Re: Postfix + clamav-milter

2006-10-22 Thread jan gestre

On 10/22/06, Gerard Seibert <[EMAIL PROTECTED]> wrote:


On Saturday October 21, 2006 at 08:17:51 (PM) Bill Campbell wrote:



Yes actually. Reading the Postfix forum, it seems that people are having
problems with it everyday. I just want to keep it as simple as possible,
Amavisd requires mucking around in the master.cf file and I would rather
not get involved in that if possible.


i've been using postfix+clamav+amavisd-new way back when our mailserver
was running on debian, it's now running under FreeBSD 6.1 for almost 5
months now, and i don't encounter any problems, besides editing master.cfis 
easy enough and there are lots of how to regarding the matter.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Postfix + clamav-milter

2006-10-22 Thread albi albinootje

On 10/22/06, NetOpsCenter <[EMAIL PROTECTED]> wrote:


clamsmtp sounds like what I need.

What do you use for a spam rejector?

I have this same issue as Gerard that I want to resolv on a new mail server.  
"Keep it
simple and as spam free as virus free as possible."


i like the keep-it-simple approach, i've however dealt with the long
config-file from amavis
recently and i'm happy about the results!


I have postfix running under dovecot which works fine, and I want to add  the 
anti virus and
spam rejection.


on one mailserver i'm running
postfix+dovecot+mysql+maildrop+amavisd-new+spamassassin,
one another postfix+dovecot+clamsmtp+clamav+procmail

i'm planning to move the 2nd one also to amavisd-new+spamassassin,
instead of clamsmtp+clamav+procmail+spamassassin

with postfix and amavisd-new rejecting all kind of binaries the need
for virus-scanning
is not so urgent for me, also because there's almost no
windows-partition left :]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Postfix + clamav-milter

2006-10-22 Thread Gerard Seibert
On Sunday October 22, 2006 at 08:09:50 (AM) albi albinootje wrote:


> On 10/22/06, Gerard Seibert <[EMAIL PROTECTED]> wrote:
> 
> > > Any reason you're not using postfix/amavisd-new/clamav?  It works
> > > quite nicely.
> >
> > Yes actually. Reading the Postfix forum, it seems that people are having
> > problems with it everyday. I just want to keep it as simple as possible,
> > Amavisd requires mucking around in the master.cf file and I would rather
> > not get involved in that if possible.
> 
> what's the problem with editing master.cf ?
> 
> and if you only want anti-virus checking, try clamsmtp (it's in the ports),
> it's rather easy to set up if you quickly read the documentation
> 
> and compared to amavis config-file it's a breeze to edit the config  ;)

I have used "clamsmtp". In fact, I was inspirational in discovering the
configuration problems with it while employing TLS in Postfix.

The problem is that 'clamsmtp' bogs down under load. It was causing a
great many messages to get hung up in the queue when under heavy load. I
finally aborted it.

BTW, I now have clamav-milter working, but only for out going messages.
I am tryng to discover what the problem with it is now.

-- 
Gerard
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Postfix + clamav-milter

2006-10-22 Thread albi albinootje

On 10/22/06, Gerard Seibert <[EMAIL PROTECTED]> wrote:


> Any reason you're not using postfix/amavisd-new/clamav?  It works
> quite nicely.

Yes actually. Reading the Postfix forum, it seems that people are having
problems with it everyday. I just want to keep it as simple as possible,
Amavisd requires mucking around in the master.cf file and I would rather
not get involved in that if possible.


what's the problem with editing master.cf ?

and if you only want anti-virus checking, try clamsmtp (it's in the ports),
it's rather easy to set up if you quickly read the documentation

and compared to amavis config-file it's a breeze to edit the config  ;)
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Postfix + clamav-milter

2006-10-22 Thread Gerard Seibert
On Saturday October 21, 2006 at 08:17:51 (PM) Bill Campbell wrote:


> On Sat, Oct 21, 2006, Gerard Seibert wrote:
> >FreeBSD 6.1 STABLE
> >Clamav-milter 0.88.5
> >Postfix-2.4-20061006
> >
> >I have been trying to get postfix to work with clamav-milter. I added
> >this to my main.cf file:
> 
> Any reason you're not using postfix/amavisd-new/clamav?  It works
> quite nicely.

