E-Commerce Suite - Store Front Software

EMUMail Webmail - Web Based Email Client (Discontinued)

E-Mail Suite - SpamBouncer and SquirrelMail Web Mail

RsyncBackup - NetMAX system backup utility

Answers in this category:

Answers in this category:
How do I install the NetMAX E-Commerce Suite?
How do I perform basic customizations/personalizations of my Interchange store?
How do I enable realtime creditcard processing via Verisign's Payflow Pro SDK in my Interchange store?
On which platforms is the NetMAX Interchange Package supportable?
How do I enable license key delivery for downloadable products in the NetMAX Interchange store package?
How do I add products to my Interchange store?
How do I SSL enable the checkout portion of my NetMAX Interchange store?
How do I create/enable quantity discounts for all customers in my store?
How do I edit/enable download of specific items in the administrative interface

How To install the NetMAX Interchange package

Purpose:

This document outlines how to purchase and install the NetMAX Interchange package on your NetMAX server.

Prerequisites:

This document assumes the following:

The reader is executing the procedure herein on a supported platform, as defined here.
The person performing this procedure can log into the target NetMAX system as the administrative user.
The person performing this procedure is familiar with the basics of operating a NetMAX server, as outlined in the NetMAX Server Manual.

OBTAINING A LICENSE
Purchase the license code for the Interchange package from the NetMAX Store .
The proper procedure for making a purchase through the NetMAX Store is to log in with your Store userid and password, before making any purchases.
If you do not currently have an account on the NetMAX store,create one and log in before purchasing the license code. These steps are necessary so that Cybernet Systems can more easily assist you in the future if there is a question regarding NetMAX products you have purchased.
The license code can be found by typing the word interchange into the search box in the upper left of the NetMAX Store.
Follow the normal procedure to purchase the license code, which will be sent via email to the location specified in the NetMAX Store account.

Once you have received the license code, in the NetMAX interface of the server on which the Interchange package will be installed, access HOME|System|License Management.
In the Currently Installed License numbers table, enter the license code from the last few steps, but do not click the “+” icon yet.
Note the Registration Activation Key in the lower left of the table.
Keep the license management window open, and a new browser window.,
In this new browser window access NetMAX online registration .
Login and register the license number, using the Registration Activation Key noted earlier.On the resultant page, the Registration Code for your NetMAX Interchange license number is displayed. Enter this Registration Code into the NetMAX window you kept open earlier, to the right of the new license number.
Click the “+” icon to add the new license number and registration code to your NetMAX.
Click the APPROVE button.
Click the COMMIT ALL button and wait for the commit.

SETTING UP A WEBSITE
Using the Files Manager interface, create the following directory: /root/var/mnt/System/Web/interchange
Owner: root
Group: root
Owner = Read / Write / Searchable
Group = Read / Searchable
Others = Read / Searchable

Using the Files Manager interface, create the following directory: /root/var/mnt/System/Web/interchange/foundation
Owner: root
Group: root
Owner: Read / Write / Searchable
Group: Read / Searchable
Others: Read / Searchable

Access HOME|Services|WWW
Click the CREATE button.
Ensure that http is selected for Protocol
Specify /foundation for URL Path
Specify /Web/interchange/foundation for Path

Click the OPTIONS tab.
Ensure that Enable CGI Execution and Enable .htaccess to Override Defaults are both checked.

Store and commit these changes.

DOWNLOADING AND INSTALLING PACKAGES
Access the NetMAX Package Manager. (HOME|System|Package Management)
Click the ADD button.
Ensure that is FTP is selected for Mode.
Click the DOWNLOAD INDEX button to ensure you have the latest list of packages.
Once the Index download has finished, select the entry NetMAX/Addons from the Index of Categories pulldown menu.

Install the following packages:

interchange-foundation-demo-4.8.6-4.01.1.i386.rpm

With a web browser, you should now be able to access
http://<yourservername>/foundation

(The URL above will differ from the value you must supply, e.g. Replace <yourservername> with the hostname of your NetMAX server)

You will be presented with the option of entering the Admin interface, or the Customer interface. Enter the admin interface and log in with these credentials:

Username: interch
Password: pass

You will be presented with an interface from which you can begin to customize your store. In the upper-right of the window, you may click the “Help ?” image to access Interchange documentation.

Click the “Administration” button, and the select “Wizard” to get a quick start on store customization!

After completing the Wizard, you should perform the following steps, logged into the interchange admin interface:

WARNING: You must have completed the Wizard through the Launch phase before continuing with this document.

SETTING PREFERENCES
Click the Administration link in the upper-middle of the page.
Click the Preferences link.
Click the Company link.
This should bring you to a screen listing the properties of your company (e.g. Address, City,Company,Fax,Phone)
Place a check in the code column in all rows of the table, as in the image below:.

Click the Edit checked records in sequence button.

You are now in property edit mode.
Replace the errant information in the middle INPUT field with the correct value.
Click the OK button.
Repeat the last two steps until all information has been corrected.
(Last field to change is TOLLFREE)

Click the Tax link in the upper part of the page. (To the right of Info)
Remove any unnecessary entries by clicking the “X” to the right of each row.
Add any necessary Taxable locations.
Click the Update button.
It may seem that nothing happens, but a message stating that you need to apply changes for them to take effect will appear below the words Tax Configuration.

Click the Payment link in the upper part of the page. (To the right of Shipping)
Ensure that all accepted methods are “Accepted”
Ensure that all other methods are “Not Accepted”
Click the Update button.

Click the Access link in the upper part of the page. (To the right of Payment)
In the list of users, select “interch”
Click the “Delete user” button
Click “OK” in the warning dialog box.
Click any of the Apply Changes links to apply changes.

CONFIGURING FIREWALLS
You may have to add rules to your firewall to allow the web server to communicate with other machines if you have selected UPS and/or Federal Express shipping methods.
If you have selected UPS, the remote server is www.ups.com, for FedEx: www.fedex.com.

