建立qmail邮件系统防毒

软件列表

maildrop-1.6.3.tar
perl-Time-HiRes-1.38-3.i386.rpm
perl-DB_File-1.804-88.4.i386.rpm
clamav-0.80.tar.gz
qmail-scanner-1.24.gz

安装maildrop：

# tar xvf maildrop-1.6.3.tar
# cd maildrop-1.6.3
# ./configure
# make
# make install-strip
# make install-man

安装 perl插件

# rpm -ivh perl-Time-HiRes-1.38-3.i386.rpm
# perl -MCPAN -e'shell'
cpan> install Time::HiRes
cpan> exit

# rpm -ivh perl-DB_File-1.804-88.4.i386.rpm

安装clamav-0.80.tar.gz

# groupadd clamav
# useradd -g clamav –d /usr/local/share/clamav -s /bin/false clamav
# tar zxvf clamav-0.80.tar.gz
# cd clamav-0.80
#./configure
# make check
# make install

建立配置文件和启动文件

# vi /usr/local/etc/clamd.conf

LogFile /usr/local/share/clamav/clamd.log

LogTime

LogSyslog

LogVerbose

PidFile /var/run/clamd.pid

DatabaseDirectory /usr/local/share/clamav

LocalSocket /tmp/clamd

User clamav

ScanMail

ScanArchive

ScanRAR

ClamukoScanOnOpen

ClamukoScanOnClose

ClamukoScanOnExec

ClamukoIncludePath /home/vpopmail

 

# touch /var/log/clamd.log

# chown clamav.clamav /usr/local/share/clamav/clamd.log

# vi freshclam.conf

DatabaseDirectory /usr/local/share/clamav

UpdateLogFile /var/log/freshclam.log

LogVerbose

LogSyslog

DatabaseOwner clamav

NotifyClamd /usr/local/etc/clamd.conf

 

DatabaseMirror database.clamav.net

DNSDatabaseInfo current.cvd.clamav.net

 

# touch /var/log/freshclam.log

# chmod 644 /var/log/freshclam.log

# chown clamav.clamav /var/log/freshclam.log

# vi /etc/rc.d/init.d/clamd

#! /bin/bash

#

# crond   Start/Stop the clam antivirus daemon.

#

# chkconfig: 2345 90 60

# description: clamdis a standard UNIX program that scans for Viruses.

# processname: clamd

# config: /usr/local/etc/clamav.conf

# pidfile: /var/run/clamd.pid

 

# Source function library.

. /etc/init.d/functions

RETVAL=0

# See how we were called.

prog="clamd"

progdir="/usr/local/sbin"

# Source configuration

if [ -f /etc/sysconfig/$prog ] ; then

    . /etc/sysconfig/$prog

fi

 

start() {

        echo -n $"Starting $prog: "

        daemon $progdir/$prog

        RETVAL=$?

        echo

        [ $RETVAL -eq 0 ] && touch /var/run/clamd.pid

        return $RETVAL

}

 

stop() {

     echo -n $"Stopping $prog: "

     killproc $prog

     RETVAL=$?

     echo

     [ $RETVAL -eq 0 ] && rm -f /var/run/clamd.pid /tmp/clamd

        return $RETVAL

}

 

rhstatus() {

     status clamd

}

 

restart() {

     stop

     start

}

 

reload() {

        echo -n $"Reloading clam daemon configuration: "

        killproc clamd -HUP

        retval=$?

        echo

        return $RETVAL

}

 

case "$1" in

  start)

        start

        ;;

  stop)

        stop

        ;;

  restart)

        restart

        ;;

  reload)

        reload

        ;;

  status)

        rhstatus

        ;;

  condrestart)

        [ -f /var/lock/subsys/clamd ] && restart || :

        ;;

  *)

        echo $"Usage: $0 {start|stop|status|reload|restart|condrestart}"

        exit 1

esac

exit 0

 

# chmod 755 /etc/rc.d/init.d/clamd

# chkconfig –add clamd

# chkconfig clamd on

更新病毒库

# /usr/local/bin/freshclam

定时更新病毒库

# crontab –e

00 9 * * * /usr/local/bin/freshclam –quiet

安装qmail-scanner-1.24.gz

确认安装了suidperl，否则执行qmail-scanner-queue.p时会提示Can't do setuid

# tar xzvf qmail-scanner-1.24.gz

# groupadd qscand

# useradd -g qscand -s /bin/false qscand

# cd qmail-scanner-1.24

#./configure --qmail-queue-binary /var/qmail/bin/qmail-queue --admin postmaster --domain eitop.com --notify sender,admin --local-domains eitop.com --lang en_GB --debug yes --unzip yes --scanners clamscan --install

 

# chown qscand:qscand /var/qmail/bin/qmail-scanner-queue.pl

# chmod 4755 /var/qmail/bin/qmail-scanner-queue.pl

然后用一个普通用户执行/var/qmail/bin/qmail-scanner-queue.pl -z

修改环境变量

在你的qmail启动脚本加入(/etc/profile)

QMAILQUEUE=/var/qmail/bin/qmail-scanner-queue.pl
export QMAILQUEUE

修改qmail-scanner-queue.pl中的

my $clamscan_options="-r --disable-summary --max-recursion=10 --max-space=1000000";

为:

my $clamscan_options="-r --mbox --disable-summary --max-recursion=10 --max-space=1000000";

测试

重起qmail后，执行测试程序

测试程序目录：/qmail-scanner-1.24/contrib/test_installation.sh -doit

排错日志文件

/var/log/maillog
/var/log/clamd.log
/var/spool/qmailscan/quarantine.log
/var/spool/qmailscan/qmail-queue.log