LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 03-30-2005, 06:38 AM   #1
susje
LQ Newbie
 
Registered: Dec 2004
Posts: 17

Rep: Reputation: 0
calmav + mailscanner


Dear all,

I'm using Fedora Core 1 as my mail server. Is calmav + mailscanner a good combination for mail scanner?

When I do:

# yum search calmav

it returns calmav 0.71-0.fdr.2.1, which is a pretty old version. Should I install the 0.83 rpm package? Does it support Fedora Core 1?

Thank you so much for the help.
 
Old 04-02-2005, 01:42 PM   #2
jerky
Member
 
Registered: Jul 2003
Distribution: RH 7.3 , RH9,RHEL,FC
Posts: 38

Rep: Reputation: 15
mail scanning

i use sendmail with Cyrus-imapd installed as the local delivery agent. This combined with Clamav+Spamassassin running in the Sendmail Queue , to do this you will need spamass-milter and clamav-milter. This will scan the mail before it is delivered to the inbox. You don't necessarily need to use Cyrus-imapd, as it is Sendmails feature that you are implementing the scanning mail in the Queue. Combined with a Blacklists such as spamhaus and spamcop, you will see many rejects in your maillog heres an example of the configuration needed in your /etc/mail/sendmail.mc

dnl # ANTI-VIRUS CLAMD , CLAMAV-MILTER CONNECT LOCAL SOCKET
INPUT_MAIL_FILTER(`spamassassin', `S=local:/var/run/spamass.sock, F=, T=C:15m;S:4m;R:4m;E:10m')
INPUT_MAIL_FILTER(`clamav', `S=local:/var/clamav/clmilter.sock, T=S:4m;R:4m')dnl
define(`confINPUT_MAIL_FILTERS', `spamassassin,clamav')dnl

dnl # Abuse-lists
FEATURE(`dnsbl', `list.dsbl.org', `"550 Mail from " $`'&{client_addr} " refused - see http://dsbl.org/"')dnl
FEATURE(`dnsbl', `bl.spamcop.net', `"550 Mail from " $`'&{client_addr} " refused - see http://spamcop.net/bl.shtml"')dnl
FEATURE(`dnsbl', `sbl-xbl.spamhaus.org', `"550 Mail from " $`'&{client_addr} " refused - see http://www.spamhaus.org/SBL"')dnl



Make sure of course when you install spamass-milter and clamav-milter that they have correct local socket, that your sendmail.mc points to the proper socket or else they will be bi-passed and no scanning will be done. I have set Spamassassin to run as a non-priviledged user, although i see documentation mentioning otherwise. It is important that the user, who run spamassin, have access to ~/.spamassassin as it will attempt to find the user you are sending mail to.
 
Old 05-06-2005, 03:53 AM   #3
susje
LQ Newbie
 
Registered: Dec 2004
Posts: 17

Original Poster
Rep: Reputation: 0
Thanks dude,

So do you mean that with the above sendmail "proper" configuration, and spamass-milter and clamav-milter being installed, I don't need to install calmav in extra? I simply need to install mailscanner for virus and the combination will work?

Do I need to install clamav-data.i386 as well? or clamav will update itself?
 
Old 05-06-2005, 07:45 AM   #4
jerky
Member
 
Registered: Jul 2003
Distribution: RH 7.3 , RH9,RHEL,FC
Posts: 38

Rep: Reputation: 15
Quote:
Originally posted by susje
Thanks dude,

So do you mean that with the above sendmail "proper" configuration, and spamass-milter and clamav-milter being installed, I don't need to install calmav in extra? I simply need to install mailscanner for virus and the combination will work?

Do I need to install clamav-data.i386 as well? or clamav will update itself?
You will need these and probably a few other dependencies.

clamav-milter-0.83-1.1.fc3.rf
clamd-0.83-1.1.fc3.rf
clamav-db-0.83-1.1.fc3.rf
clamav-0.83-1.1.fc3.rf

spamassassin-3.0.3-3.fc3
spamass-milter-0.3.0-1.1.fc3.rf


You can get most of these pre-built rpms from ATRPMS or DAG. Clamav-milter is just used for interaction with Sendmail, you will still need clamav and any needed dependencies to properly use it to scan your Queue.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
MailScanner Issues speed_viper Linux - Software 2 07-12-2005 08:59 AM
MailScanner Error David@330 Linux - Newbie 4 04-01-2005 03:56 AM
MailScanner Error Still David@330 Linux - Newbie 0 04-01-2005 01:57 AM
Postfix with MailScanner wmartino Linux - Security 3 03-14-2004 12:30 PM
mailscanner + postfix rafalek Linux - Software 0 02-10-2004 12:52 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:20 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration