This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Migration Hardware ASG320 zu SG330 - Mails in Quarantaine und Logs?

Liebe Gemeinde,

wir haben gerade unser Hardware-Upgrade bekommen. Bisher nutzen wir zwei ASG320 im HA Active/Passive-Cluster und wollen diese durch die SG330 ersetzen.

Wenn ich nun eine Neuinstallation mit Backup mache, ist zwar die Config lauffähig und komplett da, aber die Logfiles und - viel schlimmer - die Quarantaine-Mails der Nutzer sind weg. Dies wurde ja bereist in anderen Beiträgen hier beschrieben.

Ich habe auch schon versucht, den passive-Node durch eine neue SG330 zu ersetzen, das schlägt fehl wegen falscher Appliance.

Gibt es hier einen eleganten Migrationsweg? Kann man vielleicht temporär die Abfrage bei HA abschalten, dass dies auch mit unterschiedlichen Appliances funktioniert?

 

Vielen Dank für Antworten.



This thread was automatically locked due to age.
Parents
  • Hallo Ralf,

    (Sorry, my German-speaking brain isn't creating thoughts at the moment. [:(])

    There is no elegant migration path.  It is possible to migrate the relevant files to the new machine by working at the command line, but that's not supported by Sophos.

    The mail quarantine files are in the subdirectories of /var/storage/chroot-smtp/spool/quarantine.  You could use WinSCP to move that entire directory just as you could the logs and directories in /var/log.  If a reboot at this point doesn't fix it, you probably would need to run /etc/init.d/postgresql92 rebuild to allow Mail Manager and the User Portal to access the items in the Quarantine.  If you had already moved the Reporting databases as suggested in the link above, you would need to transfer them again as the rebuild command also initializes them.

    So, that's to answer your question, but I wouldn't try that...

    I would first clear the following with the Geschäftsführer.  Send an email broadcast to everyone in the company and Cc the Geschäftsführer.  Instruct them to access the User Portal to release the emails they want delivered and to delete the rest.  Warn them that at 18:00 (for example) on Friday, there will be a five-minute downtime where you will:

    • Stop the SMTP Proxy so that no further emails are received.
    • Deliver ALL of the emails in the Quarantine.  "Now you know why it's important for you to delete the ones you don't want!"
    • Move all of the functionality over to the new SG330.

    To simplify that process, see #8 in Rulz.  You also might want to include instructions in your email about how to delete en mass, change the page size to 100 or 250 and select multiple emails to release.

    MfG - Bob (Bitte auf Deutsch weiterhin.)

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Hallo Ralf,

    (Sorry, my German-speaking brain isn't creating thoughts at the moment. [:(])

    There is no elegant migration path.  It is possible to migrate the relevant files to the new machine by working at the command line, but that's not supported by Sophos.

    The mail quarantine files are in the subdirectories of /var/storage/chroot-smtp/spool/quarantine.  You could use WinSCP to move that entire directory just as you could the logs and directories in /var/log.  If a reboot at this point doesn't fix it, you probably would need to run /etc/init.d/postgresql92 rebuild to allow Mail Manager and the User Portal to access the items in the Quarantine.  If you had already moved the Reporting databases as suggested in the link above, you would need to transfer them again as the rebuild command also initializes them.

    So, that's to answer your question, but I wouldn't try that...

    I would first clear the following with the Geschäftsführer.  Send an email broadcast to everyone in the company and Cc the Geschäftsführer.  Instruct them to access the User Portal to release the emails they want delivered and to delete the rest.  Warn them that at 18:00 (for example) on Friday, there will be a five-minute downtime where you will:

    • Stop the SMTP Proxy so that no further emails are received.
    • Deliver ALL of the emails in the Quarantine.  "Now you know why it's important for you to delete the ones you don't want!"
    • Move all of the functionality over to the new SG330.

    To simplify that process, see #8 in Rulz.  You also might want to include instructions in your email about how to delete en mass, change the page size to 100 or 250 and select multiple emails to release.

    MfG - Bob (Bitte auf Deutsch weiterhin.)

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children