Почтовая система на базе CentOS Postfix, Dovecot, Spamassassin, Amavisd, Clamav, Clamd, Roundcubemail, Postfixadmin

Однажды я уже писал про Почтовую систему на базе Postix и Dovecot.
Решил немного усложнить задачу, дабы еще и боротся со спамом. Ну и заодно прикрутить антивирусное приложение.
И так что же нам понадобится: Postfix (должен быть собран с поддержкой MySQL), MySQL (храниться вся информация о пользователях), Cyrus-Sasl (необходим для авторизации пользователей), Dovecot (IMAP сервер тоже должен быть собран с поддержкой MySQL), Spamassassin (фильтр спама, служит для отлова спама), amavisd и clamav (служит для проверки входящих сообщений на наличие вирусов и троянов и прочей дряни), Postfixadmin (PHP скрипт для управлением почтовыми доменами и ящиками пользователей), Roundcubemail (почтовый клиент для веб доступа к почтовому ящику).
Итак приступим…
Первое что нам необходимо сделать, так это поправить файл /etc/hosts следующим образом.

127.0.0.1 localhost
217.25.159.205 ns1.kipalex.ru kipalex.ru

Так как я использую исключительно на серверах CentOS, используем yum.
Обновим систему.

yum update

Далее необходимо поставить все необходимые нам пакеты для сборки Postfix.

yum groupinstall ‘Development Tools’
and
yum groupinstall ‘Development Libraries’

В принципе все то можно и не ставить, я же поступил другим образом на локальной машине своей собрал Postfix, а потом уже перелил на сервер, но рекомендую поставить.

Далее ставим пакеты веб сервера, php, mysql и т.д. В принципе все то в одной строке можно и не писать, по зависимостям все само подхватится.

yum install ntp httpd mysql-server php php-mysql php-mbstring php-mcrypt phpmyadmin rpm-build gcc mysql-devel openssl-devel cyrus-sasl-devel pkgconfig zlib-devel pcre-devel openldap-devel postgresql-devel expect libtool-ltdl-devel openldap-servers libtool gdbm-devel pam-devel gamin-devel

Для поддержки в Postfix квот необходимо на него поставить patch  и пересобрать с нужными нам параметрами.
Postfix берем с сайта: http://ftp-stud.fht-esslingen.de/pub/Mirrors/centos/ ищем нашу версию дистрибутива и качаем src.rpm

cd /usr/src
wget http://ftp-stud.fht-esslingen.de/pub/Mirrors/centos/5.3/os/SRPMS/postfix-2.3.3-2.1.el5_2.src.rpm
rpm -ivh postfix-2.3.3-2.1.el5_2.src.rpm
Далее качаем патч с сайта http://vda.sourceforge.net/VDA/
cd /usr/src/redhat/SOURCES
wget http://vda.sourceforge.net/VDA/postfix-2.3.3-vda.patch.gz
gunzip postfix-2.3.3-vda.patch.gz
cd /usr/src/redhat/SPECS/

Только не забываем чтобы версии были одинаковыми!
Включаем поддержку MySQL в Postfix для этого правим postfix.spec

[…]
%define MYSQL 1
[…]
# Patches
Patch0: postfix-2.3.3-vda.patch
Patch1: postfix-2.1.1-config.patch
Patch3: postfix-alternatives.patch
Patch6: postfix-2.1.1-obsolete.patch
Patch7: postfix-2.1.5-aliases.patch
Patch8: postfix-large-fs.patch
Patch9: postfix-2.2.5-cyrus.patch
[…]
%setup -q
# Apply obligatory patches
%patch0 -p1 -b .vda
%patch1 -p1 -b .config
%patch3 -p1 -b .alternatives
%patch6 -p1 -b .obsolete
%patch7 -p1 -b .aliases
%patch8 -p1 -b .large-fs
%patch9 -p1 -b .cyrus
[…]

У Вас должно получиться так же.
Собираем наш Postfix командой rpmbuild -ba postfix.spec или rpmbuild —rebuild —define=’MYSQL 1′ postfix-2.3.3.src.rpm (но тут не получиться тогда patch поставить).
Наш пакет собрался идем

cd /usr/src/redhat/RPMS/i386
И ставим его
rpm -ivh postfix-2.3.3-2.i386.rpm
Там правда еще есть пакет debug и пакет для просмотров логов и их анализа самого postfix, кому надо тот установит, мне он не нужен.
Даем команду для запуска MySQL при старте системы

chkconfig —levels 235 mysqld on
/etc/init.d/mysqld start и запускаем сам сервер.

Ставим пароль на сервер

mysqladmin -u root password mypassword
mysqladmin -h localhost -u root password mypassword
Надо теперь изменить файл /etc/httpd/conf.d/phpmyadmin.conf
Alias /phpMyAdmin /usr/share/phpMyAdmin
Alias /phpmyadmin /usr/share/phpMyAdmin
<Directory /usr/share/phpMyAdmin/>
order deny,allow
deny from all
allow from all
</Directory>
И обязательно файл config.inc.php (phpMyAdmin тоже)
$cfg[‘Servers’][$i][‘auth_type’] = ‘http’;
Командуем для Apache запуск при старте системы
chkconfig —levels 235 httpd on
/etc/init.d/httpd start и запускаем его
После запуска Apache можно войти в phpMyAdmin по адресу http://kipalex.ru/phpMyAdmin (Доменная система и ДНС сервер bind у меня уже настроены!)
Создаем БД mail
И создаем пользователя admin и даем ему полные права на свежесозданную БД mail
Теперь надо создать таблицы в БД mail

CREATE TABLE domains (
domain varchar(50) NOT NULL,
PRIMARY KEY (domain) )
TYPE=MyISAM;

