Postfix + Clamav + Amavisd
2014/09/26
|
Configure Virus-Scanning with Postfix + Clamav.
| |
[1] | |
[2] | Install Amavisd and Clamav Server, and start Clamav Server first. |
# install from EPEL
[root@mail ~]#
yum --enablerepo=epel -y install amavisd-new clamav-server clamav-server-systemd
cp /usr/share/doc/clamav-server*/clamd.sysconfig /etc/sysconfig/clamd.amavisd
[root@mail ~]#
vi /etc/sysconfig/clamd.amavisd
# line 1, 2: uncomment and change
CLAMD_CONFIGFILE=/etc/clamd.d/
amavisd.conf
CLAMD_SOCKET=/var/run/
clamd.amavisd
/clamd.sock
[root@mail ~]#
vi /etc/tmpfiles.d/clamd.amavisd.conf
# create new
d /var/run/clamd.amavisd 0755 amavis amavis -
[root@mail ~]#
vi /usr/lib/systemd/system/clamd@.service
# add follows to the end
[Install] WantedBy=multi-user.target
systemctl start clamd@amavisd
[root@mail ~]#
systemctl enable clamd@amavisd
ln -s '/usr/lib/systemd/system/clamd@.service' '/etc/systemd/system/multi-user.target.wants/clamd@amavisd.service' |
[3] | Configure Amavisd. |
[root@mail ~]#
vi /etc/amavisd/amavisd.conf
# line 20: change to the own domain name
$mydomain = '
server.world
';
# line 152: change to the own hostname
$myhostname = '
mail.server.world
';
# line 154: uncomment
$notify_method = 'smtp:[127.0.0.1]:10025'; $forward_method = 'smtp:[127.0.0.1]:10025';
systemctl start amavisd
[root@mail ~]#
systemctl enable amavisd
[root@mail ~]#
systemctl start spamassassin
[root@mail ~]#
systemctl enable spamassassin
|
[4] | Configure Postfix. |
[root@mail ~]#
vi /etc/postfix/main.cf
# add follows to the end
content_filter=smtp-amavis:[127.0.0.1]:10024
[root@mail ~]#
vi /etc/postfix/master.cf
# add follows to the end
smtp-amavis unix - - n - 2 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o disable_dns_lookups=yes 127.0.0.1:10025 inet n - n - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_client_restrictions= -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o mynetworks=127.0.0.0/8 -o strict_rfc821_envelopes=yes -o smtpd_error_sleep_time=0 -o smtpd_soft_error_limit=1001 -o smtpd_hard_error_limit=1000
systemctl restart postfix
|
[5] | It' OK all. These lines below are added in the header section of emails after this configuration and emails with known Virus will not sent to Clients. |
Nenhum comentário:
Postar um comentário