Arch Linux

Carlwill

Member

From: Orlando, FL

Registered: 2008-10-06

Posts: 560

Website

Integrate Clamav Into Postfix

Anyone know how or have a complete right up from scratch on how I can integrate ClamAV (virus scanning) in with my Postfix 2.7 server?

Right now my mail server is simply running:

1. Arch Linux
2. NTP
3. Postfix (SMTP)
4. Dovecot (IMAP Only)

Would like to have ClamAV daemon scan all incoming and outgoing messages for known threats but couldn't find  a write up on how to integrate the two daemons to work together.

Last edited by Carlwill (2010-11-10 18:58:52)

---

./

Kasumi_Ninja

Member

Registered: 2009-12-31

Posts: 54

Re: Integrate Clamav Into Postfix

I recommend using amavisd for clamav/spamassin integration with postfix. You can install amavisd from aur. Here are my instructions for configuring amavisd in Debian.

Update virus definitions

freshclam

Set correct permissions

gpasswd -a clamav amavis
gpasswd -a amavis clamav

Enable  amavisd clamav integration

Edit /etc/amavisd.conf
Ucomment antivirus

Enable amavis in postfix

Add to /etc/postfix/main.cf:
content_filter=amavisfeed:[127.0.0.1]:10024

Add to /etc/postfix/master.cf:
amavisfeed unix    -       -       n       -       2     smtp
    -o smtp_data_done_timeout=1200
    -o smtp_send_xforward_command=yes
    -o disable_dns_lookups=yes
    -o max_use=20

127.0.0.1:10025 inet n    -       n       -       -     smtpd
    -o content_filter=
    -o smtpd_delay_reject=no
    -o smtpd_client_restrictions=permit_mynetworks,reject
    -o smtpd_helo_restrictions=
    -o smtpd_sender_restrictions=
    -o smtpd_recipient_restrictions=permit_mynetworks,reject
    -o smtpd_data_restrictions=reject_unauth_pipelining
    -o smtpd_end_of_data_restrictions=
    -o smtpd_restriction_classes=
    -o mynetworks=127.0.0.0/8
    -o smtpd_error_sleep_time=0
    -o smtpd_soft_error_limit=1001
    -o smtpd_hard_error_limit=1000
    -o smtpd_client_connection_count_limit=0
    -o smtpd_client_connection_rate_limit=0
    -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
    -o local_header_rewrite_clients=

Testing amavis

$ telnet localhost 10024
220 [127.0.0.1] ESMTP amavisd-new service ready
EHLO localhost
250-[127.0.0.1]
250-VRFY
250-PIPELINING
250-SIZE
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 XFORWARD NAME ADDR PROTO HELO
QUIT
221 2.0.0 [127.0.0.1] amavisd-new closing transmission channel

$ telnet 127.0.0.1 10025
220 mail.example.com ESMTP Postfix (2.3.2)
EHLO localhost
250-mail.example.com
250-PIPELINING
250-SIZE 40960000
250-ETRN
250-STARTTLS
250-AUTH PLAIN CRAM-MD5 LOGIN DIGEST-MD5
250-AUTH=PLAIN CRAM-MD5 LOGIN DIGEST-MD5
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
QUIT
221 2.0.0 Bye

Last edited by Kasumi_Ninja (2010-11-12 08:26:19)