CREATE TABLE forwardings (
source varchar(80) NOT NULL,
destination TEXT NOT NULL,
PRIMARY KEY (source) )
TYPE=MyISAM;

CREATE TABLE users (
email varchar(80) NOT NULL,
password varchar(20) NOT NULL,
quota INT(10) DEFAULT ‘10485760’,
PRIMARY KEY (email)
) TYPE=MyISAM;

CREATE TABLE transport (
domain varchar(128) NOT NULL default »,
transport varchar(128) NOT NULL default »,
UNIQUE KEY domain (domain)
) TYPE=MyISAM;

Теперь надо нашему Postfix создать файлы конфигураций для работы с MySQL
1. mysql_virtual_domains_maps.cf
user = admin
password = password
hosts = localhost
dbname = mail
table = domain
select_field = domain
where_field = domain
additional_conditions = and backupmx = ‘0’ and active = ‘1’

2. mysql_virtual_mailbox_maps.cfuser = mail_admin
user = admin
password = password
hosts = localhost
dbname = mail
table = mailbox
select_field = CONCAT(domain,’/’,maildir)
where_field = username
additional_conditions = and active = ‘1’

3. mysql_virtual_alias_maps.cf
user = admin
password = password
hosts = localhost
dbname = mail
table = alias
select_field = goto
where_field = address
additional_conditions = and active = ‘1’

4. mysql_virtual_mailbox_limit_maps.cf
user = admin
password = password
hosts = localhost
dbname = mail
table = mailbox
select_field = quota
where_field = username
additional_conditions = and active = ‘1’

Дадим права.
chmod o= /etc/postfix/mysql-virtual_*.cf
chgrp postfix /etc/postfix/mysql-virtual_*.cf
Создадим группу и пользователя.
groupadd -g 5000 vmail
useradd -g vmail -u 5000 vmail -d /home/vmail -m

Ну а теперь самое главное согласно куче мануалов создадим главный файл конфигурации Postfix main.cf

myhostname = ns1.kipalex.ru
mydestination = ns1.kipalex.ru, localhost
mynetworks = 127.0.0.0/8
virtual_mailbox_domains = mysql:$config_directory/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = mysql:$config_directory/mysql_virtual_mailbox_maps.cf
virtual_alias_maps = mysql:$config_directory/mysql_virtual_alias_maps.cf
virtual_mailbox_base = /home/vmail
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_use_tls = yes
smtpd_tls_cert_file = /etc/postfix/smtpd.cert #наши сертификаты, создадим позже
smtpd_tls_key_file = /etc/postfix/smtpd.key #наши сертификаты, создадим позже
virtual_create_maildirsize = yes
virtual_maildir_extended = yes
virtual_mailbox_limit_override = yes
virtual_maildir_limit_message = «The user you are trying to reach is over quota.»
virtual_overquota_bounce = yes
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_mailbox_base $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
inet_interfaces = all #интерфейсы все
content_filter = amavis:[127.0.0.1]:10024 #тут указываем где висит наш фильтр
receive_override_options = no_address_mappings
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
sample_directory = /usr/share/doc/postfix-2.3.3/samples
sendmail_path = /usr/sbin/sendmail
html_directory = no
setgid_group = postdrop
command_directory = /usr/sbin
manpage_directory = /usr/share/man
daemon_directory = /usr/libexec/postfix
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
queue_directory = /var/spool/postfix
mail_owner = postfix
unknown_local_recipient_reject_code = 450

Генерируем сертификаты.

cd /etc/postfix
openssl req -new -outform PEM -out smtpd.cert -newkey rsa:2048 -nodes -keyout smtpd.key -keyform PEM -days 365 -x509
Выставим права.
chmod o= /etc/postfix/smtpd.key

Теперь надо указать Postfix как проходить будет авторизация. Для этого правим конфиг

/usr/lib/sasl2/smtpd.conf
pwcheck_method: auxprop
auxprop_plugin: sql
mech_list: PLAIN LOGIN
sql_engine: mysql
sql_user: admin
sql_passwd: password
sql_hostnames: localhost
sql_database: mail
sql_select: SELECT password FROM mailbox WHERE username = ‘%u@%r’
password_format: plaintext
log_level: 3

Почти все с Postfix разобрались.
Нам необходимо удостовериться что стоит все нам нужно авторизации через cyrus

rpm -qa | grep cyrus*
cyrus-sasl-plain-2.1.22-4
cyrus-sasl-sql-2.1.22-4
cyrus-sasl-devel-2.1.22-4
cyrus-sasl-2.1.22-4
cyrus-sasl-lib-2.1.22-4
Все эти пакеты должны присутствовать в системе!

Командуем.
chkconfig —levels 235 postfix on
/etc/init.d/postfix start

Далее настраиваем Dovecot
Всего 2 конфига.
1. dovecot.conf
base_dir = /var/run/dovecot/
protocols = imap imaps
protocol imap {
listen = *:143
ssl_listen = *:993
}
shutdown_clients = yes
log_path = /var/log/dovecot.log
info_log_path = /var/log/dovecot-info.log
log_timestamp = «%b %d %H:%M:%S »
syslog_facility = mail
auth_verbose=yes
auth_debug=yes
auth_debug_passwords=yes
mail_debug=yes
verbose_ssl=yes
mail_location = maildir:/home/vmail/%d/%n@%d
mbox_read_locks = fcntl
log_timestamp = «%Y-%m-%d %H:%M:%S »
#log_path = /var/log/maillog
mail_access_groups = mail
first_valid_uid = 5000
last_valid_uid = 5000
maildir_copy_with_hardlinks = yes
auth default {
mechanisms = plain login cram-md5
userdb sql {
args = /etc/dovecot-mysql.conf
}
passdb sql {
args = /etc/dovecot-mysql.conf
}
}
protocol lda {
mail_plugin_dir = /usr/lib/dovecot/lda
mail_plugins = cmusieve
}
plugin {
sieve = /etc/sieve.conf
sieve = /home/vmail/domain.ru/user@domain.ru/.dovecot.sieve
}

С sieve плагином сейчас идет активная переписка с разработчиками сервера, он почему напрочь отказывается работать.
Ничего страшного не будет если вы его укажите.

