天天看點

postfix垃圾郵件處理

安裝clamav

Shell> groupadd –g 1006 clamav

Shell> useradd –g 1006 –u 1006 –s /bin/false –d /dev/null –c “Clamav Install User” clamav

Shell> tar zxvf clamav-0.98.4-r1.tar.gz

Shell> cd clamav-0.98.4-r1

Shell> ./configure –prefix=/data/sw/clamav –with-dbdir=/data/sw/clamav/db

Shell> make && make install

Shell> mkdir –p /data/sw/clamav/run /data/sw/clamav/db /data/sw/clamav/logs

Shell> groupadd –g 1007 amavis

Shell> useradd –g 1007 –u 1007 –s /bin/flase –d /dev/null –c “Amavis User” amavis

Shell> chown –R amavis:amavis /data/sw/clamav/run /data/sw/clamav/db /data/sw/clamav/logs

Shell> chmod –R 700 /data/sw/clamav/run

Shell> cp /data/sw/clamav/etc/clamd.conf.sample /data/sw/clamav/etc/clamd.conf

Shell> cp /data/sw/clamav/etc/freshclam.conf.sample /data/sw/clamav/etc/freshclam.conf

配置clamav

Shell> cd /data/sw/clamav

Shell> vi etc/clamd.conf

登出Example,并修改配置如下

<a href="http://chengchow.blog.51cto.com/attachment/201406/20/1642666_1403251927Veej.jpg" target="_blank"></a>

Shell&gt; vi etc/freshclam.conf

登出Example并修改配置如下

<a href="http://chengchow.blog.51cto.com/attachment/201406/20/1642666_1403251930nTsp.jpg" target="_blank"></a>

更新病毒庫

Shell&gt; bin/freshclam

啟動clamav

Shell&gt; /data/sw/clamav/sbin/clamd

病毒庫自動更新

Shell&gt; echo “0 4 * * * root /data/sw/clamav/bin/freshclam --quiet --log=/data/sw/clamav/logs/freshclam.conf” &gt;&gt; /etc/crontab

Shell&gt; tar zxvf Mail-SpamAssassin-3.4.0.tar.gz

Shell&gt; cd Mail-SpamAssassin

Shell&gt; perl Markfile.PL

<a href="http://chengchow.blog.51cto.com/attachment/201406/20/1642666_1403251934ViA2.png" target="_blank"></a>

Fetch的安裝

Shell&gt; tar zxvf http_fetcher-1.1.0.tar.gz

Shell&gt; cd http_fetcher-1.1.0

Shell&gt; ./configure

Shell&gt; vi src/http_fetcher.c

注釋掉781

<a href="http://chengchow.blog.51cto.com/attachment/201406/20/1642666_1403251934LBd7.jpg" target="_blank"></a>