You will need 2 firewall rules for each shipping method you wish to use.
The format of the firewall rules should be the following:

• Rule 1:
  Type: “Forward” if firewall is not same as webserver, “Input” if firewall is on same machine as web server.
  Action: “Accept”
  Protocol: “tcp”
  Source Address->IP Address/Network: “www.ups.com” or “www.fedex.com” as appropriate.
  Source Port: “80”
  Destination->IP Address/Network: “hostname.domain” where hostname.domain is the IP address or hostname of the NetMAX running Interchange.
  Destination Port: 1024-65535,80,443

• Rule 2:
  Type: “Forward” if firewall is not same as web server, “Output” if firewall is on same machine as web server.
  Action: “Accept”
  Protocol: “tcp”
  Source Address->IP Address/Network:“hostname.domain” where hostname.domain is the IP address or hostname of the NetMAX running Interchange.
  Destination Port: 1024-65535,80,443
  Destination->IP Address/Network: “www.ups.com” or “www.fedex.com” as appropriate.
  Destination Port: “80”

At this point, your store is ready for personalization/customization and the installation process is complete!

It is recommended that you peruse the other documentation available to customers, in particular the HOWTO regarding SSL enabling your Interchange Store.

How To Perform Personalization and Customization of the NetMAX Interchange Store

Purpose:

PreRequisites:

• The reader is executing the procedure herein on a supported platform, as defined here.
• The person performing this procedure can log into the target NetMAX system as the administrative user.
• The person performing this procedure is familiar with the basics of operating a NetMAX server, as outlined in the NetMAX Server Manual.
• The person performing this procedure has an Interchange store already running, and can log into the adminstrative interface of the online store.

Overview

First, let us address the issue of “theme” or color-scheme modifications. Such modifications are for the most part accomplished by editing a couple of files and changing the relevant values.

The first part of this document will introduce you to these files, and will point out those values which should be changed to accomplish the most dramatic changes in the look of your online store.

STORE COLORS

• Log into the Interchange administrative interface.
• Click the Content link.
• Click the  .. icon.
• Click the  templates icon.
• Click the  foundation icon.
• Click the icon with the word theme.cfg to the right of it.
• Save the file to your computer.

Variable BACKGROUND #FFFFFF
Variable LINK #2233FF
Variable LINKHOVER #EE3300
Variable LINKDECO underline
Variable LINKHOVERDECO underline
Variable MAINCONTENT_TEXT #000000
Variable MAINCONTENT_BG #FFFFFF
Variable MAINCONTENT_FONT Helvetica
Variable MAINCONTENT_FONTSIZE 12px
Variable MAINCONTENT_WEIGHT normal
Variable CONTENTBAR1 #DDDDDD
Variable CONTENTBAR2 #BBBBBB
Variable CATEGORYBAR_TEXT #FFFFFF
Variable CATEGORYBAR_BG #006699
Variable CATEGORYBAR_FONT Helvetica
Variable CATEGORYBAR_FONTSIZE 11px
Variable CATEGORYBAR_WEIGHT normal


The preceding lines define how to display the respective elements of the store. For example, try changing the value for CATEGORY_BAR_BG from #006699 to #E6E6E6 . When you have made the changes, upload the file back into Interchange:

• Log into the Interchange administrative interface.
• Click the Content link.
• Click the  .. icon.
• Click the  templates icon.
• Click the  foundation icon.
• Click the icon with the word theme.cfg to the right of it to begin the upload process.
• Click the Browse... button and locate the file you edited. (theme.cfg)
• Specify ASCII for Upload Mode.
• Click the Upload button.

• Click the Administration link.
• Click the Apply Changes link.

ADMIN COLORS

Variable UI_C_ALINK #FF3333
Variable UI_C_BG #FFFFFF
Variable UI_C_HEADERTXT #663333
Variable UI_C_INTBLOCK #EEEEEE
Variable UI_C_INTBLOCKBAR #666666
Variable UI_C_LINK #2233FF
Variable UI_C_TITLEBARBG #999999
Variable UI_C_TITLEBARCONT #000000
Variable UI_C_TITLEBARTXT #FFFFFF
Variable UI_C_TOPBLOCKBAR #CCCCCC
Variable UI_C_TXT #000000
Variable UI_C_MENUTEXT #663333
Variable UI_C_MENUBG #FFFFFF
Variable UI_C_MENUTITLE #CC3333
Variable UI_C_MENUBARBG #CC3333
Variable UI_C_MENUBARTXT #FFAAAA
Variable UI_C_VLINK #CC3333
Variable UI_C_CONTRAST #FF3333

How To Enable real-time credit-card processing via Verisign's® PayFlow Pro ^SM Program

Purpose:

This document describes the steps needed to enable real-time credit-card processing via Verisign's ® PayFlow Pro program. Only those steps requiring modification to the software residing on a NetMAX system are discussed in any detail within this document.

Assumptions:

The reader has completed those portions of E-Commerce implementation that do not require configuration of the NetMAX system or the Interchange package. Assisting the reader to get to this point falls into the category of consultation, and is not documented here.

The reader is attempting this procedure on a supportable software platform as defined at http://www.netmax.com/support/contact_support/policy_sup_interchange.html.

Procedure:

1. Sign up for Verisign's Payflow Pro service to enable online authorization. You will receive a payment ID, payment Secret (password), and a payment vendor.

2. Access the Verisign ® Manager in your web browser and supply the proper credentials to log in.

3. Click the “Downloads” link at the top of the page.

4. In the section labelled “Payflow Pro Software Development Kit (SDK)” click the link labelled
   “Linux - libc6 / glibc2 / ELF kernels 2.0.36 and above” to start downloading the payflow link software.

5. Copy the file you downloaded in the previous steps (usually called pfpro_linux.tar.gz) to the /var/tmp directory on the NetMAX system running the Interchange package.

