简介
本文档介绍如何将隔离的邮件从ESA上的本地垃圾邮件隔离区移动到SMA上的中央垃圾邮件隔离区。
如何从思科邮件安全设备(ESA)上的本地垃圾邮件隔离区迁移到安全管理设备(SMA)上的中央垃圾邮件隔离区？
假设
以下解决方案假设已配置SMA设备，因此已添加ESA设备并启用集中隔离。
配置汇总
- 在ESA设备上启用集中隔离：GUI >安全服务>垃圾邮件隔离区>选中启用外部垃圾邮件隔离区
- 禁用本地隔离区：GUI >监控>垃圾邮件隔离区>取消选中启用垃圾邮件隔离区
- 提交并提交更改。
- （可选）通过以下流程将隔离邮件从本地迁移到中央隔离区。
步骤
在ESA设备上，您需要清空队列。要清空工作队列：
使用CLI命令supsendlistener暂停所有侦听程序，并选择选项“1. All”。
> suspendlistener
Choose the listener(s) you wish to suspend.
Separate multiple entries with commas.
1. All
2. Public
3. Test
[*]> 1
等待一段时间，直到传送队列中的大多数可传送邮件被传送。(在命令status和tophosts的输出中可以看到“活动收件人”的数量)。
>status
...
Gauges: Current
Connections
Current Inbound Conn. 0
Current Outbound Conn. 0
Queue
Active Recipients 1
Messages In Work Queue 0
Kilobytes Used 85
Kilobytes Free 71,303,083
Messages In Quarantine
Policy, Virus and Outbreak 10
Kilobytes In Quarantine
Policy, Virus and Outbreak 50
> tophosts
Sort results by:
1. Active Recipients
2. Connections Out
3. Delivered Recipients
4. Hard Bounced Recipients
5. Soft Bounced Events
[1]>1
Status as of: Mon Sep 29 13:09:53 2014 EDT
Hosts marked with '*' were down as of the last delivery attempt.
Active Conn. Deliv. Soft Hard
# Recipient Host Recip. Out Recip. Bounced Bounced
1 earthlink.net 1 0 2 0 0
2 the.cpq.host 0 0 1 0 0
3 the.encryption.queue 0 0 14 0 0
4 the.euq.queue 0 0 2 0 0
5 the.euq.release.queue 0 0 0 0 0
如果在1-2小时后，传送队列中仍有一些邮件，则需要使用命令bouncerecipients 选择选项“3. All”来退回这些邮件，然后等待队列变空。
> bouncerecipients
Please select how you would like to bounce messages:
1. By recipient host.
2. By Envelope From address.
3. All.
[1]> 3
退回邮件的发件人将收到无法传送邮件的通知)
使用命令suspenddel暂停消息传送。
> suspenddel
Enter the number of seconds to wait before abruptly closing connections.
[30]>
通过命令saveconfig或mailconfig备份配置，因为它需要清除smtp路由，然后稍后将其添加回来：
> saveconfig
Do you want to mask the password? Files with masked passwords cannot be loaded using
loadconfig command. [Y]>
通过GUI转到网络(Network)-> SMTP路由(SMTP Routes)并删除所有smtp路由。（记下旧路由，因为您稍后需要再次添加这些路由）。 或者，通过CLI使用打印显示，然后清除删除。
> smtproutes
There are currently 4 routes configured.
Choose the operation you want to perform:
- NEW - Create a new route.
- EDIT - Edit destinations of an existing route.
- DELETE - Remove a route.
- PRINT - Display all routes.
- IMPORT - Import new routes from a file.
- EXPORT - Export all routes to a file.
- CLEAR - Remove all routes.
[]> print
..
[]> clear
编辑“All Other Domains” smtp路由，将其设置为SMA设备的IP地址，端口设置为6025。
>smtproutes
[]> edit
Enter the hostname you want to edit.
[]> ALL
Choose the operation you want to perform:
- ADD - Add new destination hosts.
- REPLACE - Specify a new destination or set of destinations
[]> REPLACE
Enter the destination hosts, separated by commas, which you want mail for ALL to be
delivered.
Enter USEDNS by itself to use normal DNS resolution for this route.
Enter /dev/null by itself if you wish to discard the mail.
Enclose in square brackets to force resolution via address (A)
records, ignoring any MX records.
[]> mysma.com:6025
Default route updated.
验证： 从本地隔离区提交更改并释放2-3垃圾邮件作为测试。
> commit
Please enter some comments describing your changes:
[]> changed default smtp route to point to SMA
如果已放行的邮件正确到达集中垃圾邮件隔离区，请释放其余邮件。
将所有邮件传输到SMA设备后，在ESA设备上恢复旧的SMTP路由路由。
禁用本地垃圾邮件隔离区并启用集中隔离区。
使用命令恢复ESA的正常操作 继续。
> resume
Mail delivery resumed.
反馈