nice_name = "Administrator address" desc = "Enter an email address for the PureMessage administrator. Administrative notifications and messages released from the PureMessage quarantine specify this address in the 'From' message header. An administrator address example: 'postmaster@yourdomain.com'." prompt = "Administrator's email address?" must_match = "__email" default = "postmaster@%%DOMAIN%%" must_prompt = 1 nice_name = "Mail sender" desc = "Enter the mail server and port number that PureMessage uses to send administrative notifications and messages released from the quarantine. It should be of the form :, for example 'mail.foo.com:25'." prompt = "Mail server to send notifications to?" must_match = "__smtp" default = "%%SMTP_SERVER%%" must_prompt = 1 nice_name = "Data Directory for HistorianDB role" desc = "The historian database will be written inside this directory. Make sure that data_directory has permissions for redis server to dump data." prompt = "Select Data Directory" default = "%%PREFIX%%/var/redis" must_prompt = 1 # Packages to be included for all roles desc = "PureMessage Custom Installation Select the roles this server will perform. Centralized Server Manager (CSM) The Centralized Server Manager role installs the main interface for configuring the PureMessage network. The CSM server must be the first server that is set up. This role is typically installed with either the Database Server or a Mail Filter Server. Database Server The Database Server role installs the PureMessage database for use with DBMS based Quarantines and for PureMessage reporting functions. Sophos does not recommend installing both the Database Server role and the Mail Filter Server role on the same server. Enduser / Groups Web Interface The End User Web Interface allows end users to manage their own quarantine, whitelists, and blacklists. Smaller PureMessage installations may run this role with the Database Server role, while larger installations will want to seperate these roles to different machines. The Groups Interface allows delegated administration of PureMessage. Mail Filter Server The Mail Filter Server role installs the PureMessage Milter. The milter can scan and filter mail for virus and spam. This role typically is used in combination with the Mail Transfer Agent role. Larger installations will likely have several Mail Filter Servers. Mail Transfer Agent (MTA) The Mail Transfer Agent server role installs the 3rd party MTA software (Sendmail or Postfix). The MTA receives incoming SMTP connections and sends the messages through the PureMessage milter. The Mail Transfer Agent Server role is typically installed on the same server as the Mail Filter Server role. Sender History Database The in memory historian database." PureMessage-Perl ActiveState-Config ActiveState-Utils PureMessage PureMessage-System PureMessage-Config PureMessage-Utils PureMessage-Scheduler PureMessage-Apache PureMessage-Manager-HTTPD PureMessage-Manager PureMessage-Support PureMessage-Resources PureMessage-Group PureMessage-ServerGroup PureMessage-HTTPD PureMessage-Reports PureMessage-HTTPD-Services-Logsearch Sophos-LogSearch PureMessage-Database-Config Sophos-ValidatedFetch Sophos-Dirwatch Sophos-IP PureMessage-V6-Migrate PureMessage-Policy-DelayUI PureMessage-ServerGroup-AddOn title = "Mail Filter" ActiveState-Milter PureMessage-Sieve PureMessage-MessageStore PureMessage-Quarantine PureMessage-HTTPD-Services-Quarantine PureMessage-HTTPD-Services-Logsearch PureMessage-Policy PureMessage-Policy-Blocklist PureMessage-Blocklist-Daemon PureMessage-Reports-Quarantine PureMessage-Manager-Reports-Quarantine PureMessage-Milter PureMessage-Milter-Policy Sophos-LogSearch-PMX PureMessage-Test PureMessage-Policy-Router PureMessage-Policy-CreditCard PureMessage-Policy-DKIM PureMessage-Policy-Delay # Packages only installed if licensed PureMessage-Policy-Virus PureMessage-Policy-Virus-Sophos PureMessage-Policy-Spam PureMessage-Policy-Bundle # determines installedness PureMessage-Milter-Policy title = "Mail Transfer Agent" # if this role is selected, we must prompt for the "mta" RIO mta.must_prompt = 1 