Yes actually. Reading the Postfix forum, it seems that people are having
problems with it everyday. I just want to keep it as simple as possible,
Amavisd requires mucking around in the master.cf file and I would rather
not get involved in that if possible.


-- 
Gerard
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Postfix + clamav-milter

2006-10-22 Thread Gerard
On Saturday October 21, 2006 at 08:10:02 (PM) Warren Block wrote:


> On Sat, 21 Oct 2006, Gerard Seibert wrote:
> 
> > FreeBSD 6.1 STABLE
> > Clamav-milter 0.88.5
> > Postfix-2.4-20061006
> >
> > I have been trying to get postfix to work with clamav-milter. I added
> > this to my main.cf file:
> >
> > smtpd_milters = /unix:/var/run/clamav/clmilter.sock
> > milter_default_action = accept
> >
> > As far as I can tell, postfix never uses this milter. I tried changing
> > the name to see what would happen, and postfix issued a warning that the
> > file could not be found. I am reasonable sure that postfix is aware of
> > the file; however it never appears to invoke it. I have insured that the
> > file is chmod'd to 777 and the /var/run/clamav is owned by
> > "clamav:postfix" so it can read the file.
> 
> Have you enabled clamd and clamav-milter in /etc/rc.conf?

Yes, and they start just fine. I would be getting an error message from
Postfix I assume if they were not running anyway.

-- 
Gerard

 "Friends come and go but enemies accumulate."

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Postfix + clamav-milter

2006-10-21 Thread Bill Campbell
On Sat, Oct 21, 2006, Gerard Seibert wrote:
>FreeBSD 6.1 STABLE
>Clamav-milter 0.88.5
>Postfix-2.4-20061006
>
>I have been trying to get postfix to work with clamav-milter. I added
>this to my main.cf file:

Any reason you're not using postfix/amavisd-new/clamav?  It works
quite nicely.

Bill
--
INTERNET:   [EMAIL PROTECTED]  Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
FAX:(206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676

``When dealing with any spammer, one must always keep in mind that you
are dealing with someone who makes their living through forgery, fraud,
theft, subterfuge and obfuscation.  Stated simply, spammers lie.''
 David Ritz <[EMAIL PROTECTED]>
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Postfix + clamav-milter

2006-10-21 Thread Warren Block

On Sat, 21 Oct 2006, Gerard Seibert wrote:


FreeBSD 6.1 STABLE
Clamav-milter 0.88.5
Postfix-2.4-20061006

I have been trying to get postfix to work with clamav-milter. I added
this to my main.cf file:

smtpd_milters = /unix:/var/run/clamav/clmilter.sock
milter_default_action = accept

As far as I can tell, postfix never uses this milter. I tried changing
the name to see what would happen, and postfix issued a warning that the
file could not be found. I am reasonable sure that postfix is aware of
the file; however it never appears to invoke it. I have insured that the
file is chmod'd to 777 and the /var/run/clamav is owned by
"clamav:postfix" so it can read the file.


Have you enabled clamd and clamav-milter in /etc/rc.conf?

-Warren Block * Rapid City, South Dakota USA
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Postfix + clamav-milter

2006-10-21 Thread Gerard Seibert
FreeBSD 6.1 STABLE
Clamav-milter 0.88.5
Postfix-2.4-20061006


I have been trying to get postfix to work with clamav-milter. I added
this to my main.cf file:

smtpd_milters = /unix:/var/run/clamav/clmilter.sock
milter_default_action = accept

As far as I can tell, postfix never uses this milter. I tried changing
the name to see what would happen, and postfix issued a warning that the
file could not be found. I am reasonable sure that postfix is aware of
the file; however it never appears to invoke it. I have insured that the
file is chmod'd to 777 and the /var/run/clamav is owned by
"clamav:postfix" so it can read the file.

