Support

Support for business applications

Kaspersky Security 8.0 for Linux Mail Server

Preparing the application for operation

Starting automatic initial configuration of the Kaspersky Security 8 for Linux Mail Server

Kaspersky Security 8.0 for Linux Mail Server
Knowledge Base Online Help
Advice & Solutions FAQ Download Forum Contact support Recovery tools Product videos

Starting automatic initial configuration of the Kaspersky Security 8 for Linux Mail Server

July 4, 2024

ID 67381

Initial configuration of Kaspersky Security 8 for Linux Mail Server can be performed automatically.

You can create a configuration file that saves your responses to commands by using the --create-auto-install=<full path to the configuration file> parameter when running the program's initial configuration script.

Possible values should be typed using lower-case characters.

To start automatic initial configuration of Kaspersky Security 8 for Linux Mail Server, run the following command:

  • for Linux:

/opt/kaspersky/klms/bin/klms-setup.py \

--auto-install=<full path to the configuration file with the saved answers>

  • for FreeBSD:

/usr/local/bin/klms-setup.py \

--auto-install=<full path to the configuration file with the saved answers>

The settings of the configuration file with answers are given in the following table.

Configuration file settings with answers for initial configuration of Kaspersky Security 8 for Linux Mail Server

Setting

Description

Available values

EULA_AGREED

Required setting.

Acceptance of the terms of the License agreement.

yes

PRIVACY_POLICY_AGREED

Required setting.

Acceptance of the terms of the Privacy Policy.

yes

KSN_AGREED

Required setting.

Acceptance of the terms of the Kaspersky Security Network Statement.

yes | no

KSN_STATISTICS_AGREED

Required setting.

Acceptance of the terms of the Supplementary Kaspersky Security Network Statement.

yes | no

KEY_FILE

Optional setting.

Path to the key file.

<path>

Case sensitive.

BACKUP_CUSTOM_PATH

Optional setting.

Custom path to Backup. If the line with this setting is absent, the default path to Backup is used (/var/opt/kaspersky/klms/backup).

<path>

Case sensitive.

BACKUP_CUSTOM_DB

Optional setting.

Custom path for connecting to the Backup database.

If the line with this setting is skipped, the default setting is used (dbname=backup user=kluser host=/var/run/klms).

Kaspersky Security 8 for Linux Mail Server supports databases of PostgreSQL version 9.1 or later.

<connection_string>

Case sensitive.

SCANNER_SOCKET

Optional setting.

Socket used by the scanner. If the line with this parameter is skipped, the parameter retains its default value (unix:/var/run/klms/klms_scanner_sock).

inet:port@IP | unix:<path_to_socket>

Case sensitive.

MTA

Required setting.

Type of integration with the mail server.

postfix | exim | sendmail | qmail | manual

POSTFIX_INTEGRATION_TYPE

Required setting.

Type of integration with the Postfix mail server.

prequeue | afterqueue | milter

POSTFIX_MILTER_SOCKET

Optional setting.

Socket used for integration with the Postfix mail server via the Milter protocol.

If the line with this setting is skipped, the setting takes the value inet:[email protected].

The setting is ignored if:

  • The value of the MTA setting is not equal to "postfix".
  • The value of the POSTFIX_INTEGRATION_TYPE setting is not equal to "milter".

inet:port@IP | unix:<path_to_socket>

Case sensitive.

POSTFIX_SMTP_PROXY_SOCKET

Optional setting.

Socket used for integration with the Postfix mail server with "after-queue" and "before-queue" integration types.

If the line with this setting is skipped, the setting takes the value inet:[email protected].

The setting is ignored if:

The value of the MTA setting is not equal to "postfix".

  • The value of the POSTFIX_INTEGRATION_TYPE setting is equal to "milter".

inet:port@IP | unix:<path_to_socket>

Case sensitive.

POSTFIX_FORWARD_PORT

Optional setting.

TCP port for forwarding scanned messages in the case of integration with the Postfix mail server.

If the line with this setting is skipped, the setting takes the value "10026".

The setting is ignored if the value of the MTA setting is not equal to "postfix".

<port>

POSTFIX_FAILTYPE

Optional setting.

Default action on a message in the case of integration with the Postfix mail server via the Milter protocol.