6. Log into the NetMAX system at the console with credentials for the “root” user.

7. Enter the following commands:
   cd ~
   mkdir tmp
   cd tmp
   tar zxfv /var/tmp/<downloaded_file>.gz
   cd verisign/payflowpro/linux
   cp bin/pfpro /usr/bin/
   cp lib/libpfpro.so /usr/lib
   ldconfig
   mkdir /var/conf/payflow
   cp -a certs /var/conf/payflow

8. Add the following line to /etc/interchange.cfg:
   Require module Vend::Payment::Signio

9. Add the following lines to /var/lib/interchange/foundation/catalog.cfg:
   Variable MV_PAYMENT_MODE signio
   Variable MV_PAYMENT_ID <yourpaymentid>
   Variable MV_PAYMENT_SECRET <yourpaymentsecret>
   Variable MV_PAYMENT_PARTNER <yourpaymentpartner>
   Variable MV_PAYMENT_CERT_PATH /var/conf/payflow/certs
   Variable MV_PAYMENT_SERVER <yourpaymentserver>

10. Restart interchange.
    service interchange restart

FIREWALLS

You may have to add rules to your firewall to allow the web server to communicate with Verisign's® servers.
If this is the case, you will need 2 firewall rules formatted as follows:

1. Rule 1:
   Type: “Forward” if firewall is not same as web server, “Input” if firewall is on same machine as web server.
   Action: “Accept”
   Protocol: “tcp”
   Source Address->IP Address/Network: the hostname of the payment server (e.g. test-payflow.verisign.com)
   Source Port: “80”
   Destination->IP Address/Network: “hostname.domain” where hostname.domain is the IP address or hostname of the NetMAX running Interchange.
   Destination Port: 1024-65535,80,443

2. Rule 2:
   Type: “Forward” if firewall is not same as web server, “Input” if firewall is on same machine as web server.
   Action: “Accept”
   Protocol: “tcp”
   Source Address->IP Address/Network: “hostname.domain” where hostname.domain is the IP address or hostname of the NetMAX running Interchange.
   Source Port: 1024-65535,80,443
   Destination Address->IP Address/Network: the hostname of the payment server (e.g. test-payflow.verisign.com)
   Destination Port: “80”

You should now be able to process credit-cards online!

How To Enable licensed downloads in the NetMAX Interchange Store

Purpose:
To explain the procedure for setting up the NetMAX Interchange store to automatically deliver licenses to customers ordering downloadable products.

Prerequisites:
This document assumes the following:

The reader is executing the procedure herein on a supported platform, as defined here.
The person performing this procedure can log into the target NetMAX system as the administrative user.
The person performing this procedure is familiar with the basics of operating a NetMAX server, as outlined in the NetMAX Server Manual.
The person performing this procedure has an Interchange store already running, and can log into the adminstrative interface of the online store.
The person performing this procedure has administrative access to their email server, or can have an administrator assist them in completing the procedure.

Procedure:
On your mail server, create a user to receive all orders via email. Ensure that this user has a home directory, and that Mail is Enabled for this user.

Create a file named “.procmailrc” in the user's home directory. The procmail filter should validate that the message comes from the proper source, has the proper subject, and is addressed to the correct person(s). Right-click this link and save the target to disk for an example.

The example procmail file will cause the email server to process all emails from the interchange user on the webserver with a subject of 'ORDER ' followed by anything (usually the order number) sent specifically to the user. The contents of the email message will be sent to the script specified after the “|” symbol via STDIN.

Next, create the script that will parse the email message, also in the user's home directory. In the example procmailrc above, the file is called “orderparser.pl.” Right-click this link and save the target to disk for an example of such a script. Note that the file must be executable by the user whose email address all orders are sent to.

Now when an order is placed, after the method of payment is verified, Interchange will send a copy of the order to the specified account. Procmail will determine that this message is about an online order, and will send the message to the script to be parsed. The script will parse the message and email the sender with the necessary license number(s).

How To Add Products to your Interchange Store

Purpose:

Prerequisites:

• The reader is executing the procedure herein on a supported platform, as defined here.
• The person performing this procedure can log into the target NetMAX system as the administrative user.
• The person performing this procedure is familiar with the basics of operating a NetMAX server, as outlined in the NetMAX Server Manual.

Overview

Web forms procedure

Repeat this procedure for each of your items.

Once you have finished entering items, click the Administration link. Click the Wizard link. Click the Preview link. Ensure that Insert products data, and Insert sample order data have No selected, and that Rebuild category lists has Yes selected, then click the Finish button.

SpreadSheet method.

After completing either method described above, you should be able to access the customer interface of your NetMAX Interchange store and view your items.

Merchandise Inventory

• In the Interchange administrative interface, click the Items link.
• Place a checkmark in the left-most column of all displayed rows.
• Click the Edit Checked Items in Sequence button
• Click the Inventory link.
• Specify the proper inventory count for On Hand.
• Click the OK button to accept inventory changes.
• Click the OK button to accept item edit changes and move to the next item.
• Repeat the above 4 steps until all products have been updated. (You will be returned to the main item list page when finished)
• Click the Administration link.
• Click the Apply Changes link.

How To SSL Enable the Checkout Portion of the NetMAX Interchange Store

Purpose:

Prerequisites:

• This document assumes the following:
• The reader is executing the procedure herein on a supported platform, as defined here.
• The person performing this procedure can log into the target NetMAX system as the administrative user.
• The person performing this procedure is familiar with the basics of operating a NetMAX server, as outlined in the NetMAX Server Manual.
• The person performing this procedure is familiar with configuring an SSL website on NetMAX Professional, or can refer to the NetMAX Professional Suite User Manual, available here.
• There are no other SSL websites configured on the same IP as the NetMAX Interchange store.

Overview

Interchange admin interface Steps

NetMAX interface steps

At this point, your NetMAX Interchange store should send users to the SSL encrypted portion of the store when the Check Out button is clicked.

File Edit

Restarting Interchange

Interface changes

• Access the Interchange administrative interface.
• Edit the item/items for which quantity discounts are to be available.
• In the item edit screen, click the link Pricing
• Put the per-unit cost for each quantity available.
• Click OK.

1. Log into the Interchange administrative interface
2. Click the Administration link toward the top of the page
3. Click the Tables link beneath the Administration link
4. Click the Edit icon in the row for the products table
5. Select the product you wish to edit by clicking on its SKU
6. Click the standard view link at the top of the page
7. Select download and dl_location from the fields to edit
8. Click the OK burron at the bottom of the screen
9. At this point, you should be able to access the item editor and specify download options for products.

Answers in this category:
Why am I getting the message "This page contains both secure and nonsecure items" from my browser?
Why is EMUMail Webmail running so slow?
Why can't I connect to Webmail using the IP address of the server?

This results in Microsoft Internet Explorer displaying the following warning box:

This page contains both secure and nonsecure items.

Do you want to display the nonsecure items?

Yes      No      More Info

Typically you will want to click on "Yes" in order to continue with your session.

