Using COMODO Mail Gateway with Exim v.4
--------------------------------

Prerequisites
--------------

* installed Exim 4
* installed COMODO Antivirus for Linux


Note
-----

If you want to use Exim with amavisd-new, please read
the README.amavis.



Using COMODO Mail Gateway (CMG) as router content filter
---------------------------------------------------------

We add to Exim new router that passes all unchecked e-mails to CMG
via port 10068. After scanning e-mails they will be returned via
loopback port 10025.


    |-------------|        emails        |------------|
    |  Exim       | -------------------> |10068   CMG |
    |             |                      |            |
    |             |   scanned emails     |            |
    |        10025| <------------------- |            |
    |-------------|                      |------------|


Step 1
-------

Create file /etc/exim4/conf.d/router/05_exim4-config_comodo_router
with the following content:

########################################################################
# cmdfilter router
########################################################################
# Instruct Exim to pass all mail using SMTP to cmdfilter, except for mail
# that has just came in back to Exim through the local port
# 10025 (already checked messages)
########################################################################
cmdfilter:
  driver = manualroute
  # Do NOT run if received via 10025/tcp
  condition = "${if eq {$interface_port}{10025} {0}{1}}"
  # domains = local_domains
  transport = cmdfilter
  route_list = "* localhost byname"
  self = send

NOTE:
This router must be the first router if you want to scan all mail.
If you only want to scan mail destined to local domains,
you have to uncomment "domains = local_domains" line.


Step 2
-------

Create file /etc/exim4/conf.d/transport/05_exim4-config_comodo_transport
with the following content:

########################################################################
# cmdfilter transport
########################################################################
# SMTP transport for passing mail from Exim to CMG daemon
# on port 10068.
########################################################################
cmdfilter:
       driver = smtp
       port = 10068
       allow_localhost

Step 3
-------

Open /etc/exim4/update-exim4.conf.conf and add port 10025:

dc_local_interfaces='0.0.0.0.25:127.0.0.1.10025'
dc_use_split_config='true'

Step 4
-------

Configure CMG daemon:

Open "COMODO Antivirus" for Linux.
Select "Mail Gateway" tab.
Open "Smtp Configuration".
Set "Filtering Type": 'Inner SMTP Filter'
Set "Listening Port": 10068
Set "Accept TLS": 'no'
Set "Delivery Host": localhost
Set "Delivery Port": 10025
Set "Force TLS": 'no'

It is possible to set parameters directly in /opt/COMODO/etc/COMODO.xml:

 <filteringType>inbound</filteringType>
 <inboundListeningPort>10068</inboundListeningPort>
 <acceptInboundOuterTLS>no</acceptInboundOuterTLS>
 <inboundBackAddress>localhost</inboundBackAddress>
 <inboundBackPort>10025</inboundBackPort>
 <enforceInboundInnerTLS>no</enforceInboundInnerTLS>
 
NOTE: You need assign administrator email out of filtered MTA.


Step 5
-------

Restart CMG daemon:
sudo service cmdmgd restart


Step 6
-------

Restart Exim:
sudo service exim4 stop
sudo update-exim4.conf
sudo service exim4 start