mail_sender.default = smtp:[127.0.0.1]:10026 mail_sender.must_prompt = 0 # this role is installed if any of these packages are installed PureMessage-Sendmail PureMessage-Postfix title = "Centralized Server Manager" csm.default = 1 PureMessage-CSM-Resources PureMessage-MessageStore PureMessage-Quarantine PureMessage-Manager-Reports-Quarantine PureMessage-Policy PureMessage-Policy-Spam PureMessage-Policy-Blocklist PureMessage-Manager-Enduser-RPC PureMessage-Policy-Router PureMessage-Policy-CreditCard PureMessage-Policy-DKIM # Packages only installed if licensed. Required for Sieve editing PureMessage-Policy-Virus PureMessage-Policy-Virus-Sophos PureMessage-Policy-Bundle # determines installedness PureMessage-CSM-Resources title = "Enduser / Groups Web Interface" PureMessage-HTTPD PureMessage-Manager-Enduser-UI PureMessage-Manager-Enduser-RPC PureMessage-WebUI # determines installedness PureMessage-Manager-Enduser-UI title = "Database Server" ActiveState-DB PureMessage-PostgreSQL PureMessage-Manager-PostgreSQL PureMessage-Database PureMessage-Manager-Enduser-RPC # determines installedness PureMessage-PostgreSQL title = "Sender History Database" PureMessage-HistorianDB PureMessage-Manager-HistorianDB Redis PureMessage-HistorianDB nice_name = "Manager username" desc = "The Manager is a web-based interface used for administering PureMessage. Manager security is implemented via user/password authentication. These accounts are internal to the PureMessage Manager, and not related to system accounts." prompt = "PureMessage Manager username?" default = "admin" must_match = "qr/^[a-zA-Z0-9_\\-\\!\\.]+$/" no_match_message = "Enter a legal username. The username must only contain numbers or lowercase letters. The username cannot exceed eight characters." must_prompt = 1 nice_name = "Manager password" desc = "The PureMessage Manager user requires a password." prompt = "PureMessage Manager user password?" must_match = "qr/^.{3,20}$/" no_match_message = "The password must be between 3 and 20 characters." password = 1 must_prompt = 1 nice_name = "This is the CSM" desc = "Determines if this machine is the CSM" prompt = "Is this machine the CSM" must_prompt = 0 nice_name = "Override the existing postfix" desc = "PureMessage can arrange to move this older Postfix out of the way and replace it with symlinks to the newer Postfix that is being installed now." prompt = "Override existing Postfix?" default = 0 must_prompt = 0 nice_name = "Postfix user" desc = "The user that Postfix should run as." prompt = "What user should Postfix run as?" default = "postfix" must_prompt = 0 nice_name = "Postdrop group" desc = "The group used by postdrop and postqueue." prompt = "What is the postdrop setgid group?" default = "postdrop" must_prompt = 0 nice_name = "MTA protocol support" desc = "Select IPV4 if you receive email from IPV4 hosts only. Select both protocols if you need to receive email from both IPV4 and IPV6 hosts." prompt = "MTA protocol support" IPV4 IPV4 and IPV6 default = "IPV4" must_prompt = 1 nice_name = "Postfix fully qualified host name" desc = "Specify the fully-qualified internet host name for this mail server. Example: mail.example.com The value provided sets the Postfix configuration variable 'myhostname' in postfix/etc/main.cf" prompt = "What is the fully-qualified host name for this mail server?" default = %%FQ_HOSTNAME%% must_prompt = 1 must_match = qr/\./ no_match_message = "Enter a fully qualified host name" nice_name = "Postfix server domain" desc = "Specify the local internet domain name to which this server belongs. Example: example.com This value sets the Postfix configuration variable 'mydomain' in postfix/etc/main.cf." prompt = "What is the domain name for this server?" default = %%DOMAIN%% must_prompt = 1 must_match = qr/\./ no_match_message = "Enter a proper domain name" nice_name = "Postfix originating domain" desc = "Specify the domain name that Postfix will append to unqualified addresses. Can be specified as $myhostname or $mydomain to use the Postfix configuration values specified above. This value sets the Postfix configuration variable 'myorigin' in postfix/etc/main.cf." prompt = "Originating domain address?" default = "$myhostname" must_prompt = 1 nice_name = "Postfix destination domain[s]" desc = "Specify the list of mail domains that Postfix will deliver locally. Mail received for addresses in these domains are not relayed to other hosts. Separate all list values with a comma followed by a single space. Examples: 1. Enter a single space for an email firewall or gateway that relays all mail to another internal server. 