Initial Login

After installation, you will want to log in for the first time and fill out the short questionaire. It may take a while for the form to come up, because Webmail is doing some initializing. Once you submit the form, it can take a while to respond, because Webmail will attempt to send the information in an email message using its built in SMTP server to smtp.emumail.com. If you have a firewall blocking this connection, or if the connection fails for some other reason, you may need to wait for Webmail to time out before it lets you continue.

Calling Home for Ad Tracking

If you have a version of Webmail that displays ads, it will attempt to connect to www.emumail.com via HTTP in order to send tracking information. If you have a firewall blocking this connection, or if the connection fails for some other reason, you may need to wait for Webmail to time out before it lets you continue.

Downloading Ads

If you have a version of Webmail that displays ads, your web browser will attempt to download the ad from the ad server. Because the ad appears at the top of the page, it may take awhile for your browser to load and display the page if it takes a while to download the ad. If you have a firewall blocking the download of the ad, or if the connection fails for some other reason, you may need to wait for your browser to time out before it lets you continue.

For example, if you try to go to:

https://192.168.0.1:1010

Your browser will get a redirect to something like:

https://www.yourdomain.com:1010/webmail/

If you're specifying an IP address, it's more than likely because the canonical name of www.yourdomain.com doesn't resolve to the IP address of your Webmail server, so this redirect won't work.

Instead, what you will need to do is add the webmail directory to your original URL request. Then you won't have to deal with the redirect. For example:

https://192.168.0.1:1010/webmail/

Answers in this category:
What does SpamBouncer do?
How do I install the NetMAX SpamBouncer package?
How do I administer SpamBouncer?
How do users configure SpamBouncer?
How do I ensure that the proper mail is being filtered, and that I am not losing important messages?
How do I update the list of hosts which my NetMAX blocks using the E-Mail Powerpack?

SpamBouncer reference:

Purpose:

PreRequisites:

Overview

SpamBouncer is a package that adds spam filtering capabilities to a NetMAX Professional Suite server. It has been tested for suitability on small-to-medium sized installation base. Please note that this package is very CPU intensive, and may not scale well for applications of greater than 50 users. If the SpamBouncer package has a negative impact on the performance of your mailserver, please refer to the SpamBouncer Administration document on how to disable it.

As printed at www.spambouncer.org, the SpamBouncer is a set of procmail recipes, or instructions, which search the headers and text of your incoming email to see if it meets one or more of the following conditions:

• Originates from an email address known to belong to a spammer.
• Originates from known spam source sites, domains or hosts -- internet sites which exist solely or primarily to spam or provide services to spammers.
• Originates from irresponsible, or rogue, Internet Service Providers (ISPs), who permit spamming from their sites and fail to take appropriate action against spammers.
• Was sent using a bulk email program whose only or primary purpose is to send large quantities of junk email.
• Contains headers which match the SpamBouncer's profile of definite or probable spam.
• Contains body text strings which match the SpamBouncer's profile of probable spam.
• Contains body text strings which match the SpamBouncer's profile of a particular virus or class of viruses.

The SpamBouncer sorts suspected spam into three categories -- email sent by a virus, email from known spam sources which is definitely spam, and email which is probably spam, but might also be legitimate. It then tags each email with appropriate headers for the spam classification, and responds according to the parameters you have set. Depending on how you set it up, it will:

• Simply tag the suspected spam and return it to your main incoming mailbox, allowing you to set up Eudora, Pegasus Mail, or another POP mail program to retrieve and sort your mail.
• Tag the suspected spam, delete spam from known spam sources, and file suspected spam in a separate folder.
• Send a simulated MAILER-DAEMON daemon "bounce" to known spammers in hopes that they will think your email address is invalid and remove you from their spam lists.
• Complain to the "upstream providers" of known spammers or spam sites/domains, asking that they disconnect the internet service of the spammers.
• Notify senders of email tagged as probable spam that their email was intercepted, and give them a password to resend their email and bypass spam filtering if their email was legitimate. (Spammers almost never try to bypass filtering when warned this way -- in most cases, they don't even read replies to their mail.)

SpamBouncers default NetMAX configuration will:

• Tag suspected spam and file suspected spam in a separate folder in the targeted user's home directory. Tagging allows you to set up Eudora, Pegasus Mail, or another POP mail or IMAP program to retrieve and further sort your mail.

SpamBouncer installation reference:

Purpose:

PreRequisites:

• The reader is executing the procedure herein on a supported platform, as defined here.
• The person performing this procedure can log into the target NetMAX system as the administrative user.
• The person performing this procedure is familiar with the basics of operating a NetMAX server, as outlined in the NetMAX Server Manual.

Obtaining A License

Purchase the license code for the SpamBouncer package from the NetMAX Store .
The proper procedure for making a purchase through the NetMAX Store is to log in with your Store userid and password, before making any purchases.
If you do not currently have an account on the NetMAX store,create one and log in before purchasing the license code. These steps are necessary so that Cybernet Systems can more easily assist you in the future if there is a question regarding NetMAX products you have purchased.
The license code can be found by typing the word spambouncer into the search box in the upper left of the NetMAX Store.
Follow the normal procedure to purchase the license code, which will be sent via email to the location specified in the NetMAX Store account.

Once you have received the license code, in the NetMAX interface of the server on which the SpamBouncer package will be installed, access HOME|System|License Management.
In the Currently Installed License numbers table, enter the license code from the last few steps, but do not click the “+” icon yet.
Note the Registration Activation Key in the lower left of the table.
Keep the license management window open, and a new browser window.,
In this new browser window access NetMAX online registration .
Login and register the license number, using the Registration Activation Key noted earlier.On the resultant page, the Registration Code for your NetMAX SpamBouncer license number is displayed. Enter this Registration Code into the NetMAX window you kept open earlier, to the right of the new license number.
Click the “+” icon to add the new license number and registration code to your NetMAX.
Click the APPROVE button.
Click the COMMIT ALL button and wait for the commit.

Downloading and Installing the SpamBouncer Package

Access the NetMAX Package Manager. (HOME|System|Package Management)

Click the ADD button.

Ensure that FTP is selected for Mode.

Once the Index download has finished, select the entry NetMAX/Addons from the Index of Categories pulldown menu.

Install the SpamBouncer-1.5-4.02.0.i386.rpm package.

