mail-proxy enable

Function

The mail-proxy enable command enables the mail proxy function.

The undo mail-proxy enable command disables the mail proxy function.

Format

mail-proxy enable

undo mail-proxy enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The mail proxy function is enabled by default.

Some features related to the mail protocol are implemented through mail proxy. You need to enable the mail proxy function to use these features. The features implemented through mail proxy include:

Antivirus
Data filtering
File blocking
Mail filtering
APT Defense
Audit policy

If the mail proxy is faulty, you need to run the undo mail-proxy enable command to disable the mail proxy function to ensure the normal sending and receiving of mails. After this function is disabled, the preceding features of the mail protocol cannot be used.

Precautions

Before you enable mail proxy, ensure that TCP session status detection is enabled (firewall session link-state check). Otherwise, the mail proxy function fails to take effect. The mail proxy function applies only to the networks with consistent forward and return packet paths. In case of inconsistent forward and return paths, disable mail proxy and TCP session status detection to ensure proper email sending and receiving.

If the same flow passes through the FW multiple times and matches the mail proxy, the mail proxy becomes abnormal. To avoid this situation, ensure that the flow passes through different VLANs or VSYSs on the firewall during deployment.

Example

# Disable the mail proxy function.

<sysname> system-view
[sysname] undo mail-proxy enable