2. For a workstation or gateway that delivers mail only for local users on the same host, use: $myhostname, localhost.$mydomain 3. For a mailserver for an entire domain (i.e. mail hub), use: $myhostname, localhost.$mydomain, $mydomain 4. For a mail server that uses a virtual host interface, use: $myhostname The value provided sets the Postfix configuration variable 'mydestination' in postfix/etc/main.cf." prompt = "Domains to deliver mail for on local system:" default = "$myhostname, localhost.$mydomain, localhost" must_prompt = 1 nice_name = "Postfix relay domains" desc = "Specify the client IP addresses authorized to relay mail through the server if it is on an open network. The default setting includes all class A, B or C networks the server is connected to. Specify a more restrictive list to limit the number of clients with relay permission. Example: 168.100.189.0/28, 127.0.0.0/8, 2001:db8::/32 The value provided sets the Postfix configuration variable 'mynetworks' in postfix/etc/main.cf." prompt = "Hosts or networks to relay mail for:" default = !%POSTFIX_RELAY_NETWORKS%! must_prompt = 1 must_match = '__ip_cidr' no_match_message = "Invalid networks specified." mismatched_protocol_message = "Specified networks don't match with the chosen network protocol" nice_name = "Postfix relay host" desc = "Specify the host to relay all mail through if this server is behind a firewall, or the network has a dedicated mail gateway. Examples: 1. To use the server(s) in the domain's DNS MX records: $mydomain 2. To use the server(s) associated with a host's MX records: mail.$mydomain 3. Use a specific host without MX records: [mail.$mydomain] [168.100.189.25] [168.100.189.25]:25 [fe80::202:b3fe:fb1f:8329] [fe80::202:b3fe:fb1f:8329]:25 The value provided sets the Postfix configuration variable 'relayhost' in postfix/etc/main.cf." prompt = "Relay host or gateway:" must_match = '__host' no_match_message = "Invalid host specified." mismatched_protocol_message = "Specified host does not match with the chosen network protocol" must_prompt = 1 nice_name = "Postfix relay domains" desc = "If configuring an email firewall or gateway that relays all or most mail to other internal servers in the organization, specify all the domains for which mail is accepted and relayed. Enter a single space to disable all mail relaying from this server. Only locally deliverable mail is accepted. Examples: 1. To accept and relay mail only for the domain in which this server is located, use: $mydomain 2. To accept and relay mail for only a specified list of domains, use: example1.com, example2.com 3. To disable mail relaying, enter a single space. The value provided sets the Postfix configuration variable 'relay_domains' in postfix/etc/main.cf." prompt = "Domains to relay mail for:" default = "$mydestination" must_prompt = 1 nice_name = "Postfix content filter" desc = "Specify the interface and port where PureMessage is listening for Postfix connections. Must be specified in the form interface:port, where interface is a hostname or IP address, and port is a port number. Specify [127.0.0.1]:10025 if PureMessage runs on the same host as Postfix and is listening on the default SMTP proxy port. Otherwise, specify the port and the fully qualified host name (or IP address) of the host running PureMessage. Examples: [127.0.0.1]:10025 [::1]:10025 filtermail.example.com:20025 The value sets a Postfix 'content_filter' listener in master.cf." prompt = "PureMessage postfix interface:port?" default = "[127.0.0.1]:10025" must_prompt = 0 must_match = '__host_port' no_match_message = "Invalid interface:port specified." mismatched_protocol_message = "Specified interface:port does not match with the chosen network protocol" nice_name = "Postfix forward port" desc = "Specify the interface and port through which PureMessage sends filtered mail. Must be specified in the form interface:port, where interface is a hostname or IP address, and port is a port number. If PureMessage runs on the same host as Postfix, specify [127.0.0.1]:10026. If not, specify the interface (host name or IP address) and the port, separated by a colon. Specify only the port number for Postfix to accept PureMessage connections on any network interface. Examples: 10026 [127.0.0.1]:10026 [::1]:10026 filtermail.example.com:20026 The value provided is used to set a Postfix 'smtpd' listener in master.cf." prompt = "PureMessage forward interface:port?" default = "[127.0.0.1]:10026" must_prompt = 0 must_match = '__host_port' no_match_message = "Invalid interface:port specified." mismatched_protocol_message = "Specified interface:port does not match with the chosen network protocol" nice_name = "Postfix filtering concurrency" desc = "The default concurrency for filtering mail determines how efficiently the system schedules filtering tasks. Higher concurrency values imply less latency in processing messages, but will incur more scheduling overhead and higher memory requirements. This value must only be increased in proportion to the number of CPUs on the system. Sophos recommends a minimum of 10." prompt = "Default filtering concurrency?" default = "20" must_prompt = 1 must_match = qr/^\d+\z/ no_match_message = "Invalid number" nice_name = "PostgreSQL trusted hosts" desc = "Enter the IP addresses and subnets of hosts that are allowed to connect to the PostgreSQL database. Multiple addresses can be listed separated by spaces. By default, only connections from localhost are allowed. Examples: 192.168.3.1 192.168.3.1 192.168.3.2 fe80::202:b3fe:fb1f 192.168.3.0/24 192.168.4.20 fe80::202:b3fe:fb1f/32 " prompt = "Trusted PostgreSQL IPs?" must_prompt = 1 must_match = "__pg_ips" default = "%%SUBNET%%" nice_name = "PostgreSQL database host" desc = "The host running the database." prompt = "Database host?" must_prompt = 0 default = "%%FQ_HOSTNAME%%" nice_name = "Override the existing sendmail" desc = "PureMessage can arrange to move this older sendmail out of the way and replace it with symlinks to the newer sendmail that is being installed now." prompt = "Override existing sendmail?" default = 0 must_prompt = 0 nice_name = "PureMessage user mail aliases" desc = " It is a good idea to set up mail aliases for the PureMessage user. This ensures that mail generated for these addresses by scheduled jobs and other notifications are directed to a real administrator. Please enter one or more comma separated email addresses that should receive all messages sent to the PureMessage user. Each address should either be a valid user name on this server, or a valid email address that is reachable from this server. Specify \pmx6 in the list if you want mail to continue to go to the PureMessage user (pmx6 by default), in addition to the other addresses. Entering an empty value skips the addition of aliases for this user. In this case, please make other arrangements for mail sent to the PureMessage account to be periodically monitored by an administrator. Examples: john mailadmins@example.com localadmin, mailadmin1@example.com \pmx6, admin-mail-archive@example.com" prompt = "Enter mail alias(es) for the PureMessage user:" must_prompt = 1 nice_name = "Root user mail aliases" desc = " It is a good idea to set up mail aliases for the root user. This ensures that mail generated for these addresses by scheduled jobs and other notifications are directed to a real administrator. Please enter one or more comma separated email addresses that should receive all messages sent to the root user. Each address should either be a valid user name on this server, or a valid email address that is reachable from this server. Specify \root in the list if you want mail to continue to go to the "root", in addition to the additional addresses. Entering an empty value skips the addition of aliases