The SpamBouncer package will install all SpamBouncer application files and update each user's home directory with a default SpamBouncer .procmailrc file. The default SpamBouncer .procmailrc file is essential for the activation of SpamBouncer for each user. If a user's home directory already contains a .procmailrc, the SpamBouncer package will not overwrite it, but instead notify the administrator. Users that already have a .procmailrc file must integrate the SpamBouncer .procmailrc content with their .procmailrc file to enable SpamBouncer for their account. SpamBouncer will be active for users whose home directories were not listed as containing a .procmailrc file during the package installation immediately after the package is installed.

SpamBouncer administration reference:

Purpose:

PreRequisites:

• The reader is executing the procedure herein on a supported platform, as defined here.
• The person performing this procedure can log into the target NetMAX system as the administrative user.
• The person performing this procedure is familiar with the basics of operating a NetMAX server, as outlined in the NetMAX Server Manual.

Overview

This document outlines how to administer the SpamBouncer system on a global level, and is intended for system administrators.

Please note that the SpamBouncer is very CPU intensive when filtering mail. It has been tested on a small-to-medium sized network of about 50 users. For larger installations, SpamBouncer may adversely affect the performance of the mailserver. If this is the case, it can easily be disabled using the instructions below.

SpamBouncer can be globally enabled or disabled by an administrator and can be configured to handle spam in a variety of ways.

SpamBouncer enable/disable

SpamBouncer can be globally enabled or disabled via the "spambouncer" entry in /etc/sysconfig/netmax. Simply set the "spambouncer" variable within this file equal to "yes" to enable SpamBouncer or "no" to disable SpamBouncer. SpamBouncer is enabled by default immediately after the SpamBouncer package installation. This file can be edited through the NetMAX Files Management interface where it can be found within the "root" file tree.

SpamBouncer GlobalNoBounce

The SpamBouncer GlobalNoBounce file is the system-wide version of the per user .nobounce file. This file is named "globalnobounce" and is located in /usr/netmax/spambouncer. Using the NetMAX Files Management interface an administrator can enter email sources that do not require filtering system-wide. This will speed up delivery of your mail and reduce the work your server must do to filter mail, since email from addresses in the "globalnobounce" file is filtered for viruses, but nothing else. In addition, if you regularly add the email addresses of acceptable sources to the "globalnobounce" file, you can use more aggressive filtering options in the SpamBouncer without having a large number of false positives. A sample "globalnobounce" file is shown below:

friend@home.com anotherfriend@home.com boss@work.com coworker@work.com mom@juno.com brother@yahoo.com kid@highschool.kids.us

You can also add partial strings, such as entire domains or subdomains, or partial email addresses, to the "globalnobounce" file. For example, if you know that all email sent from the subdomain engineering.work.com is from one of your coworkers and nobody else, you could add that string to the "globalnobounce" file just as you would add an email address. If the have a friend who habitually changes ISPs or uses email accounts at multiple sites, but whose email address always starts with skywalker@, you could add that string to your "globalnobounce" file just as you would add an email address.

NOTE: Be careful about adding partial strings or entire domains to the "globalnobounce" file. If the string you add is a common string that might be found in email other than the email you are expecting, this can cause the SpamBouncer to think that a spam is okay and not filter it. For example, if you have several friends who have email addresses at aol.com, and you add aol.com to the "globalnobounce" file, the SpamBouncer will pass anything that appears to be from anyone at aol.com without filtering it. Lots of spammers forge email address at aol.com in the From: lines of their spam, so this means you would get a lot of spam in your inbox that the SpamBouncer would otherwise have caught. It is safest to add only complete email addresses to the "globalnobounce" file unless you are an experienced user and understand the implications of a partial match.

SpamBouncer spam handling configurations

SpamBouncer can be configured to handle spam in a variety of ways. Configuration at the NetMAX administrator level occurs within the /usr/netmax/spambouncer/NetMAXsbrc file. This file can be edited through the NetMAX Files Management interface where it can be found within the "root" file tree. The following sections describe typical administrator scenarios and SpamBouncer configurations that correlate with these scenarios. These sections were copied from www.spambouncer.org . SpamBouncer's default configuration correlates with the "Risk-Averse or New Users" configuration.

Risk-Averse or New Users

Users who do not want to risk false positives should use this configuration. This is also the configuration you should start with, regardless of what you do after you become comfortable with Unix and the SpamBouncer.

• BLOCKFOLDER and SPAMFOLDER. Set both of these variables to the name of a folder where you want the SpamBouncer store email that it catches. Once every few days, review this folder to make sure no legitimate email was caught in error. Add the email address of anyone whose email was caught in error to your NOBOUNCE file or LEGITLISTS file (depending on whether it was individual email or a mailing list), and then delete everything else.
• BLOCKREPLY, PATTERNMATCHING, and SPAMREPLY. Set all three of these variables to SILENT. You don't want to send autoreplies or bounces, but you do want Pattern Matching turned on and the default setting leaves it off.
• VIRUSFOLDER. Set this variable to /dev/null to delete all viruses. You don't want to take chances with a virus, and the false positive rate on the virus filters is near zero.

Ready to Fight Back

Users who are willing to accept a low false positive rate, and who want to use the SpamBouncer's autocomplaining features, should set the following variables:

• ALTFROM. Set this to the email address from which you want to send complaints. You may want to obtain a free email address at Yahoo or another free provider and use it just for this purpose. Some ISPs forward spam complaints to spammers, and spammers have been known to sell the addresses of people who complain to other spammers as "known live" email addreses, or even mailbomb those who complain. It is best not to send complaints from your normal email address. (A user pointed out that a number of abuse addresses reject complaints from people with Hotmail addresses. You might want to avoid using Hotmail for your complaint account.)
• BLOCKFOLDER and SPAMFOLDER. Set both of these variables to the name of a folder where you want the SpamBouncer store email that it catches. Once every few days, review this folder to make sure no legitimate email was caught in error. Add the email address of anyone whose email was caught in error to your NOBOUNCE file or LEGITLISTS file (depending on whether it was individual email or a mailing list). Delete anything the SpamBouncer has complained about already, or that you don't want to bother with, and complain about the rest manually.
• BLOCKREPLY. Set this to SILENT. Email classified as Blocked does have some false positives in it, so check your BLOCKFOLDER/SPAMFOLDER regularly to rescue anything you wanted to receive. (And add the sender's name to your NOBOUNCE file to prevent further blocking.)
• PATTERNMATCHING. Set this variable to SILENT. You don't want to send autoreplies or bounces for Pattern Matching because it is more prone to false positives than other types of Blocked email, but you do want Pattern Matching turned on and the default setting leaves it off. (Add the sender's name to your NOBOUNCE file to prevent further blocking.)
• SENDMAIL. Set this to point to your system's copy of the sendmail program. On many systems, this is located in /usr/bin/sendmail, /usr/sbin/sendmail, or even /bin/sendmail. If you do not set this variable correctly, the SpamBouncer will not be able to send bounces, complaints, or notify messages.
• SPAMREPLY. Set this to COMPLAIN. The SpamBouncer very rarely classifies legitimate email as spam. It also does not complain about most spam; it complains only about spam from known spam sources, and usually very aggressive known spam sources that send a lot of spam. By auto-complaining, you ensure that the ISPS of egregious and aggressive spammers are notified immediately when their spamming customers spam again.
• VIRUSFOLDER. Set this variable to /dev/null to delete all viruses. You don't want to take chances with a virus, and the false positive rate on the virus filters is near zero.

