簡介
本文檔介紹如何將隔離郵件從ESA上的本地垃圾郵件隔離區移動到SMA上的集中垃圾郵件隔離區。
如何從思科郵件安全裝置(ESA)上的本地垃圾郵件隔離區遷移到安全管理裝置(SMA)上的集中垃圾郵件隔離區?
假設
以下解決方案假設已配置SMA裝置,因此已新增ESA裝置並啟用了集中隔離。
配置摘要
- 在ESA裝置上啟用集中隔離:GUI >安全服務>垃圾郵件隔離>選中啟用外部垃圾郵件隔離
- 禁用本地隔離:GUI >監控>垃圾郵件隔離>取消選中啟用垃圾郵件隔離
- 提交和提交更改。
- 或者,通過以下流程將隔離郵件從本地遷移至中央隔離。
程式
在ESA裝置上,您需要清空隊列。要清空工作隊列,請執行以下操作:
使用CLI命令suspendlistener掛起所有監聽器,然後選擇選項「1.全部」。
> suspendlistener
Choose the listener(s) you wish to suspend.
Separate multiple entries with commas.
1. All
2. Public
3. Test
[*]> 1
請等待一段時間,直到傳遞隊列中的大多數可交付結果郵件已傳遞。(您可以在命令status和tophosts的輸出中看到「活動收件人」的數量。)
>status
...
Gauges: Current
Connections
Current Inbound Conn. 0
Current Outbound Conn. 0
Queue
Active Recipients 1
Messages In Work Queue 0
Kilobytes Used 85
Kilobytes Free 71,303,083
Messages In Quarantine
Policy, Virus and Outbreak 10
Kilobytes In Quarantine
Policy, Virus and Outbreak 50
> tophosts
Sort results by:
1. Active Recipients
2. Connections Out
3. Delivered Recipients
4. Hard Bounced Recipients
5. Soft Bounced Events
[1]>1
Status as of: Mon Sep 29 13:09:53 2014 EDT
Hosts marked with '*' were down as of the last delivery attempt.
Active Conn. Deliv. Soft Hard
# Recipient Host Recip. Out Recip. Bounced Bounced
1 earthlink.net 1 0 2 0 0
2 the.cpq.host 0 0 1 0 0
3 the.encryption.queue 0 0 14 0 0
4 the.euq.queue 0 0 2 0 0
5 the.euq.release.queue 0 0 0 0 0
如果1-2小時後,傳遞隊列中仍有一些郵件,您需要使用命令bouncerecipients選擇選項「3.All」來退回這些郵件,並等待隊列變空。
> bouncerecipients
Please select how you would like to bounce messages:
1. By recipient host.
2. By Envelope From address.
3. All.
[1]> 3
退回郵件的發件人將收到無法傳遞郵件的通知)
使用命令suspenddel暫停郵件傳送。
> suspenddel
Enter the number of seconds to wait before abruptly closing connections.
[30]>
請通過saveconfig 或mailconfig 命令備份您的配置,因為它需要清除smtp路由,稍後再將其新增回來:
> saveconfig
Do you want to mask the password? Files with masked passwords cannot be loaded using
loadconfig command. [Y]>
通過GUI轉至網路 — > SMTP路由並刪除所有SMTP路由。(請記下舊路由,因為稍後您需要再次新增)。 或者,通過CLI使用print顯示然後清除刪除。
> smtproutes
There are currently 4 routes configured.
Choose the operation you want to perform:
- NEW - Create a new route.
- EDIT - Edit destinations of an existing route.
- DELETE - Remove a route.
- PRINT - Display all routes.
- IMPORT - Import new routes from a file.
- EXPORT - Export all routes to a file.
- CLEAR - Remove all routes.
[]> print
..
[]> clear
編輯「所有其他域」 smtp路由,將其設定為SMA裝置的IP地址,並將埠設定為6025。
>smtproutes
[]> edit
Enter the hostname you want to edit.
[]> ALL
Choose the operation you want to perform:
- ADD - Add new destination hosts.
- REPLACE - Specify a new destination or set of destinations
[]> REPLACE
Enter the destination hosts, separated by commas, which you want mail for ALL to be
delivered.
Enter USEDNS by itself to use normal DNS resolution for this route.
Enter /dev/null by itself if you wish to discard the mail.
Enclose in square brackets to force resolution via address (A)
records, ignoring any MX records.
[]> mysma.com:6025
Default route updated.
驗證: 提交更改並從本地隔離區釋放2-3垃圾郵件作為測試。
> commit
Please enter some comments describing your changes:
[]> changed default smtp route to point to SMA
如果已釋放的郵件正確到達集中垃圾郵件隔離區,則釋放其餘郵件。
將所有郵件傳輸到SMA裝置後,在ESA裝置上恢復舊SMTP路由路由。
禁用本地垃圾郵件隔離區,改為啟用集中隔離區。
使用命令恢復ESA上的正常操作 簡歷。
> resume
Mail delivery resumed.