Shell&gt; tar zxvf fetch-1.0.tar.gz

Shell&gt; cd fetch-1.0

Curl安裝

Shell&gt; tar zxvf fetch-7.37.0.tar.gz

Shell&gt; cd fetch-7.37.0

<b></b>

<b>Gnupg</b><b>安裝</b>

Shell&gt; tar xvf libassuan-2.1.1.tar.bz2

Shell&gt; cd libassuan-2.1.1

Shell&gt; tar xvf libgpg-error-1.13.tar.bz2

Shell&gt; cd libgpg-error-1.13

Shell&gt; tar xvf libksba-1.3.0.tar.bz2

Shell&gt; cd libksba-1.3.0

Shell&gt; tar zxvf pth-2.07.tar.gz

Shell&gt; cd pth-2.07

Shell&gt; ldconfig –v

Shell&gt; tar zxvf gnupg-1.4.16.tar.bz2

Shell&gt; cd gnupg-1.4.16

<b>Razor2</b><b>安裝</b>

Geo-IP的安裝

Shell&gt; tar zxvf Geo-IP-1.4.3.tar.gz

Shell&gt; cd Geo-IP-1.4.3

Shell&gt; perl Mailfile.PL PP=1

perl子產品安裝

Shell&gt; perl –MCPAN –e shell

Cpan&gt; install Net::DNS

Cpan&gt; install Net::DNS::Resolver::Programmable

Cpan&gt; install NetAddr::IP

Cpan&gt; install Digest::SHA1

Cpan&gt; install IO::Socket::IP

Cpan&gt; install IO::Socket::INET6

Cpan&gt; install IO::Socket::SSL

Cpan&gt; install Mail::DKIM

Cpan&gt; install LWP::UserAgent

Cpan&gt; install HTTP::Date

Cpan&gt; install Encode::Detect

Cpan&gt; install Net::Patricia

Cpan&gt; install Time::HiRes

Cpan&gt; install Archive::Tar

Cpan&gt; install MIME::Base64

Cpan&gt; install Mail::SPF

Cpan&gt; install DBI

Cpan&gt; install Net::LDAP

Cpan&gt; install ZeroMQ

Cpan&gt; install SpamAssassin

Cpan&gt; install Razor2::Client::Agent

Cpan&gt; install XML::LibXML::Iterator

更多子產品參考SpamAssassin安裝目錄INSTALL檔案

Shell&gt; perl Makefile.PL

啟動

Shell&gt; sa-update –no-gnupg

Shell&gt; spamassassin &amp;

安裝amavisd

Shell&gt; tar xvf amavisd-new-2.9.0.tar.xz

Shell&gt; cd amavisd-new-2.9.0

Amavisd和Spamassassin安裝需要很多perl module,安裝之間先看下INSTALL檔案,源碼安裝太麻煩,如果有聯網建議CPAN安裝

INSTALL列出先決條件如下:

<a href="http://chengchow.blog.51cto.com/attachment/201406/20/1642666_1403251935XrDy.jpg" target="_blank"></a>

Perl 子產品如下

<a href="http://chengchow.blog.51cto.com/attachment/201406/20/1642666_1403251935FBD1.jpg" target="_blank"></a>

郵件病毒掃描需求(已經安裝)

<a href="http://chengchow.blog.51cto.com/attachment/201406/20/1642666_1403251935C6zW.jpg" target="_blank"></a>

擴充程式(暫時不安裝)

<a href="http://chengchow.blog.51cto.com/attachment/201406/20/1642666_1403251936M1KZ.jpg" target="_blank"></a>

第三方工具(暫時不安裝)

<a href="http://chengchow.blog.51cto.com/attachment/201406/20/1642666_14032519366rJT.jpg" target="_blank"></a>

Shell&gt; perl –MCAPN –e shell

Cpan&gt; install Archive::Zip

Cpan&gt; install Compress::Zlib

Cpan&gt; install Compress::Raw::Zlib

Cpan&gt; install MIME::Parser

Cpan&gt; install Mail::Internet

Cpan&gt; install Net::Server

Cpan&gt; install Digest::MD5

Cpan&gt; install Unix::Syslog

Cpan&gt; install IO::Stringy

Cpan&gt; install Convert::BinHex

Cpan&gt; install BerkeleyDB

Cpan&gt; install Unix::Getrusage

cpan&gt; install Image::Info

amavisd配置

shell&gt; vi /etc/amavisd.conf

$daemon_user = 'amavis';

$daemon_group = 'amavis';

$mydomain = 'zhengwing.org';

$MYHOME = '/var/amavis';

$TEMPBASE = "$MYHOME/tmp";.

$QUARANTINEDIR = '/var/amavis/var/virusmails';

$db_home = "$MYHOME/db";

$helpers_home = "$MYHOME/home";

$lock_file = "$MYHOME/var/amavisd.lock";

$pid_file = "$MYHOME/var/amavisd.pid";

$unix_socketname = "$MYHOME/var/amavisd.sock";

$myhostname = 'mail.zhengwing.org';

##以上是amavisd.conf基本配置

##以下是amavisd.conf關于clamav配置

['ClamAV-clamd-stream',

\&amp;ask_daemon, ["*", 'clamd:/data/sw/clamav/run/clamd.sock'],

qr/\bOK$/m, qr/\bFOUND$/m,

qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],

Postfix支援amavisd

Shell&gt; vi /etc/postfix/main.cf

<a href="http://chengchow.blog.51cto.com/attachment/201406/20/1642666_1403251937qKXQ.png" target="_blank"></a>

Shell&gt; vi /etc/postfix/master.cf

<a href="http://chengchow.blog.51cto.com/attachment/201406/20/1642666_1403251937xpGH.png" target="_blank"></a>

Shell&gt; postfix reload

調試

Shell&gt; /usr/local/sbin/amavisd –u amavis debug

如果有問題,參照調試日志修改

Shell&gt; /usr/local/sbin/amavisd –u amavis &amp;

本文轉自 chengchow 51CTO部落格,原文連結:http://blog.51cto.com/chengchow/1428783,如需轉載請自行聯系原作者