I hate spam and I want it gone now

If you feel this way, then you and I obviously have some common ancestors or early environmental influences in common. Set the following variables if you want to autocomplain aggressively, bounce spam back, and notify users whose mail is blocked by the SpamBouncer, and are willing to check the BLOCKFOLDER frequently for false positives:

• ALTFROM. Set this to the email address from which you want to send complaints.
• BLOCKFOLDER. Set this variable to the name of a folder where you want the SpamBouncer store blocked email. Once every few days, review this folder to make sure no legitimate email was caught in error. Add the email address of anyone whose email was caught in error to your NOBOUNCE file or LEGITLISTS file (depending on whether it was individual email or a mailing list). Delete anything the SpamBouncer has complained about already, or that you don't want to bother with. Complain about the rest manually.
• BLOCKREPLY. Set this to NOTIFY. Email classified as Blocked does have some false positives in it, so in addition to notifying people, you should check your BLOCKFOLDER/SPAMFOLDER regularly to rescue anything you wanted to receive. (And add the sender's name to your NOBOUNCE file to prevent further blocking.)
• PATTERNMATCHING. Set this variable to NOTIFY as well, and the SpamBouncer will treat email caught by the Pattern Matching filters exactly as it does Blocked email. (Add the sender's name to your NOBOUNCE file to prevent further blocking.)
• SENDMAIL. Set this to point to your system's copy of the sendmail program. On many systems, this is located in /usr/bin/sendmail, /usr/sbin/sendmail, or even /bin/sendmail. If you do not set this variable correctly, the SpamBouncer will not be able to send bounces, complaints, or notify messages.
• SPAMFOLDER. Set this variable to the name of a folder where you want the SpamBouncer store spam, and review the folder every few days so that you can complain manually about anything the SpamBouncer didn't autocomplain about, or set it to /dev/null if you don't want to be bothered with it further.
• SPAMREPLY. Set this to COMPLAIN, BOUNCE, or BOTH. COMPLAIN will cause the SpamBouncer to send automatic complaints about spam that comes from a known source. BOUNCE will cause the SpamBouncer to bounce spam back to the sender, unless the sender email address is an obvious forgery. BOTH will cause it to do both. I recommend setting this to COMPLAIN because a lot of spammers forge From: lines and bouncing their email just adds to the load on the Internet. (I may remove the BOUNCE option entirely in the future.)
• VIRUSFOLDER. Set this variable to /dev/null to delete all viruses, or to a folder if you want to look at the virus emails on your Unix system (which is probably immune to them) and determine who might be infected so that you can notify them or their ISP and get the problem fixed.

SpamBouncer user configuration reference:

Purpose:

PreRequisites:

• The reader is executing the procedure herein on a supported platform, as defined here.
• The person performing this procedure can log into the target NetMAX system as a user.

Overview

SpamBouncer reads your email, applies a series of rules that identify probable spam, and then moves the probable spam email to an IMAP mail folder for you called "spam." This folder appears in your email folder list if any messages have been identified as spam. When spam is identified and placed in the spam folder, we call this "bouncing" the message.

Each user may specify up to four text files to configure the actions of SpamBouncer for their account: .legitlists, .localhostfile, .myemail, and .nobounce. Users will find them in their home directory, after the installation of SpamBouncer. Users may use the NetMAX Files Management interface to create and/or edit these files. Use of the NetMAX Files Management interface is outlined in the NetMAX Server Manual.

Each of these text files must be in Unix text format (end of line character must be a line feed). That means that you must use a text editor to edit them; DO NOT USE a word processing program like Microsoft Word or Microsoft Wordpad. If you edit these files on a Windows- or Macintosh-based computer, you must upload them using ftp in ASCII mode or some other means that will create Unix, not DOS, text files.

In each file, you must include email addresses or domain names, one on each line of the file. Ensure that there are no blank lines in each of these files, and that the last email address or domain name is followed by a carriage return. (That may create what looks like a blank line in some text editors, but it isn't actually a blank line.)

• .legitlists. Putting information in this file prevents the SpamBouncer from bouncing messages sent to you from mailing lists to which you have subscribed. Enter the names of all legitimate bulk mailing lists you are subscribed to. A sample .legitlists file is shown below:
      junkfax-l@trashbusters.org
      html-wizards-l@earlham.edu
      outback@yahoogroups.com
  
  
• .localhostfile. The entries in this file help SpamBouncer determine which messages are being transmitted from people in your local network(s). Enter the name of each domain that you consider local (Your sysadmin has probably predefined the domains that are considered local for your network and therefore, you probably do not need to change this file). If you receive email only for one host, enter that host name in the file. A sample .localhostfile file is shown below:
      hrweb.org
      spambouncer.org
  
  
  
• .myemail. The entries in this file tell SpamBouncer what email addresses you consider legitimate to receive email into. If a message is addressed to someone with a different email address than those listed in this file, it is likely to be bounced. Enter every email address that belongs to you on this system. (SpamBouncer will work without this file initialized, but you will bounce more spam if you put your preferred email receive address(es) in this file.) A sample .myemail file is shown below:
      abuse@hrweb.org
      abuse@spambouncer.org
      ariel@hrweb.org
      ariel@spambouncer.org
      postmaster@hrweb.org
      postmaster@spambouncer.org
      webmaster@hrweb.org
      webmaster@spambouncer.org
  
