終結垃圾郵件(三)

防毒
1. ClamAV
ibm-fb60# cd /usr/ports/security/clamav
ibm-fb60# make install clean
要勾選MILTER選項
到 /etc/rc.conf, 加入
clamav_freshclam_enable="YES"
clamav_clamd_enable="YES"
clamav_milter_enable="YES"
clamav_milter_flags="--quiet --local --outgoing --timeout=0 --max-children=50"
接著, 可以先檢查一下相關的設定檔:
/usr/local/etc/clamd.conf
/usr/local/etc/freshclam.conf
如果不存在, 則由其.sample複製; 使用vi編輯, 並依其說明修改設定!
# cd /usr/local/etc/rc.d
# ./clamav-freshclam.sh start
# ./clamav-clamd.sh start
# ./clamav-milter.sh start
可能出現檔案權限錯誤, 則先修改一下
# chmod g+w /var/log/clamav/clamd.log
若出現和Sendmail設定不符的錯誤, 則先去修改Sendmail的設定(如下)
修改Sendmail設定
# cd /usr/local/share/sendmail/cf/cf
# vi sendmail.mc
加入以下一行
INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clamav/clmilter.sock,F=,T=S:4m;R:4m')
# m4 ../m4/cf.m4 sendmail.mc > sendmail.cf
備份/etc/mail/sendmail.cf
# cp /etc/mail/sendmail.cf /etc/mail/sendmail.cf.back
將設定放到預設位置
# cp sendmail.cf /etc/mail/sendmail.cf

重開Sendmail, 以檢查ClamAV安裝是否成功
# kill –HUP `head -1 /var/run/sendmail.pid`

註記: 之前使用ports安裝最新版的Sendmail時, 會在原本就有的Sendmail外, 再加裝一個新的版本, 原本的版本只在127.0.0.1等候連線; 新的版本會在*等候連線. 總之為了清楚起見, 應該將原本的Sendmail關掉, 只要在 /etc/rc.conf中, 加入
sendmail_enable="NONE"
之後, 重開機, 就只會有新版的Sendmail!

查看 /var/log/maillog檔, 檢查ClamAV是否成功啟動:
# tail –f /var/log/maillog
查看 相關的 clam…程式是否啟動, sock是否出現…
# ps ax
# netstat –an
# top


2. SpamAssassin
先安裝, 使用ports
# cd /usr/ports/mail/p5-Mail-SpamAssassin
# make install clean
# cd /usr/ports/mail/spamass-milter
# make install clean
再到 /etc/rc.conf, 加入
spamd_enable=”YES”
spamass_milter_enable=”YES”
此時, 可以啟動
# cd /usr/local/etc/rc.d
# ./sa-spamd.sh start
# ./spamass-milter.sh start
若出現和Sendmail設定不符的錯誤, 則先去修改Sendmail設定(如下)
修改Sendmail設定
# cd /usr/local/share/sendmail/cf/cf
# vi sendmail.mc
加入以下一行
INPUT_MAIL_FILTER(`spamassassin', `S=local:/var/run/spamass-milter.sock,F=,T=C:15m;S:4m;R:4m;E:10m')
# m4 ../m4/cf.m4 sendmail.mc > sendmail.cf
備份/etc/mail/sendmail.cf
# cp /etc/mail/sendmail.cf /etc/mail/sendmail.cf.back
將設定放到預設位置
# cp sendmail.cf /etc/mail/sendmail.cf

重開Sendmail, 檢查是否成功啟動SpamAssassin
(3.1.1版好像有點問題, 自動學習功能無法啟動)
好像在 /usr/local/etc/rc.d/sa-spamd.sh 的啟動參數要加 –u spamd