2. dovecot-mysql.conf
driver = mysql
default_pass_scheme = plain
connect = host=localhost dbname=mail user=admin password=password
user_query = SELECT concat(‘/home/vmail/’, maildir) as home, concat(‘maildir:/home/vmail/’, maildir) as mail, 5000 AS uid, 12 AS gid, concat(‘maildir:storage=’, quota) AS quota FROM mailbox WHERE username = ‘%u’ AND active = ‘1’
user_query = SELECT ‘/home/vmail/%d/%n@%d’ as home, ‘maildir:/home/vmail/%d/%n@%d’ as mail, 5000 AS uid, 12 AS gid, concat(‘dirsize:storage=’, quota) AS quota FROM mailbox WHERE username = ‘%u’ AND active = ‘1’
password_query = SELECT username as user, password, concat(‘/home/vmail/’, maildir) as userdb_home, concat(‘maildir:/home/vmail/’, maildir) as userdb_mail, 5000 as userdb_uid, 12 as userdb_gid FROM mailbox WHERE username = ‘%u’ AND active = ‘1’
password_query = SELECT username as user, password, ‘/home/vmail/%d/%n@%d’ as userdb_home, ‘maildir:/home/vmail/%d/%n@%d’ as userdb_mail, 5000 as userdb_uid, 12 as userdb_gid FROM mailbox WHERE username = ‘%u’ AND active = ‘1’

Командуем Dovecot.
chkconfig —levels 235 dovecot on
/etc/init.d/dovecot start

Ставим Amavisd-new, SpamAssassin And ClamAV
yum install amavisd-new spamassassin clamav clamd unzip bzip2 unrar

Правим файл /etc/amavisd.conf
Должно получиться следующее.
$pax=’pax’;
use strict;

# a minimalistic configuration file for amavisd-new with all necessary settings
#
#   see amavisd.conf-default for a list of all variables with their defaults;
#   see amavisd.conf-sample for a traditional-style commented file;
#   for more details see documentation in INSTALL, README_FILES/*
#   and at http://www.ijs.si/software/amavisd/amavisd-new-docs.html

# COMMONLY ADJUSTED SETTINGS:

# @bypass_virus_checks_maps = (1);  # controls running of anti-virus code
# @bypass_spam_checks_maps  = (1);  # controls running of anti-spam code
# $bypass_decode_parts = 1;         # controls running of decoders&dearchivers

$max_servers = 2;            # num of pre-forked children (2..30 is common), -m
$daemon_user  = «amavis»;     # (no default;  customary: vscan or amavis), -u
$daemon_group = «amavis»;     # (no default;  customary: vscan or amavis), -g

#$mydomain = ‘example.com’;   # a convenient default for other settings
$mydomain = ‘localhost’;

# $MYHOME = ‘/var/amavis’;   # a convenient default for other settings, -H
$TEMPBASE = «$MYHOME/tmp»;   # working directory, needs to exist, -T
$ENV{TMPDIR} = $TEMPBASE;    # environment variable TMPDIR, used by SA, etc.
$QUARANTINEDIR = «/var/virusmails»;
# $quarantine_subdir_levels = 1;  # add level of subdirs to disperse quarantine

# $daemon_chroot_dir = $MYHOME;   # chroot directory or undef, -R

$db_home   = «$MYHOME/db»;      # dir for bdb nanny/cache/snmp databases, -D
# $helpers_home = «$MYHOME/var»;  # working directory for SpamAssassin, -S
# $lock_file = «$MYHOME/var/amavisd.lock»;  # -L
# $pid_file  = «$MYHOME/var/amavisd.pid»;   # -P
#NOTE: create directories $MYHOME/tmp, $MYHOME/var, $MYHOME/db manually

$log_level = 0;              # verbosity 0..5, -d
$log_recip_templ = undef;    # disable by-recipient level-0 log entries
$DO_SYSLOG = 1;              # log via syslogd (preferred)
$syslog_facility = ‘mail’;   # Syslog facility as a string
# e.g.: mail, daemon, user, local0, … local7
$syslog_priority = ‘debug’;  # Syslog base (minimal) priority as a string,
# choose from: emerg, alert, crit, err, warning, notice, info, debug

$enable_db = 1;              # enable use of BerkeleyDB/libdb (SNMP and nanny)
$enable_global_cache = 1;    # enable use of libdb-based cache if $enable_db=1
$nanny_details_level = 2;    # nanny verbosity: 1: traditional, 2: detailed

@local_domains_maps = ( [«.$mydomain»] );  # list of all local domains

@mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10
10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 );

$unix_socketname = «$MYHOME/amavisd.sock»;  # amavisd-release or amavis-milter
# option(s) -p overrides $inet_socket_port and $unix_socketname

$inet_socket_port = 10024;   # listen on this local TCP port(s)
# $inet_socket_port = [10024,10026];  # listen on multiple TCP ports

$policy_bank{‘MYNETS’} = {   # mail originating from @mynetworks
originating => 1,  # is true in MYNETS by default, but let’s make it explicit
os_fingerprint_method => undef,  # don’t query p0f for internal clients
};

# it is up to MTA to re-route mail from authenticated roaming users or
# from internal hosts to a dedicated TCP port (such as 10026) for filtering
$interface_policy{‘10026’} = ‘ORIGINATING’;