  
  
• .nobounce. This file contains entries of all email address or domains that you do not want bounced --if anyone you want correspondence with is bounced, enter their email address in this file. Addresses entered in this file can send you email and it will never be bounced or tagged as spam. Enter the email address of every person you regularly receive email from. This will speed up delivery of your mail and reduce the work your server must do to filter your mail, since email from addresses in the NOBOUNCE file are filtered for viruses, but nothing else. In addition, if you regularly add the email addresses of people you correspond with to the NOBOUNCE file, you can use more aggressive filtering options in the SpamBouncer without having a large number of false positives. A sample .nobounce file is shown below:
      friend@home.com
      anotherfriend@home.com
      boss@work.com
      coworker@work.com
      mom@juno.com
      brother@yahoo.com
      kid@highschool.kids.us
  

You can also add partial strings, such as entire domains or subdomains, or partial email addresses, to your NOBOUNCE file. For example, if you know that all email sent from the subdomain engineering.work.com is from one of your coworkers and nobody else, you could add that string to your NOBOUNCE file just as you would add an email address. If you have a friend who habitually changes ISPs or uses email accounts at multiple sites, but whose email address always starts with skywalker@, you could add that string to your NOBOUNCE file just as you would add an email address. An example of a nobounce file that contains partial strings is included below, where the first line signifies an entire domain, instead of an entire email address:
    @cybernet.com
    friend@home.com
    anotherfriend@home.com
    boss@work.com
    coworker@work.com
    mom@juno.com
    brother@yahoo.com
    kid@highschool.kids.us

NOTE: Be careful about adding partial strings or entire domains to your NOBOUNCE file. If the string you add is a common string that might be found in email other than the email you are expecting, this can cause the SpamBouncer to think that a spam is okay and not filter it. For example, if you mean to accept all mail from a domain, cybernet.com, then you might add a line like the following to your NOBOUNCE file:
    cybernet.com


Though this will prevent messages from the cybernet.com domain from being bounced, it would also have the undesired effect of preventing messages from domains with "cybernet.com" included in them, for instance "notcybernet.com" The proper way to apply domain-wide exceptions is as illustrated above, by preceding the domain with an "@" symbol. This tells SpamBouncer not to bounce messages that come from addresses like "somebody@cybernet.com" but to still bounce those from "somebody@notcybernet.com" and similar addresses.

NOTE: Though SpamBouncer does not process messages originating from a host, email address, or domain contained in the .nobounce (or the globalnobounce file for administrators,) it still processes these messages for virus content.

For example, if you have several friends who have email addresses at aol.com, and you add aol.com to your NOBOUNCE file, the SpamBouncer will pass anything that appears to be from anyone at aol.com without filtering it. Lots of spammers forge email address at aol.com in the From: lines of their spam, so this means you would get a lot of spam in your inbox that the SpamBouncer would otherwise have caught.

It is safest to add only complete email addresses to your NOBOUNCE file unless you are an experienced user and understand the implications of a partial match.

NOTE: You should also subscribe to the "spam" folder created in your email account, so that you can verify that SpamBouncer is filtering what it should, and not filtering what it shouldn't. For instructions on how to do this, please refer to the document below.

READ THE FILE "SubscribingtoSpamBouncer.html" IN THE SAME DIRECTORY AS THIS DOCUMENT TO ENSURE THAT YOU ARE NOT LOSING IMPORTANT EMAIL MESSAGES

Purpose:

Prerequisites:

Netscape 6 or later:

1. Open up Netscape Mail.
2. Highlight your account name, by clicking once on it
3. Click on File --> Subscribe
4. In the Subscribe window, scroll down to the folder named spam.
5. Click the checkbox next to the spam folder to subscribe to it.
6. Click OK.
7. The spam folder should now show up in your list of folders that you are subscribed to in the main window.

Microsoft Outlook:

1. Open Outlook, and go to your Inbox.
2. Make sure that your folder list is visible, then highlight the Inbox under the IMAP server.
3. With the Inbox highlighted, go to Tools --> IMAP Folders...
4. On the All tab in the resulting window, click the Query button to get a list of all the IMAP folders that reside on the mail server for this account. It may prompt you to enter your username and password again.
5. After it has finished its query, scroll down in the list of folders to find the folder named, spam, highlight it and click the Subscribe button.
6. The spam folder should now show up in your list of subscribed folders on the subscribe tab.
7. Click the OK button when you are done.
8. The spam folder should now be listed in your folder list in the main Outlook window of your Inbox.

Microsoft Outlook Express:

1. Open Outlook Express, and highlight your Inbox under your IMAP mail server account.
2. Go to Tools --> IMAP Folders...
3. Click on the All tab, then scroll down the list to find the spam folder.
4. Highlight the spam folder, then click the Show button.
5. The spam folder should now show up in the list of folders under the Visible tab.
6. Click OK.
7. The spam folder should now be listed in your folder list of your server in the main Outlook Express window.

Answers in this category:
What is the RsyncBackup utility and how do I use it?

RsyncBackup:

Purpose:

Prerequisites:

• The reader is executing the procedure herein on a supported platform, as defined here.
• The person performing this procedure can log into the source and backup NetMAX systems as the administrative user.
• The person performing this procedure is experienced with general UNIX system administration.
• The person performing this procedure is familiar with the basics of operating a NetMAX server, as outlined in the NetMAX Server Manual.

Obtaining A License

Purchase the license code for the RsyncBackup package from the NetMAX Store .
The proper procedure for making a purchase through the NetMAX Store is to log in with your Store userid and password, before making any purchases.
If you do not currently have an account on the NetMAX store,create one and log in before purchasing the license code. These steps are necessary so that Cybernet Systems can more easily assist you in the future if there is a question regarding NetMAX products you have purchased.
The license code can be found by typing the word rsyncbackup into the search box in the upper left of the NetMAX Store.
Follow the normal procedure to purchase the license code, which will be sent via email to the location specified in the NetMAX Store account.