There is nothing at all in the log file regarding it. Mail that is
received and scanned should have a notice placed in the headers. That is
not happening. I am not sure what I am doing wrong.

* postconf -n *


broken_sasl_auth_clients = yes
command_directory = /usr/local/sbin
config_directory = /usr/local/etc/postfix
daemon_directory = /usr/local/libexec/postfix
debug_peer_level = 2
disable_dns_lookups = yes
html_directory = no
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command = /usr/local/libexec/dovecot/deliver
mailbox_size_limit = 0
mailq_path = /usr/local/bin/mailq
manpage_directory = /usr/local/man
milter_default_action = accept
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mynetworks_style = host
myorigin = $mydomain
newaliases_path = /usr/local/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
relayhost = [smtp.gmail.com]:587
sample_directory = /usr/local/etc/postfix
sender_dependent_relayhost_maps = hash:/usr/local/etc/postfix/sd_rely
sendmail_path = /usr/local/sbin/sendmail
setgid_group = maildrop
smtp_generic_maps = hash:/usr/local/etc/postfix/generic
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_passwd
smtp_sasl_path = smtp
smtp_sasl_security_options = noanonymous, noplaintest
smtp_sasl_tls_security_options = noanonymous
smtp_sender_dependent_authentication = yes
smtp_tls_CAfile = /usr/local/etc/postfix/certs/cacert.pem
smtp_tls_cert_file = /usr/local/etc/postfix/certs/postfix-cert.pem
smtp_tls_key_file = /usr/local/etc/postfix/certs/postfix-key.pem
smtp_tls_loglevel = 0
smtp_tls_policy_maps = hash:/usr/local/etc/postfix/tls_policy
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:/var/run/smtp_tls_session_cache
smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)
smtpd_client_restrictions = reject_rbl_client relays.ordb.org   
reject_rbl_client dnsbl.sorbs.net
smtpd_milters = unix:/var/run/clamav/clmilter.sock
smtpd_recipient_restrictions = permit_sasl_authenticated
permit_mynetworks   reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain = $myhostname
smtpd_tls_CAfile = /usr/local/etc/postfix/certs/cacert.pem
smtpd_tls_cert_file = /usr/local/etc/postfix/certs/postfix-cert.pem
smtpd_tls_key_file = /usr/local/etc/postfix/certs/postfix-key.pem
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:/var/smtpd_tls_session_cache
transport_maps = hash:/usr/local/etc/postfix/transport
unknown_local_recipient_reject_code = 550


-- 
Gerard Seibert
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Postfix & clamav-milter

2006-10-21 Thread Gerard Seibert
FreeBSD 6.1
Postfix-2.4-20061006
Clamav-milter 0.88.5

I cannot seem to get the clamav-milter to work with postfix. This is the 
error message from the maillog:

Oct 21 14:23:03 scorpio postfix/smtpd[36556]: warning: connect to Milter 
service unix:/var/run/clamav/clmilter.sock: Permission denied

This is the entry in the main.cf file:

smtpd_milters = unix:/var/run/clamav/clmilter.sock
milter_default_action = accept

I changed the ownership on the /var/run/clamav directory to:

clamav:postfix

I even went as far as giving the directory a permission or: 1777.

This is from the /etc/rc.conf file:

clamav_milter_enable="YES"
clamav_milter_flags="-P -m 50 --quarantine-dir=/var/mail/quarantine -T 0"
clamav_milter_socket="/var/run/clamav/clmilter.sock"

I am fresh out of ideas why this is not working.

-- 
Gerard


pgprAmkzV5j8w.pgp
Description: PGP signature