mailsec_policyobjects1_1.xml
dⁿO≡h½≤MμA≈C@C
2 W
5
t≈MLk
}lºßALotus Protector for Mail Security @t≈MH{μtm]wAD∩gb
¿ºeúLkC
Lotus Protector for Mail Security bWAxs@tπ≈MH{μtm]wC⌠
≤úuα@t≈sbCb{íAOs@twCYnMúw
íARúxsbñt≈C]Ab}lºßAzNLkAq
≈MñtC
YnOdiNte¼AαOAbz}lºeA²t≈ SnapshotCY Lotus
Protector for Mail Security bΩwΘ]p VMwareW⌡μAΩ≈ SnapshotCYzípbΩ
ΘwΘW⌡μAUⁿ@HW±tm SnapshotC
YnUⁿtm SnapshotAb Lotus Protector Manager ñA÷@U≈P > tAMß÷@Uztm
≈ > Uⁿ
Yzb@tß²bπ¿ºeA⌠F{As≈tCb
Lotus Protector Manager ñA÷@U≈P > tAMß÷@Uzt≈ > t≈C
bºßALotus Protector for Mail Security sA≈@t≤sC
6
Lotus Protector for Mail Security 2.8.1G ΓU
3 w
MAz²UⁿsΘAMßq Lotus Protector Manager lwC}lBz{ßAª≥
⌡μ¿ABúi@B
JBzC
b}lwºeA²\yWzWNñΩTC
q Lotus Protector Manager ⁿOμWlwC}liμwºßAziHbA÷¼s@tß≥w
ºeAdΣiCAb¿ºeLkC
pezAYzb@tíoAiHε{AúvT⌡μñtC²NLkA
²et≈C
w¿ºßAiHdΘxHτ¿\C
Uⁿ≤s
úΘ≤sßALotus Protector Manager bΣWπ@hqC
}lºe
qX{ºßAYi}lUⁿC
÷≤o@
Yz≤tWUⁿΘAUⁿ{Y}lCh¿UC{H}lUⁿC
{
q Lotus Protector Manager ÷@U≤s > ≤sPv AMß÷@UUⁿC
}lUⁿºßAª≥⌡μ¿ABúi@B
JBzC
Uⁿ¿ºßA≤sPvWπqAqzwgiHwΘC
U@B
{bYwi}lwC
© Copyright IBM Corp. 2006 , 2013 7
w≤s
ziq Lotus Protector Manager ⁿOμA}lw≤sC
}lºe
v Uⁿ≤sºßALotus Protector Manager Wπ@hqAqzwgiHwΘC
v b}lweA²\¬σ≤y¡WΩTC
{
v Ynq Lotus Protector Manager }lwA÷@U≤s > ≤sPvAMß÷@UwC
v YnqⁿOμ}lwAzL SSH root v¡nJDxAΣJUCⁿOGupdate-control -i fw
½nGwbiμA½]÷¼tCñw{iαPtlaHΩyóCYzb
wíJDAYsΣHC
bxsjqΩtWAwiαnpα¿C
U@B
w¿ºB½sAºßAziHdΘxHτw¼AC
τwi
w{úú÷ΣiNúC÷
{ΩibΘΘxoC
÷≤o@
bz}lw@Ñqú[ßAYiq Lotus Protector Manager °÷≤wiΩTCYn\÷≤
si≤ΩTAUC{í}ΘxC
G@t¿ºßAAú÷¼CtLkⁿ
Lotus Protector Manager ⁿOμs
uC@δsu\αbw¿B½sAºßC
{
zL SSH ²MvqⁿOμnJ Lotus Protector for Mail SecurityCσrsΦ}≤HU²
ñΘΘxG/var/spool/updates/XPU
8
Lotus Protector for Mail Security 2.8.1G ΓU
τw
w¿ºßA°BzP≤ΘxAT{¿\C
÷≤o@
w¿ºßA{½sAsuB@Cz{biHstAT{wgw
C
{
v Yn°BzA} Lotus Protector Manager C
v Yn°≤ΘxAb Lotus Protector Manager ñ÷@Ut > ≤C
3 w
9
10
Lotus Protector for Mail Security 2.8.1G ΓU
4 NΣ
zp⌠≤÷{DΣLDAiHp IBM ΣñCXⁿΣAΩμßAú
i IBM ú
NΣC
IBM ΣJf⌠
bzp IBM MDΣºeA²yX IBM ΣJf⌠A⌠}Ghttp://www.ibm.com/software/supportC
IBM Software Support Guide
Yzn
NΣAQ IBM Software Support Guide]⌠} http://www14.software.ibm.com/webapp/set2/
sas/f/handbook/home.htmlWCΦkAp IBM ΣñC
ΓUúUCΩTG
v UΣAnD
v zbΩa/aßΣñqX
v qe²¼ΩT
© Copyright IBM Corp. 2006 , 2013 11
12
Lotus Protector for Mail Security 2.8.1G ΓU
N
ΩTYw∩ IBM bⁿΩúºúPA}oC
bΣLΩa/aAIBM iαúσ≤úUúBA\αCóϕa IBM NϕAH
oϕaeúúMAº÷ΩTCσ≤bú IBM úB{íAAúϕtuα
IBM úB{íAC⌠≤\αϕúB{íAunúI IBM z]úvAKiN
CúLA⌠≤D IBM ºúB{íAAμtd@º⌠Mτd⌠C
σ≤íºDDeiα]t IBM ºMQMQCσ≤úezMQº⌠≤
vCziHúXvdA
τHG
IBM Director of Licensing
IBM Corporation
North Castle Drive
Armonk, NY 10504-1785
U.S.A.