If the line with this setting is skipped, the setting takes the value "Tempfail".

The setting is ignored if:

  • The value of the MTA setting is not equal to "postfix".
  • The value of the POSTFIX_INTEGRATION_TYPE setting is not equal to "milter".

accept | reject | tempfail

EXIM_INTEGRATION_TYPE

The setting is required if the MTA value is equal to "exim".

Type of integration with the Exim mail server.

If the line with this setting is skipped, the setting takes the value "dlfunc" (if the Exim version has been compiled with support of dynamic linking).

The setting is ignored if the value of the MTA setting is not equal to "exim".

dlfunc | afterqueue

EXIM_FORWARD_PORT

Optional setting.

TCP port for forwarding scanned messages in the case of integration with the Exim mail server.

If the line with this setting is skipped, the setting takes the value "10026".

The setting is ignored if the value of the MTA setting is not equal to "exim".

<port>

EXIM_FILTER_PORT

Optional setting.

Port to be monitored by the scanner when filtering messages arriving from the Exim mail server.

If the line with this setting is skipped, the setting takes the value "10025".

The setting is ignored if the value of the MTA setting is not equal to "exim".

<port>

SENDMAIL_USES_MC

Optional setting.

Enables the option to edit or compile a file with the MC extension, or edit a file with the CF extension.

If the line with this setting is skipped, the setting takes the value "1".

The setting is ignored if the value of the MTA setting is not equal to "sendmail".

0 | 1

SENDMAIL_MILTER_SOCKET

Optional setting.

Socket used for integration with the Sendmail server via the Milter protocol.

If the line with this setting is skipped, the setting takes the value inet:[email protected].

The setting is ignored if:

  • The value of the MTA setting is not equal to "sendmail".
  • The value of the SENDMAIL_USES_MC setting is not equal to 1.

inet:port@IP | unix:<path_to_socket>

Case sensitive.

SENDMAIL_FAILTYPE

Optional setting.

Default action on a message in case of integration with the Sendmail server via the Milter protocol.

If the line with this setting is skipped, the setting takes the value "tempfail".

The setting is ignored if:

  • The value of the MTA setting is not equal to "sendMail".
  • The value of the SENDMAIL_USES_MC setting is not equal to 1.

accept | reject | tempfail

QMAIL_BIN_DIR

Optional setting.

Path to the Qmail directory.

If the line with this setting is skipped, the setting takes the value "var/qmail/bin".

The setting is ignored if the value of the MTA setting is not equal to "qmail".

<path>

Case sensitive.

QMAIL_USER

Optional setting. The default value is "qmaild".

Defines the user name of the qmaild service.

The line with the setting is ignored if the value of the MTA setting is not equal to "qmail".

<login>

Case sensitive.

USE_UI

Optional setting.

Enables the option to use the web interface for managing the program.

If the line with this setting is skipped, the setting takes the value "no".

yes | no

WEB_UI_PORT

Optional setting.

Defines the TCP port for interaction of Kaspersky Security 8 for Linux Mail Server with an Apache web server.

If the line with this setting is skipped, the setting takes the value "2711".

The setting is ignored if the value of the USE_UI setting is equal to "no".

<port>

WEB_UI_IFACE_ADDR

Optional setting.

Defines the IP address of the host on which the Kaspersky Security 8 for Linux Mail Server web interface is installed.

The setting is ignored if the value of the USE_UI setting is equal to "no".

 

WEB_PASSWORD

Optional setting.

Administrator password for accessing the web interface of the program.

If the line with this setting is skipped, the Administrator password is not specified.

If the password specified in the line is not subject to validation, the Administrator password is not specified.

The program web interface access password is mandatory. You will not be able to log in to the program web interface without the password.

The password will not be saved in the program's initial setup configuration file with responses if this password was specified during execution of the klms-setup.pl script.

<password>

Case sensitive.

 

');
Kaspersky Endpoint Security for Business Advanced: Adaptive security of your company
Web and device controls. Data encryption. Centralized and convenient management from a single console.
');
Kaspersky Premium Support (MSA): High‑priority incident processing
Telephone and web ticket support. Fast response, monitoring and health check. Submit a request and activate the contract (MSA).