Page 1 of 2
MAILSCANNER WITH SPAMASSASSIN + CLAMAV ON THE SAME SERVER
Posted: Thu Feb 09, 2006 8:12 am
by treedstang
I have a centos 4.2 sever running with scalix community Edition. Can someone point me in the right direction for getting MailScanner with Spamassassin +clamav to run all on the same server. I nice Howto would really help
Thanks
Tim
Posted: Thu Feb 09, 2006 10:58 am
by ScalixSupport
Hi Tim,
you mention two products not supported by Scalix, Centos and Mailscanner. Unfortunately, we have no documentation on Mailscanner and Scalix. There may have been users on the forum setting it up though.
Cheers.
Sascha.
Posted: Thu Feb 09, 2006 7:02 pm
by btisdall
Can't help you there but if you're interested I did recently get Amavisd-New working with ClamAV and SA using amavisd-milter (not be confused with the older amavisd-new milter, this is Petr Rehor's new one that uses the AM:DP protocol enabling full functionality of Amavis with sendmail).
This was on FC4 but I assume the differences with Centos are minimal if any.
I've mostly written up a howto and just need a final kick in the pants to finish it off and post it somewhere...
Ben Tisdall
RedCircle IT Ltd
Posted: Fri Feb 10, 2006 9:05 am
by Valerion
I implemented MailScanner for a client last year sometime on Scalix 9.1.0, mainly for disclaimer addition. The easiest way to get it to work was to make sendmail the primary SMTP listener, and not Scalix's SMTPD. I just added the normal sendmail config for MailScanner and it worked fine.
If I were to do it on 9.4.2 I would add SMTPFILTER=TRUE to the scalix smtpd config file, then edit the sendmail.mc and the init script with the neccesary options to support MailScanner and rebuild the cf file, then run omsendin to put the Scalix mailer back into the sendmail.cf. If that didn't work, I would revert to the method above, that should work fine. Looking at the MailScanner install docs for sendmail, the easiest may be to use sendmail end-to-end anyway.
Of course, I would prefer to add ClamAV to the service router and not to a sendmail app, as it would then be able to scan internal mail as well.
Posted: Fri Mar 10, 2006 12:03 pm
by cdclark
Did you have any luck with this setup? I'm also interested in running Mailscanner in front of Scalix. I like that it scans incoming and outgoing messages, does file type checking, and that it works with the virus scanner I've already licensed (f-prot)...
Posted: Fri Mar 10, 2006 12:45 pm
by treedstang
cdclark, No not yet I'm still looking for info on this setup. If you fine something 1st let me
know
Posted: Fri Mar 10, 2006 1:08 pm
by cdclark
treedstang wrote:cdclark, No not yet I'm still looking for info on this setup. If you fine something 1st let me
know
Well Its definitely not impossible... I'm not exactly new to Mailscanner+SpamAssassin+AV, I've been running it for 4 years now. But I am new to Scalix so I need to dig further into how Scalix interacts with sendmail and then I can determine what needs to be customized..
-Cameron
Posted: Sun Mar 12, 2006 10:57 am
by florian
I believe the post from Valerion above says it all.
There are two ways to to this, well, actually three.
1) Make sendmail your primary listener
This is just done by shutting down the SMTP relay, making sendmail to listen on the external IP address and restarting the SMTP relay. It will only bind to addresses unused by sendmail.
2) Use a secondary IP address for incoming mail and bin sendmail to this IP address.
3) Leave Scalix as the primary SMTP listener and set SMTPFILTER=TRUE in smtpd.cfg.
I would normally go with the latter (I actually believe the option is available since 9.2). This means Scalix will still accept incoming SMTP (and be able to provide authenticated SMTP for SMTP clients, the main reason for not making sendmail the primary listener), but before handing off the message to the Service Router, pass it on to sendmail instead. Sendmail will run all its milter checks, then check that the target address is a Scalix user (using the ommapsmtp mapper) and hand back to Scalix using unix.in.
Kinda best of both worlds,
best luck,
Florian.
Posted: Sun Mar 12, 2006 12:36 pm
by burhankhalid
Is MailScanner the only way to attach a disclaimer to messages? No Scalix-builtin way to do the same?
Posted: Sun Mar 12, 2006 12:46 pm
by florian
There is no builtin way in Scalix as of now.
On the sendmail side (which handles all outgoing traffic), there are multiple ways though. Just doing a quick google on "disclaimer milter", i found
http://www.milter.org/archives/001763.php
i think that's what you want...
cheers,
f.
Posted: Mon Mar 13, 2006 8:24 am
by treedstang
I just wanted to let everyone know that I followed Scalix support person florian Option number #3 and worked great with Mailscanner..
The only problem I have now is accessing SWA from outside of my Firewall .. port 80 and 443 works great from the inside but I created forward rules for SWA on 443 to my mailsever I can't get any response..
Do anyone know what the problem might be
Thanks
Tim
Posted: Mon Mar 13, 2006 5:38 pm
by axsom1
Hey Tim,
So with the option 3 Florian suggessted, does that actually take inter-office mail and pass it through mailscanner?
If so that's pretty cool!
Regards,
John
Posted: Mon Mar 13, 2006 6:55 pm
by treedstang
Yeah axsom1,
I t works!!! All I did was install Clamav and the Mailscanner install and made the neccessary changes and everything was working in 5-10 mintues
Posted: Fri Mar 17, 2006 3:18 pm
by cdclark
treedstang wrote:Yeah axsom1,
I t works!!! All I did was install Clamav and the Mailscanner install and made the neccessary changes and everything was working in 5-10 mintues
Did you do an RPM or source based install of Mailscanner?
Posted: Fri Mar 17, 2006 5:25 pm
by treedstang
cdclark,
I ran the installer that automatically installed the RPMS
here the package I used ..
http://www.sng.ecs.soton.ac.uk/mailscan ... rpm.tar.gz
Have Fun!!!