MAILSCANNER WITH SPAMASSASSIN + CLAMAV ON THE SAME SERVER

[treedstang]

I have a centos 4.2 sever running with scalix community Edition. Can someone point me in the right direction for getting MailScanner with Spamassassin +clamav to run all on the same server. I nice Howto would really help


Thanks

Tim

[ScalixSupport]

Hi Tim,

you mention two products not supported by Scalix, Centos and Mailscanner. Unfortunately, we have no documentation on Mailscanner and Scalix. There may have been users on the forum setting it up though.

Cheers.

Sascha.

[btisdall]

Can't help you there but if you're interested I did recently get Amavisd-New working with ClamAV and SA using amavisd-milter (not be confused with the older amavisd-new milter, this is Petr Rehor's new one that uses the AM:DP protocol enabling full functionality of Amavis with sendmail).

This was on FC4 but I assume the differences with Centos are minimal if any.

I've mostly written up a howto and just need a final kick in the pants to finish it off and post it somewhere...

Ben Tisdall
RedCircle IT Ltd

[Valerion]

I implemented MailScanner for a client last year sometime on Scalix 9.1.0, mainly for disclaimer addition. The easiest way to get it to work was to make sendmail the primary SMTP listener, and not Scalix's SMTPD. I just added the normal sendmail config for MailScanner and it worked fine.

If I were to do it on 9.4.2 I would add SMTPFILTER=TRUE to the scalix smtpd config file, then edit the sendmail.mc and the init script with the neccesary options to support MailScanner and rebuild the cf file, then run omsendin to put the Scalix mailer back into the sendmail.cf. If that didn't work, I would revert to the method above, that should work fine. Looking at the MailScanner install docs for sendmail, the easiest may be to use sendmail end-to-end anyway.

Of course, I would prefer to add ClamAV to the service router and not to a sendmail app, as it would then be able to scan internal mail as well.

[cdclark]

Did you have any luck with this setup? I'm also interested in running Mailscanner in front of Scalix. I like that it scans incoming and outgoing messages, does file type checking, and that it works with the virus scanner I've already licensed (f-prot)...

[treedstang]

cdclark, No not yet I'm still looking for info on this setup. If you fine something 1st let me
know

[cdclark]

cdclark, No not yet I'm still looking for info on this setup. If you fine something 1st let me
know

Well Its definitely not impossible... I'm not exactly new to Mailscanner+SpamAssassin+AV, I've been running it for 4 years now. But I am new to Scalix so I need to dig further into how Scalix interacts with sendmail and then I can determine what needs to be customized..

-Cameron

[florian]

I believe the post from Valerion above says it all.

There are two ways to to this, well, actually three.

1) Make sendmail your primary listener
This is just done by shutting down the SMTP relay, making sendmail to listen on the external IP address and restarting the SMTP relay. It will only bind to addresses unused by sendmail.

2) Use a secondary IP address for incoming mail and bin sendmail to this IP address.

3) Leave Scalix as the primary SMTP listener and set SMTPFILTER=TRUE in smtpd.cfg.

I would normally go with the latter (I actually believe the option is available since 9.2). This means Scalix will still accept incoming SMTP (and be able to provide authenticated SMTP for SMTP clients, the main reason for not making sendmail the primary listener), but before handing off the message to the Service Router, pass it on to sendmail instead. Sendmail will run all its milter checks, then check that the target address is a Scalix user (using the ommapsmtp mapper) and hand back to Scalix using unix.in.

Kinda best of both worlds,
best luck,
Florian.

[burhankhalid]

Is MailScanner the only way to attach a disclaimer to messages? No Scalix-builtin way to do the same?

[florian]

There is no builtin way in Scalix as of now.

On the sendmail side (which handles all outgoing traffic), there are multiple ways though. Just doing a quick google on "disclaimer milter", i found

http://www.milter.org/archives/001763.php

i think that's what you want...

cheers,
f.

[treedstang]

I just wanted to let everyone know that I followed Scalix support person florian Option number #3 and worked great with Mailscanner..

The only problem I have now is accessing SWA from outside of my Firewall .. port 80 and 443 works great from the inside but I created forward rules for SWA on 443 to my mailsever I can't get any response..

Do anyone know what the problem might be

Thanks

Tim

[axsom1]

Hey Tim,

So with the option 3 Florian suggessted, does that actually take inter-office mail and pass it through mailscanner?

If so that's pretty cool!

Regards,
John

[treedstang]

Yeah axsom1,

I t works!!! All I did was install Clamav and the Mailscanner install and made the neccessary changes and everything was working in 5-10 mintues

[cdclark]

Yeah axsom1,

I t works!!! All I did was install Clamav and the Mailscanner install and made the neccessary changes and everything was working in 5-10 mintues

Did you do an RPM or source based install of Mailscanner?

[treedstang]

cdclark,

I ran the installer that automatically installed the RPMS

here the package I used ..

http://www.sng.ecs.soton.ac.uk/mailscan ... rpm.tar.gz

Have Fun!!!