BLK Hospital Mail Server Details

Architecture details

Technical Components

Postfix - smtp and smtps
Dovecot – Pop3 , Pop3s , Imap , Imaps
Amavis – Anti-virus and anti spam integration
mysql – Data base for all users and Domains
Postfixadmin – administrator web panel to manage users
Squirrelmail – Webmail Interface for users
Clamav – Anti-virus gateway engine
Spamassassin – Anti Spam engine
Named – DNS service

Information

Host name – mail.blkhospital.com
Base OS – Debian 4.0 ( Linux)
IP – 172.16.1.200 / 124.124.47.146 ( NATED via Firewall )
web access - https://mail.blkhospital.com/src/login.php
Administration - https://mail.blkhospital.com/admin/ (admin,superadmin and user5)

DNS Details

#dig blkhospital.com. MX

blkhospital.com.11157INMX10 mail.blkhospital.com.

#dig mail.blkhospital.com A

mail.blkhospital.com.9477INA124.124.47.146

Reverse DNS

# host 124.124.47.146

146.47.124.124.in-addr.arpa domain name pointer mail.blkhospital.com.

Critical Files and directories

Postfix - /etc/postfix
postfixadmin - /usr/share/postfixadmin
Dovecot - /etc/dovecot
Amavis - /etc/amavis
Logs - /var/log/
User data/mails - /home/vmail/
Mysql - /var/lib/mysql
named - /etc/bind

Concerns

Space contains – The disk has too low free space on the user data partitions
Clamav not working – The anti virus engine is not working as shown in the logs

Dec 4 06:37:42 mail amavis[16467]: (16467-06) (!!) WARN: all primary virus scanners failed, considering backups

Dec 4 06:38:18 mail amavis[17329]: (17329-01) (!!) ClamAV-clamd av-scanner FAILED: Too many retries to talk to /var/run/clamav/clamd.ctl (Can't connect to UNIX socket

No Backups mechanism
Postfix administration is opened via the Internet – This can pose a threat