$policy_bank{‘ORIGINATING’} = {  # mail supposedly originating from our users
originating => 1,  # declare that mail was submitted by our smtp client
allow_disclaimers => 1,  # enables disclaimer insertion if available
# notify administrator of locally originating malware
virus_admin_maps => [«virusalert\@$mydomain»],
spam_admin_maps  => [«virusalert\@$mydomain»],
warnbadhsender   => 1,
# forward to a smtpd service providing DKIM signing service
forward_method => ‘smtp:[127.0.0.1]:10027’,
# force MTA conversion to 7-bit (e.g. before DKIM signing)
smtpd_discard_ehlo_keywords => [‘8BITMIME’],
bypass_banned_checks_maps => [1],  # allow sending any file names and types
terminate_dsn_on_notify_success => 0,  # don’t remove NOTIFY=SUCCESS option
};

$interface_policy{‘SOCK’} = ‘AM.PDP-SOCK’; # only applies with $unix_socketname

# Use with amavis-release over a socket or with Petr Rehor’s amavis-milter.c
# (with amavis-milter.c from this package or old amavis.c client use ‘AM.CL’):
$policy_bank{‘AM.PDP-SOCK’} = {
protocol => ‘AM.PDP’,
auth_required_release => 0,  # do not require secret_id for amavisd-release
};

#$sa_tag_level_deflt  = 2.0;  # add spam info headers if at, or above that level
#$sa_tag2_level_deflt = 6.2;  # add ‘spam detected’ headers at that level
#$sa_kill_level_deflt = 6.9;  # triggers spam evasive actions (e.g. blocks mail)
#$sa_dsn_cutoff_level = 10;   # spam level beyond which a DSN is not sent
$sa_tag_level_deflt  = 2.0;  # add spam info headers if at, or above that level
$sa_tag2_level_deflt = 4.0;  # add ‘spam detected’ headers at that level
$sa_kill_level_deflt = $sa_tag2_level_deflt;  # triggers spam evasive actions (e.g. blocks mail)
$sa_dsn_cutoff_level = 10;   # spam level beyond which a DSN is not sent

# $sa_quarantine_cutoff_level = 25; # spam level beyond which quarantine is off
$penpals_bonus_score = 8;    # (no effect without a @storage_sql_dsn database)
$penpals_threshold_high = $sa_kill_level_deflt;  # don’t waste time on hi spam

$sa_mail_body_size_limit = 400*1024; # don’t waste time on SA if mail is larger
$sa_local_tests_only = 0;    # only tests which do not require internet access?

# @lookup_sql_dsn =
#   ( [‘DBI:mysql:database=mail;host=127.0.0.1;port=3306’, ‘user1’, ‘passwd1’],
#     [‘DBI:mysql:database=mail;host=host2’, ‘username2’, ‘password2’],
#     [«DBI:SQLite:dbname=$MYHOME/sql/mail_prefs.sqlite», », »] );
# @storage_sql_dsn = @lookup_sql_dsn;  # none, same, or separate database
@lookup_sql_dsn =
( [‘DBI:mysql:database=mail;host=127.0.0.1;port=3306’, ‘mail_admin’, ‘mail_admin_password’] );

$sql_select_policy = ‘SELECT «Y» as local FROM domain WHERE CONCAT(«@»,domain) IN (%k)’;

$sql_select_white_black_list = undef;  # undef disables SQL white/blacklisting

#   $recipient_delimiter = ‘+’;                # (default is ‘+’)
$recipient_delimiter = undef;
$replace_existing_extension = 1;        # (default is false)

$localpart_is_case_sensitive = 0;        # (default is false)
# $timestamp_fmt_mysql = 1; # if using MySQL *and* msgs.time_iso is TIMESTAMP;
#   defaults to 0, which is good for non-MySQL or if msgs.time_iso is CHAR(16)

$virus_admin               = «virusalert\@$mydomain»;  # notifications recip.

$mailfrom_notify_admin     = «virusalert\@$mydomain»;  # notifications sender
$mailfrom_notify_recip     = «virusalert\@$mydomain»;  # notifications sender
$mailfrom_notify_spamadmin = «spam.police\@$mydomain»; # notifications sender
$mailfrom_to_quarantine = »; # null return path; uses original sender if undef

@addr_extension_virus_maps      = (‘virus’);
@addr_extension_banned_maps     = (‘banned’);
@addr_extension_spam_maps       = (‘spam’);
@addr_extension_bad_header_maps = (‘badh’);
# $recipient_delimiter = ‘+’;  # undef disables address extensions altogether
# when enabling addr extensions do also Postfix/main.cf: recipient_delimiter=+

$path = ‘/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bin’;
# $dspam = ‘dspam’;

$MAXLEVELS = 14;
$MAXFILES = 1500;
$MIN_EXPANSION_QUOTA =      100*1024;  # bytes  (default undef, not enforced)
$MAX_EXPANSION_QUOTA = 300*1024*1024;  # bytes  (default undef, not enforced)

$sa_spam_subject_tag = ‘***SPAM*** ‘;
$defang_virus  = 1;  # MIME-wrap passed infected mail
$defang_banned = 1;  # MIME-wrap passed mail containing banned name
# for defanging bad headers only turn on certain minor contents categories:
$defang_by_ccat{+CC_BADH.»,3″} = 1;  # NUL or CR character in header
$defang_by_ccat{+CC_BADH.»,5″} = 1;  # header line longer than 998 characters
$defang_by_ccat{+CC_BADH.»,6″} = 1;  # header field syntax error