pGO÷ (DBCS) ΩTvdAóbΩa/a IBM z]úí
AúXv
dA
τHG
z]úvkWMz]úk
IBM Japan Ltd.
1623-14, Shimotsuruma, Yamato-shi
Kanagawa 242-8502 Japan
UCq¿YP
Ωºk°ΦAY°úAGInternational Business Machines Corporation uu{pv
úXAúú⌠≤qºOAΣñ]A²ú¡≤úHWwBAΓSwºA
⌠tOCabYμ÷WúⁿtOúA]Aon∩ QßúúoAC
ΩTñiα
NWLΩWC]AIBM w
qFN
qßeJsñCPA
IBM LtμqoH∩]σ≤ñúú]{íC
ΩTñ⌠≤∩D IBM ⌠zAIBM ∩
⌠úúOC
⌠WΩD IBM
ú≈@íA⌠≤]
⌠y¿I QßvßC
IBM oHUAϕΦí
G Qßú⌠≤ΩTAL∩ QßtdC
pG{íº≥vHF (i) bO{íMΣL{í]]A{íºíμ½ΩTAH (ii) ¼
μ½ΩTA]n÷ΩTAóG
IBM Corporation
P.O. Box 12195
3039 Cornwallis Road
Research Triangle Park, NC 27709-2195
U.S.A
WzΩºoΣSϕn≤AbYípUIOΦoC
© Copyright IBM Corp. 2006 , 2013 13
IBM YΦºuIBM ßXvBuIBM Ω{ívXv⌠≤PÑX°Aúσ≤ú
v{íPΣAvΩC
@÷≤ IBM ΦwºnAHiα≤∩MPAúAtμqABB
ÑnNϕPD
«C
IBMBIBM xM ibm.com M Lotus O International Business Machines Corp. by\hU
UCΣLúAWiαO IBM ΣLqCziHb Web www.ibm.com/legal/
copytrade.shtml o IBM {μMμC
Linux Y Linus Torvalds bⁿΩ/ΣLΩaaºC
UNIX Y The Open Group bⁿΩ/ΣLΩaaºUC
Microsoft Windows O Microsoft Corporation bⁿΩ/ΣLΩa/aC
ΣLqBúAWAiαTºAxC
14
Lotus Protector for Mail Security 2.8.1G ΓU
HñσrAσrAS
ϕº
CC
Ñq
Θ
ef
Θx
4
≤
Θx
9
Θ
8
IBM ΣJf⌠
IP }ⁿw
3
11
5
4
L
eQTf
Ωα
LMI
3
4
Lotus Protector for Mail Security
NΣ 11
qll≤Od
ε 4
Lotus Protector Manager
e¡f
eQf
S
¿
Bz
SMTP Θx 4
Snapshot 6
5
z
q
ε 4
4
eCf
}
IP
9
4
SUSE Linux Enterprise Server
D 4
z{í
Lotus Protector
1
V
4
VMware
3
5
@t 1, 6
NΣ⌠ 11
≤s
Uⁿ 7
@t
6
t≈M
6
eQf
eSϕrf
RA IP }
$(FILE) ¿ 5
update-control ⁿO
5
8
eQCf
¿
\ $(FILE) ¿
5
eKf
≤Θx
° 9
eQKf
O
5
eQf
h½≤ 5
TºlΘx
4
eQEf
÷¼í
eQ@f
3, 6
α
Ω 3
Bz 9
eQGf
≈M
l≤Od
ε 4
6
© Copyright IBM Corp. 2006 , 2013 3
D
DHCP
5
I
IBM
ΣJf⌠ 11
NΣ 11
Software Support Guide 11
IBM Software Support Guide 11
15
16
Lotus Protector for Mail Security 2.8.1G ΓU
Printed in Taiwan