Once you have received the license code, in the NetMAX interface of the server on which the RsyncBackup package will be installed, access HOME|System|License Management.
In the Currently Installed License numbers table, enter the license code from the last few steps, but do not click the “+” icon yet.
Note the Registration Activation Key in the lower left of the table.
Keep the license management window open, and a new browser window.,
In this new browser window access NetMAX online registration .
Login and register the license number, using the Registration Activation Key noted earlier.On the resultant page, the Registration Code for your NetMAX RsyncBackup license number is displayed. Enter this Registration Code into the NetMAX window you kept open earlier, to the right of the new license number.
Click the “+” icon to add the new license number and registration code to your NetMAX.
Click the APPROVE button.
Click the COMMIT ALL button and wait for the commit.

Overview

• Download and install the RsyncBackup utility files.
• Prepare storage space for the NetMAX backup.
• Specify source and destination parameters.
• Configure the backup target machine to allow rsync backups.
• Execute the RsyncBackup utility (manually or automatically).
• Recover from disk failure or data corruption by swapping the backup disks for their originals.

Downloading and Installing the RsyncBackup utility package

1. Access the NetMAX Package Manager. (HOME|System|Package Management)
2. Click the ADD button.
3. Ensure that is FTP is selected for Mode.
4. Click the DOWNLOAD INDEX button to ensure you have the latest list of packages.
5. Once the Index download has finished, select the entry NetMAX/Addons from the Index of Categories pulldown menu.
6. Install the following packages:

   RsyncBackup-1.0-4.02.0.i386.rpm

Preparing storage space for a NetMAX backup

fdisk -u -l /dev/hda

fdisk -u /dev/hde

    Add a new partition (/dev/hde1):
    
    >> choose "n" (new partition)
    >> choose "p" (primary partition)
    >> choose "1" (partition number)
    >> first sector - (see fdisk info from NetMAX disk /dev/hda)
    >> last sector - (see fdisk info from NetMAX disk /dev/hda)
    
     
    Now create a second extended partition (/dev/hde2)
    
    >> choose "n" (new partition)
    >> choose "e" (extended partition)
    >> choose "2" (partition number)
    >> first sector - (see fdisk info from NetMAX disk /dev/hda)
    >> last sector (see fdisk info from NetMAX disk /dev/hda)
     
    
    Now create a logical partiton within the extended partition (/dev/hde5)
    
    >> choose "n" (new partition)
    >> choose "l" (logical partition)
    >> first sector - (see fdisk info from NetMAX disk /dev/hda)
    >> last sector - see fdisk info from NetMAX disk /dev/hda, double the Blocks info from hda5,
                     so if hda is 102368, then enter 204736.
    
     
    
    Now create the last logical partition (/dev/hde6)
    
    >> choose "n" (new partition)
    >> choose "l" (logical partition)
    >> first sector - (see fdisk info from NetMAX disk /dev/hda)
    >> last sector - (see fdisk info from NetMAX disk /dev/hda)
    
     
    Now fix the partiton type on /dev/hde5
    
    >> choose "t" (type)
    >> choose "5" (partition number)
    >> choose "82" (hex code for Linux Swap)
    
     
    Print out the partition table, does it look correct
    
    >> choose "p"
    
     
    Now write out the partition info
    
    >> choose "w"
    
    
    The backup disk is now partitioned and needs to be formatted  and labeled. Execute the following steps at the UNIX command prompt to accomoplish this:
    
    > mke2fs /dev/hde1 (this will be the root disk "/")
    > mke2fs /dev/hde6 (this will make the var disk "/var")
    > mkswap /dev/hde5 (this will make the swap partition)
    > e2label /dev/hde1 "NETMAX"
    > e2label /dev/hde6 "www" (if the name of the machine that has
                               /dev/hda is "www.netmax.com")
    
    

The final step of backup disk preparation is making the backup storage space available. Backup disk partitions must be mounted to a mount point named after the disk (ex. sdc, sdd,) at the mount location (ex. /var/mnt) specified by the basepath in the RsyncBackupConfig file (See the "Specifying source and destination parameters" section for more information). The admin must create the "dirs" (as specified in the RsyncBackupConfig file) in the device path (ex. /var/mnt/sdb) to backup to. So, it is recommended that if for example sdb1 is supposed to backup sda1 on the source system, and sda1 is /, then you should mount sdb1 to to / rooted at /var/mnt/sdb on the local (backup) system. And if sdb6 is supposed to backup sda6 on the source system, and sda6 is /var, then you should mount sdb6 to /var/mnt/sdb/var on the local (backup) system. The goal being that in the end, the backup storage configuration looks identical to the source disk.

The NetMAX administrator must repeat the entire storage preparation process for all disks on the NetMAX system that he/she wishes to backup.

Specifying source and destination parameters

[local]
        disks=<list of comma separated backup disk device names>
        basepath=<base path of backup "disks" mount points>

[<label of partition 6 of backup disk 1>]
    fqdn=<FQDN of source machine with disk that you want to backup>
    targets=<Comma separated names of  targets that you want to backup>
    dirs=<Comma separated names of backup directories. Order corresponds to target specification>
    options=<rsync options>
    lilo=<yes/no backup lilo>



[<label of partition 6 of backup disk 2>]
    .
    .
    .
    .
    
    

    
[local]
        disks=sdb
        basepath=/var/mnt
    
[test]
        fqdn=rsync.test.com
        targets=var,root
        dirs=/var,/
        options=-alHpDx
        lilo=yes
    

The example specifies that the backup disk with partition 6 labeled as "www" will store a backup of the target "var" in the local directory "/var" and target "root" in the local directory "/". It also specifies that rsync will be run with the options "-alHpDx" and that lilo will be setup on the backup disk. The options "-alHpDx" are the default options used by RsyncBackup if you do not specify your own options. The default options work well for typical NetMAX system backups. The options field allows you to override these options.

Configuring the backup source machine to allow a rsync backup

    
log file = /var/log/rsyncd
pid file = /var/run/rsyncd.conf
    
[var]
        path = /var
        read only = true     
        uid = 0
        gid = 0
        dont compress = *.gz *.tgz *.zip *.z *.rpm *.jpg *.gif *.mpg *.JPG *.GIF *.mpeg *.mp3
        hosts allow = 192.168.33.77
     
    
[root]
        path = /
        read only = true
        uid = 0
        gid = 0
        dont compress = *.gz *.tgz *.zip *.z *.rpm *.jpg *.gif *.mpg *.JPG *.GIF *.mpeg *.mp3
        hosts allow = 192.168.33.77
     

Recovering from failure or data corruption using your backups