# OTHER MORE COMMON SETTINGS (defaults may suffice):

# $myhostname = ‘host.example.com’;  # must be a fully-qualified domain name!

# $notify_method  = ‘smtp:[127.0.0.1]:10025’;
# $forward_method = ‘smtp:[127.0.0.1]:10025’;  # set to undef with milter!

# $final_virus_destiny      = D_DISCARD;
# $final_banned_destiny     = D_BOUNCE;
# $final_spam_destiny       = D_BOUNCE;
# $final_bad_header_destiny = D_PASS;
# $bad_header_quarantine_method = undef;
$final_virus_destiny      = D_REJECT;
$final_banned_destiny     = D_REJECT;
$final_spam_destiny       = D_PASS;
$final_bad_header_destiny = D_PASS;

# $os_fingerprint_method = ‘p0f:*:2345′;  # to query p0f-analyzer.pl

## hierarchy by which a final setting is chosen:
##   policy bank (based on port or IP address) -> *_by_ccat
##   *_by_ccat (based on mail contents) -> *_maps
##   *_maps (based on recipient address) -> final configuration value

# SOME OTHER VARIABLES WORTH CONSIDERING (see amavisd.conf-default for all)

# $warnbadhsender,
# $warnvirusrecip, $warnbannedrecip, $warnbadhrecip, (or @warn*recip_maps)
#
# @bypass_virus_checks_maps, @bypass_spam_checks_maps,
# @bypass_banned_checks_maps, @bypass_header_checks_maps,
#
# @virus_lovers_maps, @spam_lovers_maps,
# @banned_files_lovers_maps, @bad_header_lovers_maps,
#
# @blacklist_sender_maps, @score_sender_maps,
#
# $clean_quarantine_method, $virus_quarantine_to, $banned_quarantine_to,
# $bad_header_quarantine_to, $spam_quarantine_to,
#
# $defang_bad_header, $defang_undecipherable, $defang_spam

# REMAINING IMPORTANT VARIABLES ARE LISTED HERE BECAUSE OF LONGER ASSIGNMENTS

@keep_decoded_original_maps = (new_RE(
# qr’^MAIL$’,   # retain full original message for virus checking (can be slow)
qr’^MAIL-UNDECIPHERABLE$’, # recheck full mail if it contains undecipherables
qr’^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)’i,
# qr’^Zip archive data’,     # don’t trust Archive::Zip
));

# for $banned_namepath_re (a new-style of banned table) see amavisd.conf-sample

$banned_filename_re = new_RE(

### BLOCKED ANYWHERE
# qr’^UNDECIPHERABLE$’,  # is or contains any undecipherable components
qr’^\.(exe-ms|dll)$’,                   # banned file(1) types, rudimentary
# qr’^\.(exe|lha|tnef|cab|dll)$’,         # banned file(1) types

### BLOCK THE FOLLOWING, EXCEPT WITHIN UNIX ARCHIVES:
# [ qr’^\.(gz|bz2)$’             => 0 ],  # allow any in gzip or bzip2
#  [ qr’^\.(rpm|cpio|tar)$’       => 0 ],  # allow any in Unix-type archives

qr’.\.(pif|scr)$’i,                     # banned extensions — rudimentary
# qr’^\.zip$’,                            # block zip type

### BLOCK THE FOLLOWING, EXCEPT WITHIN ARCHIVES:
# [ qr’^\.(zip|rar|arc|arj|zoo)$’=> 0 ],  # allow any within these archives

qr’^application/x-msdownload$’i,        # block these MIME types
qr’^application/x-msdos-program$’i,
qr’^application/hta$’i,

# qr’^message/partial$’i,         # rfc2046 MIME type
# qr’^message/external-body$’i,   # rfc2046 MIME type

# qr’^(application/x-msmetafile|image/x-wmf)$’i,  # Windows Metafile MIME type
# qr’^\.wmf$’,                            # Windows Metafile file(1) type

# block certain double extensions in filenames
qr’\.[^./]*[A-Za-z][^./]*\.\s*(exe|vbs|pif|scr|bat|cmd|com|cpl|dll)[.\s]*$’i,

# qr’\{[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}\}?’i, # Class ID CLSID, strict
# qr’\{[0-9a-z]{4,}(-[0-9a-z]{4,}){0,7}\}?’i, # Class ID extension CLSID, loose

qr’.\.(exe|vbs|pif|scr|cpl)$’i,             # banned extension — basic
# qr’.\.(exe|vbs|pif|scr|cpl|bat|cmd|com)$’i, # banned extension — basic+cmd
# qr’.\.(ade|adp|app|bas|bat|chm|cmd|com|cpl|crt|emf|exe|fxp|grp|hlp|hta|
#        inf|ins|isp|js|jse|lnk|mda|mdb|mde|mdw|mdt|mdz|msc|msi|msp|mst|
#        ops|pcd|pif|prg|reg|scr|sct|shb|shs|vb|vbe|vbs|
#        wmf|wsc|wsf|wsh)$’ix,  # banned ext — long
# qr’.\.(ani|cur|ico)$’i,                 # banned cursors and icons filename
# qr’^\.ani$’,                            # banned animated cursor file(1) type

# qr’.\.(mim|b64|bhx|hqx|xxe|uu|uue)$’i,  # banned extension — WinZip vulnerab.
);
# See http://support.microsoft.com/default.aspx?scid=kb;EN-US;q262631
# and http://www.cknow.com/vtutor/vtextensions.htm

# ENVELOPE SENDER SOFT-WHITELISTING / SOFT-BLACKLISTING

@score_sender_maps = ({ # a by-recipient hash lookup table,
# results from all matching recipient tables are summed

# ## per-recipient personal tables  (NOTE: positive: black, negative: white)
# ‘user1@example.com’  => [{‘bla-mobile.press@example.com’ => 10.0}],
# ‘user3@example.com’  => [{‘.ebay.com’                 => -3.0}],
# ‘user4@example.com’  => [{‘cleargreen@cleargreen.com’ => -7.0,
#                           ‘.cleargreen.com’           => -5.0}],

## site-wide opinions about senders (the ‘.’ matches any recipient)
‘.’ => [  # the _first_ matching sender determines the score boost

new_RE(  # regexp-type lookup table, just happens to be all soft-blacklist
[qr’^(bulkmail|offers|cheapbenefits|earnmoney|foryou)@’i         => 5.0],
[qr’^(greatcasino|investments|lose_weight_today|market\.alert)@’i=> 5.0],
[qr’^(money2you|MyGreenCard|new\.tld\.registry|opt-out|opt-in)@’i=> 5.0],
[qr’^(optin|saveonlsmoking2002k|specialoffer|specialoffers)@’i   => 5.0],
[qr’^(stockalert|stopsnoring|wantsome|workathome|yesitsfree)@’i  => 5.0],
[qr’^(your_friend|greatoffers)@’i                                => 5.0],
[qr’^(inkjetplanet|marketopt|MakeMoney)\d*@’i                    => 5.0],
),

#  read_hash(«/var/amavis/sender_scores_sitewide»),

{ # a hash-type lookup table (associative array)
‘nobody@cert.org’                        => -3.0,
‘cert-advisory@us-cert.gov’              => -3.0,
‘owner-alert@iss.net’                    => -3.0,
‘slashdot@slashdot.org’                  => -3.0,
‘securityfocus.com’                      => -3.0,
‘ntbugtraq@listserv.ntbugtraq.com’       => -3.0,
‘security-alerts@linuxsecurity.com’      => -3.0,
‘mailman-announce-admin@python.org’      => -3.0,
‘amavis-user-admin@lists.sourceforge.net’=> -3.0,
‘amavis-user-bounces@lists.sourceforge.net’ => -3.0,
‘spamassassin.apache.org’                => -3.0,
‘notification-return@lists.sophos.com’   => -3.0,
‘owner-postfix-users@postfix.org’        => -3.0,
‘owner-postfix-announce@postfix.org’     => -3.0,
‘owner-sendmail-announce@lists.sendmail.org’   => -3.0,
‘sendmail-announce-request@lists.sendmail.org’ => -3.0,
‘donotreply@sendmail.org’                => -3.0,
‘ca+envelope@sendmail.org’               => -3.0,
‘noreply@freshmeat.net’                  => -3.0,
‘owner-technews@postel.acm.org’          => -3.0,
‘ietf-123-owner@loki.ietf.org’           => -3.0,
‘cvs-commits-list-admin@gnome.org’       => -3.0,
‘rt-users-admin@lists.fsck.com’          => -3.0,
‘clp-request@comp.nus.edu.sg’            => -3.0,
‘surveys-errors@lists.nua.ie’            => -3.0,
’emailnews@genomeweb.com’                => -5.0,
‘yahoo-dev-null@yahoo-inc.com’           => -3.0,
‘returns.groups.yahoo.com’               => -3.0,
‘clusternews@linuxnetworx.com’           => -3.0,
lc(‘lvs-users-admin@LinuxVirtualServer.org’)    => -3.0,
lc(‘owner-textbreakingnews@CNNIMAIL12.CNN.COM’) => -5.0,

# soft-blacklisting (positive score)
‘sender@example.net’                     =>  3.0,
‘.example.net’                           =>  1.0,

},
],  # end of site-wide tables
});

@decoders = (
[‘mail’, \&do_mime_decode],
[‘asc’,  \&do_ascii],
[‘uue’,  \&do_ascii],
[‘hqx’,  \&do_ascii],
[‘ync’,  \&do_ascii],
[‘F’,    \&do_uncompress, [‘unfreeze’,’freeze -d’,’melt’,’fcat’] ],
[‘Z’,    \&do_uncompress, [‘uncompress’,’gzip -d’,’zcat’] ],
[‘gz’,   \&do_uncompress,  ‘gzip -d’],
[‘gz’,   \&do_gunzip],
[‘bz2’,  \&do_uncompress,  ‘bzip2 -d’],
[‘lzo’,  \&do_uncompress,  ‘lzop -d’],
[‘rpm’,  \&do_uncompress, [‘rpm2cpio.pl’,’rpm2cpio’] ],
[‘cpio’, \&do_pax_cpio,   [‘pax’,’gcpio’,’cpio’] ],
[‘tar’,  \&do_pax_cpio,   [‘pax’,’gcpio’,’cpio’] ],
[‘deb’,  \&do_ar,          ‘ar’],
# [‘a’,    \&do_ar,          ‘ar’],  # unpacking .a seems an overkill
[‘zip’,  \&do_unzip],
[‘7z’,   \&do_7zip,       [‘7zr’,’7za’,’7z’] ],
[‘rar’,  \&do_unrar,      [‘rar’,’unrar’] ],
[‘arj’,  \&do_unarj,      [‘arj’,’unarj’] ],
[‘arc’,  \&do_arc,        [‘nomarch’,’arc’] ],
[‘zoo’,  \&do_zoo,        [‘zoo’,’unzoo’] ],
[‘lha’,  \&do_lha,         ‘lha’],
# [‘doc’,  \&do_ole,         ‘ripole’],
[‘cab’,  \&do_cabextract,  ‘cabextract’],
[‘tnef’, \&do_tnef_ext,    ‘tnef’],
[‘tnef’, \&do_tnef],
# [‘sit’,  \&do_unstuff,     ‘unstuff’],  # broken/unsafe decoder
[‘exe’,  \&do_executable, [‘rar’,’unrar’], ‘lha’, [‘arj’,’unarj’] ],
);