for this user. In this case, please make other arrangements for mail sent to the root account to be periodically monitored by an administrator. Examples: john mailadmins@example.com localadmin, mailadmin1@example.com \root, admin-mail-archive@example.com" prompt = "Enter mail alias(es) for the root user:" must_prompt = 1 nice_name = "Internal Hosts" desc = "Enter the IP addresses and subnets of hosts that should be treated as internal. Multiple addresses can be listed separated by spaces. By default, only 127.0.0.1 is considered internal. The default policy script never quarantines messages originating from these hosts, and does not check them for spam. These messages are, by default, scanned for viruses; if a virus is detected, the message is rejected and a notice is sent to the sender of the message. Examples: 192.168.3.1 192.168.3.1 192.168.3.2 fe80::202:b3fe:fb1f 192.168.3.0/24 192.168.4.30 fe80::202:b3fe:fb1f/32 " prompt = "Internal Host IPs?" must_prompt = 1 must_match = "__ips" mismatched_protocol_message = "Specified interface:port does not match with the chosen network protocol" nice_name = "PureMessage location IP" desc = "Select the IP address that will be used for communication between PureMessage services. Choosing the correct address on multi-homed machines will avoid potential communication problems. NOTE: If you have decided to install Sender History Database Role, the value provided here sets the Redis network interface option 'bind' in PMX_PREFIX/etc/redis.conf on which redis server will listen for connections." prompt = "Select the IP address to use for communication between PureMessage services/servers?" must_prompt = 1 nice_name = "PureMessage username" desc = "Specify the PureMessage user account name. All PureMessage services are administered using this identity. The default name is 'pmx6'." prompt = "PureMessage user name?" default = "pmx6" must_match = "__pmx_user" no_match_message = "Enter a legal username. The username must only contain numbers or lowercase letters. The username cannot exceed eight characters." must_prompt = 1 nice_name = "PureMessage user password" desc = "Specify the PureMessage user password." prompt = "PureMessage user password?" password = 1 must_prompt = 1 must_match = qr/^.{6,}$/ no_match_message = "The password must be at least 6 characters." nice_name = "PureMessage user home directory" desc = "Home directory of the PureMessage user." prompt = "PureMessage user home directory?" default = "%%PREFIX%%/home" must_prompt = 0 nice_name = "Install 64-bit PureMessage" desc = "This version of Solaris can run 64-bit applications. The 64-bit version of PureMessage can be installed to work around limitations in the 32-bit stdio library. The 64-bit version of PureMessage is still under development." prompt = "Install 64-bit PureMessage?" must_match = bool default = "%%SOLARIS64%%" must_prompt = 0 # the default routine will set this if necessary nice_name = "Mail Transfer Agent" desc = "Select a Mail Transfer Agent (MTA). Please note that postfix is the default MTA for PureMessage for Unix" prompt = "Which MTA would you like to install?" Postfix must_prompt = 0 # Package to option map: csm postfix_content_filter postfix_concurrency override_existing_postfix postfix_myorigin postfix_myhostname postfix_smtpd_port postfix_relay_domains postfix_relayhost mta_protocol postfix_mydomain postfix_user postfix_mynetworks postdrop_group postfix_mydestination root_mail_aliases pmx_user_mail_aliases root_mail_aliases override_existing_sendmail pmx_user_mail_aliases mta_protocol data_directory location_ip pmx_user mta solaris64 pmx_home pmx_password mail_sender admin_address internal_hosts database_host pg_trusted_hosts manager_user manager_password # Option order: location_ip pmx_user pmx_password admin_address manager_user manager_password pg_trusted_hosts mta mail_sender pmx_user_mail_aliases root_mail_aliases mta_protocol postfix_myhostname postfix_mydomain postfix_myorigin postfix_mydestination postfix_mynetworks postfix_relayhost postfix_relay_domains postfix_content_filter postfix_smtpd_port postfix_concurrency data_directory