New subject: [suse-security] postfix - amavisd-new - clamav

1 Jul 2004

      Hi, 
 i have tried to configure postfix with amavis-new and clamav , but clamav doesn't scan te mail. 
 This is my configuration in /etc/postfix/main.cf : 
 content_filter = smtp-amavis:[127.0.0.1]:10024 
 And in /etc/postfix/master.cf : 
 smtp-amavis unix - - y - 2 smtp -o smtp_data_done_timeout=1200 
 localhost:10025 inet n - n - - smtpd -o content_filter= 
  -o local_recipient_maps= 
  -o relay_recipient_maps= 
  -o smtpd_restriction_classes= 
  -o smtpd_client_restrictions= 
  -o smtpd_helo_restrictions= 
  -o smtpd_sender_restrictions= 
  -o smtpd_recipient_restrictions=permit_mynetworks,reject 
  -o mynetworks=127.0.0.0/8 
  -o strict_rfc821_envelopes=yes 
  -o smtpd_error_sleep_time=0 
  -o smtpd_soft_error_limit=1001 
  -o smtpd_hard_error_limit=1000 

 Amavisd-new is so configured : 
 ..... 
 @av_scanners = ( 
  ['Clam Antivirus-clamd', 
    \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamd.ctl"], 
    qr/\bOK$/, qr/\bFOUND$/, 
    qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ], 
 ); 
 .... 
 My /etc/clamav.conf is so sonfigured : 
 LogFile /var/log/clamd.log 
 LogFileMaxSize 2M 
 LogSyslog 
 LogFacility LOG_MAIL 
 LogVerbose 
 PidFile /var/run/clamd.pid 
 DatabaseDirectory /usr/share/clamav 
 LocalSocket /var/run/clamd.ctl 
 MaxThreads 12 
 ReadTimeout 180 
 MaxDirectoryRecursion 15 
 User vscan 
 ScanOLE2 
 ScanMail 
 ScanArchive 
 ArchiveMaxFileSize 10M 
 ArchiveMaxRecursion 5 
 ArchiveMaxFiles 1000 
 ArchiveMaxCompressionRatio 200 
 ClamukoScanOnOpen 
 ClamukoScanOnClose 
 ClamukoScanOnExec 
 ClamukoIncludePath /home 
 ClamukoMaxFileSize 1M 
 ClamukoScanArchive 

 When i send a mail in /var/log/mail i have the following messages : 

 Jul 1 16:46:43 localhost postfix/smtp[9016]: connect to localhost[::1]: Connection refused (port 10024) 
 Jul 1 16:46:45 localhost amavis[8976]: (08976-01) ESMTP::10024 /var/spool/amavis/amavis-20040701T164644 
 -08976: <cristian2@cristian.lucca.osratoscana.it> -> <cristian.delcarlo@osratoscana.it> Received: SIZE=1 
 370 BODY=8BITMIME from cristian.lucca.osratoscana.it ([127.0.0.1]) by localhost (cristian.lucca.osratosc 
 ana.it [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08976-01 for <cristian.delcarlo@osratoscana. 
 it>; Thu, 1 Jul 2004 16:46:45 +0200 (CEST) 
 Jul 1 16:46:46 localhost amavis[8976]: (08976-01) Checking: <cristian2@cristian.lucca.osratoscana.it> -
...
<cristian.delcarlo@osratoscana.it> 
 Jul 1 16:46:56 localhost amavis[8976]: (08976-01) spam_scan: hits=0 tests= 
 Jul 1 16:46:57 localhost amavis[8976]: (08976-01) FWD via SMTP: [127.0.0.1]:10025 <cristian2@cristian.l 
 ucca.osratoscana.it> -> <cristian.delcarlo@osratoscana.it> 
 Jul 1 16:46:58 localhost postfix/smtpd[9025]: connect from localhost[127.0.0.1] 
 Jul 1 16:46:58 localhost postfix/smtpd[9025]: 9EAE82E5AE: client=localhost[127.0.0.1] 
 Jul 1 16:46:58 localhost postfix/cleanup[9013]: 9EAE82E5AE: message-id=<20040701.DVZ.53753800@cristian. 
 lucca.osratoscana.it> 
 Jul 1 16:46:59 localhost postfix/smtpd[9025]: disconnect from localhost[127.0.0.1] 
 Jul 1 16:46:59 localhost amavis[8976]: (08976-01) Passed, <cristian2@cristian.lucca.osratoscana.it> -> <cristian.delcarlo@osratoscana.it>, Message-ID: <20040701.DVZ.53753800@cristian.lucca.osratoscana.it>, Hits: 0 
 Jul 1 16:46:59 localhost amavis[8976]: (08976-01) TIMING [total 15754 ms] - SMTP EHLO: 153 (1%), SMTP pre-MAIL: 0 (0%), mkdir tempdir: 662 (4%), create email.txt: 250 (2%), SMTP pre-DATA-flush: 282 (2%), SMTP DATA: 248 (2%), body hash: 338 (2%), mkdir parts: 377 (2%), mime_decode: 1072 (7%), get-file-type: 1726 (11%), get-file-type: 98 (1%), decompose_part: 277 (2%), decompose_part: 512 (3%), get-file-type: 20 (0%), decompose_part: 1 (0%), parts: 0 (0%), SA msg read: 479 (3%), SA parse: 162 (1%), SA check: 6067 (39%), fwd-connect: 1581 (10%), fwd-mail-from: 52 (0%), fwd-rcpt-to: 438 (3%), write-header: 49 (0%), fwd-data: 0 (0%), fwd-data-end: 682 (4%), fwd-rundown: 1 (0%), unlink-2-files: 224 (1%), rundown: 0 (0%) 
 Jul 1 16:46:59 localhost postfix/smtp[9016]: C33DE2E5AD: to=<cristian.delcarlo@osratoscana.it>, relay=localhost[127.0.0.1], delay=18, status=sent (250 2.6.0 Ok, id=08976-01, from MTA: 250 Ok: queued as 9EAE82E5AE) 
 Jul 1 16:47:00 localhost postfix/qmgr[8674]: 9EAE82E5AE: from=<cristian2@cristian.lucca.osratoscana.it>, size=1822, nrcpt=1 (queue active) 
 Jul 1 16:47:00 localhost postfix/qmgr[8674]: C33DE2E5AD: removed
Where is the mistake ? 
 Best regards, 

Cristian Del Carlo
delcarlo@osratoscana.it
Tel. 0583 424700
Fax 0583 424750
http://www.osratoscana.it

Il testo e gli eventuali documenti trasmessi contengono informazioni riservate al destinatario indicato. La seguente e-mail è confidenziale e la sua riservatezza è tutelata legalmente dal Decreto Legislativo 196 del 30/06/2003 (Codice di tutela della privacy). La lettura, copia o altro uso non autorizzato o qualsiasi altra azione derivante dalla conoscenza di queste informazioni sono rigorosamente vietate. Qualora abbiate ricevuto questo documento per errore siete cortesemente pregati di darne immediata comunicazione al mittente e di provvedere, immediatamente, alla sua distruzione.

postfix - amavisd-new - clamav

Cristian Del Carlo

Andreas Winkelmann

Cristian Del Carlo

Cristian Del Carlo

tags

participants (2)