Вводные

• В системе в качестве транспортного агента используется qmail, так как следующие далее инструкции не будут работать с sendmail. Инструкцию о том, как установить qmail вместо sendmail, читайте в Installing qmail under FreeBSD.
• qmail должен быть откомпилирован с опцией WITH_QMAILQUEUE_PATCH в стадии компоновки. Если установка qmail производилась согласно Installing qmail under FreeBSD, то это было сделано.

Установка Clam AntiVirus

Установка из исходных текстов

# cd /usr/local
# mkdir clamav
# cd clamav
# fetch http://clamav.elektrapro.com/stable/clamav-0.51.tar.gz
# gunzip clamav-0.51.tar.gz
# tar -xvf clamav-0.51.tar.gz

# pw groupadd clamav
# pw useradd clamav -g clamav -d /nonexistent -c "Clam Antivirus" \
 -s /sbin/nologin

# cd clamav-0.51
# ./configure
# make install

Проверка работоспособности

# clamscan --recursive --log=/tmp/clamscan.log /usr/home

# freshclam --verbose

Запуск freshclam в режиме демона

# touch /var/log/freshclam.log
# chmod 644 /var/log/freshclam.log
# chown clamav:clamav /var/log/freshclam.log

#!/bin/sh
#
# Startup / shutdown script for Clam Antivirus

case "$1" in
 start)
 /usr/local/bin/freshclam -d -c 2 -l /var/log/freshclam.log
 echo -n ' freshclam'
 ;;

 stop)
 /usr/bin/killall freshclam > /dev/null 2>&1 \
 && echo -n ' freshclam'
 ;;

 *)
 echo ""
 echo "Usage: `basename $0` { start | stop }"
 echo ""
 exit 64
 ;;
esac

# chmod 744 /usr/local/etc/rc.d/clamav.sh

Регулярное выполнение clamscan

 6 * * * root /usr/local/bin/clamscan --recursive
 --infected
 --exclude /usr/local/share/clamav/viruses.db
 --exclude /usr/local/share/clamav/viruses.db2
 --log=/var/log/clamscan.log
 /usr/home

Установка SpamAssassin

Сборка и установка из исходников

# cd /usr/ports/mail/p5-Mail-SpamAssassin
# make
# make install

# cd /usr/local
# mkdir spamassassin
# cd spamassassin
# fetch http://spamassassin.taint.org/released/Mail-SpamAssassin-2.43.tar.gz
# gunzip Mail-SpamAssassin-2.43.tar.gz
# tar -xvf Mail-SpamAssassin-2.43.tar
# cd Mail-SpamAssassin-2.43

# perl Makefile.PL

# make
# make install

Проверка

# spamassassin -t < sample-spam.txt > spam.out

X-Spam-Status: Yes, hits=14.7 required=5.0
 tests=ALL_CAPS_HEADER,CALL_FREE,DATE_IN_PAST_24_48,
 DRASTIC_REDUCED,FROM_HAS_MIXED_NUMS,HOME_EMPLOYMENT,
 INVALID_DATE,INVALID_MSGID,LINES_OF_YELLING,
 MSGID_HAS_NO_AT,NO_REAL_NAME,ONCE_IN_LIFETIME,REMOVE_SUBJ,
 SMTPD_IN_RCVD,SPAM_PHRASE_21_34,UNDISC_RECIPS
 version=2.43
X-Spam-Flag: YES
X-Spam-Level: **************
X-Spam-Checker-Version: SpamAssassin 2.43 (1.115.2.20-2002-10-15-exp)

# spamassassin -t < sample-nonspam.txt > nonspam.out

X-Spam-Status: No, hits=0.9 required=5.0
 tests=GAPPY_TEXT,LINES_OF_YELLING,PGP_SIGNATURE,
 SPAM_PHRASE_02_03,TO_BE_REMOVED_REPLY
 version=2.43
X-Spam-Level:

Запуск SpamAssassin в режиме демона: spamd

#!/bin/sh
#
# Startup / shutdown script for SpamAssassin daemon

case "$1" in
 start)
 /usr/bin/spamd -a -d && echo -n ' spamd'
 ;;

 stop)
 spamdpid=`ps -ax | grep spamd | grep -v grep | grep -v sh | awk '{ print $1 }'`
 if [ "$spamdpid" != "" ]; then
 kill $spamdpid > /dev/null 2>&1
 echo -n " spamd"
 fi
 ;;

 *)
 echo "Usage: `basename $0` {start|stop}" >&2
 ;;
esac

exit 0

# chmod 744 /usr/local/etc/rc.d/spamd.sh
# /usr/local/etc/rc.d/spamd.sh start

Использование procmail для фильтрации спама

:0:
* ^X-Spam-Status: Yes
$HOME/Maildir/.Spam/

# su paulh
# cd $HOME
# /var/qmail/bin/maildirmake Maildir/.Spam
# exit

|IFS=' ' && exec /usr/local/bin/procmail -f- || exit 75

Установка qmail-scanner

Установка maildrop

# cd /usr/ports/mail/maildrop
# make
# make install

Сборка и установка из исходников

# cd /usr/local
# mkdir qmail-scanner
# fetch http://telia.dl.sourceforge.net/sourceforge/qmail-scanner/qmail-scanner-1.14.tgz
# gunzip qmail-scanner-1.14.tgz
# tar -xvf qmail-scanner-1.14.tar
# cd qmail-scanner-1.14

# ./configure --help

# ./configure --admin postmaster --notify "recips,admin" --install

# chmod 4511 /usr/bin/suidperl

192.168.0.:allow,RELAYCLIENT="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
127.:allow,RELAYCLIENT="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
:allow,QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"

# /usr/local/bin/tcprules /etc/tcp.smtp.cdb /etc/tcp.smtp.tmp < /etc/tcp.smtp

# /usr/local/etc/rc.d/qmail.sh stop
# /usr/local/etc/rc.d/qmail.sh start

Проверка

# cd /usr/local/qmail-scanner/qmail-scanner-1.14
# ./contrib/test_installation.sh -doit

Получение и установка модулей PERL с CPAN

# perl -MCPAN -e shell

cpan> install Time::HiRes