Scalix, ClamAV, SpamAssassin

[graemef]

I have just purchased Scalix, I have been wanting to get rid of MS Exchange for a while now and Scalix is perfect for that. I have it all up and running, but am by no means a linux guru and have learnt most of what I know from HowTo's. Has anyone written a document on how to get Scalix running with ClamAV (I seem to have this working ok now, I think) and SpamAssassin (or another spam program if this is not the one to use).

My mail server does not use 2 IP addresses at the moment as I am migrating slowly from an Exchange environment and this machine is entirely local network. Even when it is the main server it will probably only have a single IP address as remote web access is through our Notel SSL VPN gateway (it looks after security) and MX record redirection will be through the firewall (I think, though this may change). The howto for setting up SA assumes you will use the two IP address system. I am sure I had it set up before (my test scalix box crashed as I was playing around with Linux in a manner that was obviously not meant to be), but cannot for the life of me work out how I managed it.

Any help would be greatly appreciated.

[ScalixSupport]

I need to rewrite the SpamAssassin HowTo because multiple IP addresses seems to be causing some headaches for people.

Most of the document still stands in terms of configuration. You still need sendmail listening on port 25 of your external IP address. You just need to get the SMTP relay listening on a different port.

Edit /var/opt/scalix/sys/smtpd.cfg and add the line:

LISTEN_PORT=587

This (obviously) causes the SMTP Relay to listen on port 587 instead of port 25. You will need to restart the SMTP Relay to pick up the new change.

If you have SWA, you will need to edit /etc/opt/scalix/partner.xml and append ":587" to your SMTPServer value. Restart tomcat for this change to be picked up.

The only thing remaining is to make sure that everybody knows that port 587 is required for mail submission if they have IMAP clients.

Cheers

Dave

[graemef]

I am currently using Fetchmail to retrieve the email for Scalix, I assume I will need to change something for this as well. Also, how will this effect my Outlook clients.
Thanks

[ScalixSupport]

As Outlook doesn't use SMTP for mail submission, this isn't going to affect them

Also, because sendmail is listening on port 25, you shouldn't need to change your fetchmail configuration.

Cheers

Dave

[graemef]

Has there been any progress on the updated version of this HowTo when you only have a single NIC in the PC.

[graemef]

Can anyone shed any light on this please. I would like to install spamassassin on our server but it is in production now and I will only get one chance at it so a HowTo would be very handy..

[caribk]

the *updated* spamassassin how-to/technical guide for single IP seems to do the trick, with the changes done to sendmail.cf . thanks dave!
not compeltely familiar with how sendmail generates the .cf file through m4, so i was wondering if anybody had a functioning sendmail.mc that adds the appropriate mail filter for spamassassin and configures spamass-milter correctly, so that upon sendmail upgrades or if for-whatever-reason the .cf config file is auto-regenerated the config changes would propagate as well.

[caribk]

i answered my own question, so i just wanted to share with the community since the sendmail.cf "hack" in the updated how-to causes problems if sendmail is ever updated from rpms.

adding the following lines to your sendmail.mc (and running `m4 < /etc/mail/sendmail.mc > /etc/mail/sendmail.cf' ) will have the same resulting effect (remember to make backups of sendmail.mc and .cf first!!) as manually modifying your sendmail.cf for the spamassassin milter command and redefinition of OperatorChars:

define(`confOPERATORS',`.:%@!^/[]+')dnl
> INPUT_MAIL_FILTER(`spamassassin', `S=local:/var/run/spamass.sock, F=,T=C:15m;S:4m;R:4m;E:10m')dnl
define(`confMILTER_MACROS_CONNECT',`b, j, _, {daemon_name}, {if_name}, {if_addr}')dnl
define(`confMILTER_MACROS_HELO',`{tls_version}, {cipher}, {cipher_bits}, {cert_subject}, {cert_issuer}')dnl
define(`confMILTER_MACROS_ENVFROM',`i, {auth_type}, {auth_authen}, {auth_ssf}, {auth_author}, {mail_mailer}, {mail_host}, {mail_addr}')dnl
define(`confMILTER_MACROS_ENVRCPT',`{rcpt_mailer}, {rcpt_host}, {rcpt_addr}')dnl

hope that helps somebody else...

[caribk]

one more thing, which I hope maybe somebody can post quickly so i don't have to do it line-by-line is to post the sendmail.mc lines that Scalix adds during installation so that when I make modifications to my sendmail.mc configuration the scalix settings will also be propagated without having to manually edit sendmail.cf

[ScalixSupport]

Hi. The Scalix changes to sendmail.cf are not done through an m4 macro, but rather through a script called "omsendin". So, once you've created a new /etc/mail/sendmail.cf file, you can run omsendin which will automatically stop sendmail, update the .cf file, then restart sendmail.

Thanks,
Rachel