@av_scanners = (

# ### http://www.clanfield.info/sophie/ (http://www.vanja.com/tools/sophie/)
# [‘Sophie’,
#   \&ask_daemon, [«{}/\n», ‘/var/run/sophie’],
#   qr/(?x)^ 0+ ( : | [\000\r\n]* $)/,  qr/(?x)^ 1 ( : | [\000\r\n]* $)/,
#   qr/(?x)^ [-+]? \d+ : (.*?) [\000\r\n]* $/ ],

# ### http://www.csupomona.edu/~henson/www/projects/SAVI-Perl/
# [‘Sophos SAVI’, \&sophos_savi ],

# ### http://www.clamav.net/
# [‘ClamAV-clamd’,
#   \&ask_daemon, [«CONTSCAN {}\n», «/var/run/clamav/clamd»],
#   qr/\bOK$/, qr/\bFOUND$/,
#   qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# # NOTE: run clamd under the same user as amavisd, or run it under its own
# #   uid such as clamav, add user clamav to the amavis group, and then add
# #   AllowSupplementaryGroups to clamd.conf;
# # NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in
# #   this entry; when running chrooted one may prefer socket «$MYHOME/clamd».
### http://www.clamav.net/
[‘ClamAV-clamd’,
\&ask_daemon, [«CONTSCAN {}\n», «/var/run/clamav/clamd.socket»],
qr/\bOK$/, qr/\bFOUND$/,
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# NOTE: run clamd under the same user as amavisd, or run it under its own
#   uid such as clamav, add user clamav to the amavis group, and then add
#   AllowSupplementaryGroups to clamd.conf;
# NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in
#   this entry; when running chrooted one may prefer socket «$MYHOME/clamd».

# ### http://www.clamav.net/
# [‘ClamAV-clamd’,
#   \&ask_daemon, [«CONTSCAN {}\n», «/var/run/clamav/clamd»],
#   qr/\bOK$/, qr/\bFOUND$/,
#   qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# # NOTE: run clamd under the same user as amavisd, or run it under its own
# #   uid such as clamav, add user clamav to the amavis group, and then add
# #   AllowSupplementaryGroups to clamd.conf;
# # NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in
# #   this entry; when running chrooted one may prefer socket «$MYHOME/clamd».
# ### http://www.clamav.net/ and CPAN  (memory-hungry! clamd is preferred)
# # note that Mail::ClamAV requires perl to be build with threading!
# [‘Mail::ClamAV’, \&ask_clamav, «*», [0], [1], qr/^INFECTED: (.+)/],

# ### http://www.openantivirus.org/
# [‘OpenAntiVirus ScannerDaemon (OAV)’,
#   \&ask_daemon, [«SCAN {}\n», ‘127.0.0.1:8127’],
#   qr/^OK/, qr/^FOUND: /, qr/^FOUND: (.+)/ ],

# ### http://www.vanja.com/tools/trophie/
# [‘Trophie’,
#   \&ask_daemon, [«{}/\n», ‘/var/run/trophie’],
#   qr/(?x)^ 0+ ( : | [\000\r\n]* $)/,  qr/(?x)^ 1 ( : | [\000\r\n]* $)/,
#   qr/(?x)^ [-+]? \d+ : (.*?) [\000\r\n]* $/ ],

# ### http://www.grisoft.com/
# [‘AVG Anti-Virus’,
#   \&ask_daemon, [«SCAN {}\n», ‘127.0.0.1:55555’],
#   qr/^200/, qr/^403/, qr/^403 .*?: ([^\r\n]+)/ ],

# ### http://www.f-prot.com/
# [‘F-Prot fpscand’,  # F-PROT Antivirus for BSD/Linux/Solaris, version 6
#   \&ask_daemon,
#   [«SCAN FILE {}/*\n», ‘127.0.0.1:10200’],
#   qr/^(0|8|64) /,
#   qr/^([1235679]|1[01345]) |<[^>:]*(?i)(infected|suspicious|unwanted)/,
#   qr/(?i)<[^>:]*(?:infected|suspicious|unwanted)[^>:]*: ([^>]*)>/ ],

# ### http://www.f-prot.com/
# [‘F-Prot f-protd’,  # old version
#   \&ask_daemon,
#   [«GET {}/*?-dumb%20-archive%20-packed HTTP/1.0\r\n\r\n»,
#     [‘127.0.0.1:10200’, ‘127.0.0.1:10201’, ‘127.0.0.1:10202’,
#      ‘127.0.0.1:10203’, ‘127.0.0.1:10204’] ],
#   qr/(?i)<summary[^>]*>clean<\/summary>/,
#   qr/(?i)<summary[^>]*>infected<\/summary>/,
#   qr/(?i)<name>(.+)<\/name>/ ],

# ### http://www.sald.com/, http://www.dials.ru/english/, http://www.drweb.ru/
# [‘DrWebD’, \&ask_daemon,   # DrWebD 4.31 or later
#   [pack(‘N’,1).  # DRWEBD_SCAN_CMD
#    pack(‘N’,0x00280001).   # DONT_CHANGEMAIL, IS_MAIL, RETURN_VIRUSES
#    pack(‘N’,     # path length
#      length(«$TEMPBASE/amavis-yyyymmddTHHMMSS-xxxxx/parts/pxxx»)).
#    ‘{}/*’.       # path
#    pack(‘N’,0).  # content size
#    pack(‘N’,0),
#    ‘/var/drweb/run/drwebd.sock’,
#  # ‘/var/amavis/var/run/drwebd.sock’,   # suitable for chroot
#  # ‘/usr/local/drweb/run/drwebd.sock’,  # FreeBSD drweb ports default
#  # ‘127.0.0.1:3000’,                    # or over an inet socket
#   ],
#   qr/\A\x00[\x10\x11][\x00\x10]\x00/s,         # IS_CLEAN,EVAL_KEY; SKIPPED
#   qr/\A\x00[\x00\x01][\x00\x10][\x20\x40\x80]/s, # KNOWN_V,UNKNOWN_V,V._MODIF
#   qr/\A.{12}(?:infected with )?([^\x00]+)\x00/s,
# ],
# # NOTE: If using amavis-milter, change length to:
# # length(«$TEMPBASE/amavis-milter-xxxxxxxxxxxxxx/parts/pxxx»).

### http://www.kaspersky.com/  (kav4mailservers)
#  [‘KasperskyLab AVP — aveclient’,
#    [‘/usr/local/kav/bin/aveclient’,’/usr/local/share/kav/bin/aveclient’,
#     ‘/opt/kav/5.5/kav4mailservers/bin/aveclient’,’aveclient’],
#    ‘-p /var/run/aveserver -s {}/*’,
#    [0,3,6,8], qr/\b(INFECTED|SUSPICION|SUSPICIOUS)\b/,
#    qr/(?:INFECTED|WARNING|SUSPICION|SUSPICIOUS) (.+)/,
#  ],
# NOTE: one may prefer [0],[2,3,4,5], depending on how suspicious,
# currupted or protected archives are to be handled

### http://www.kaspersky.com/
#  [‘KasperskyLab AntiViral Toolkit Pro (AVP)’, [‘avp’],
#    ‘-* -P -B -Y -O- {}’, [0,3,6,8], [2,4],    # any use for -A -K   ?
#    qr/infected: (.+)/,
#    sub {chdir(‘/opt/AVP’) or die «Can’t chdir to AVP: $!»},
#    sub {chdir($TEMPBASE) or die «Can’t chdir back to $TEMPBASE $!»},
#  ],

### The kavdaemon and AVPDaemonClient have been removed from Kasperky
### products and replaced by aveserver and aveclient
#  [‘KasperskyLab AVPDaemonClient’,
#    [ ‘/opt/AVP/kavdaemon’,       ‘kavdaemon’,
#      ‘/opt/AVP/AvpDaemonClient’, ‘AvpDaemonClient’,
#      ‘/opt/AVP/AvpTeamDream’,    ‘AvpTeamDream’,
#      ‘/opt/AVP/avpdc’, ‘avpdc’ ],
#    «-f=$TEMPBASE {}», [0,8], [3,4,5,6], qr/infected: ([^\r\n]+)/ ],
# change the startup-script in /etc/init.d/kavd to:
#   DPARMS=»-* -Y -dl -f=/var/amavis /var/amavis»
#   (or perhaps:   DPARMS=»-I0 -Y -* /var/amavis» )
# adjusting /var/amavis above to match your $TEMPBASE.
# The ‘-f=/var/amavis’ is needed if not running it as root, so it
# can find, read, and write its pid file, etc., see ‘man kavdaemon’.
# defUnix.prf: there must be an entry «*/var/amavis» (or whatever
#   directory $TEMPBASE specifies) in the ‘Names=’ section.
# cd /opt/AVP/DaemonClients; configure; cd Sample; make
# cp AvpDaemonClient /opt/AVP/
# su — vscan -c «${PREFIX}/kavdaemon ${DPARMS}»

### http://www.centralcommand.com/
#  [‘CentralCommand Vexira (new) vascan’,
#    [‘vascan’,’/usr/lib/Vexira/vascan’],
#    «-a s —timeout=60 —temp=$TEMPBASE -y $QUARANTINEDIR «.
#    «—log=/var/log/vascan.log {}»,
#    [0,3], [1,2,5],
#    qr/(?x)^\s* (?:virus|iworm|macro|mutant|sequence|trojan)\ found:\ ( [^\]\s’]+ )\ \.\.\.\ / ],
# Adjust the path of the binary and the virus database as needed.
# ‘vascan’ does not allow to have the temp directory to be the same as
# the quarantine directory, and the quarantine option can not be disabled.
# If $QUARANTINEDIR is not used, then another directory must be specified
# to appease ‘vascan’. Move status 3 to the second list if password
# protected files are to be considered infected.

### http://www.avira.com/
### Avira AntiVir (formerly H+BEDV) or (old) CentralCommand Vexira Antivirus
# [‘Avira AntiVir’, [‘antivir’,’vexira’],
#  ‘—allfiles -noboot -nombr -rs -s -z {}’, [0], qr/ALERT:|VIRUS:/,
# qr/(?x)^\s* (?: ALERT: \s* (?: \[ | [^’]* ‘ ) |
#     (?i) VIRUS:\ .*?\ virus\ ‘?) ( [^\]\s’]+ )/ ],
# NOTE: if you only have a demo version, remove -z and add 214, as in:
#  ‘—allfiles -noboot -nombr -rs -s {}’, [0,214], qr/ALERT:|VIRUS:/,

### http://www.commandsoftware.com/
#  [‘Command AntiVirus for Linux’, ‘csav’,
#    ‘-all -archive -packed {}’, [50], [51,52,53],
#    qr/Infection: (.+)/ ],

### http://www.symantec.com/
#  [‘Symantec CarrierScan via Symantec CommandLineScanner’,
#    ‘cscmdline’, ‘-a scan -i 1 -v -s 127.0.0.1:7777 {}’,
#    qr/^Files Infected:\s+0$/, qr/^Infected\b/,
#    qr/^(?:Info|Virus Name):\s+(.+)/ ],

### http://www.symantec.com/
#  [‘Symantec AntiVirus Scan Engine’,
#    ‘savsecls’, ‘-server 127.0.0.1:7777 -mode scanrepair -details -verbose {}’,
#    [0], qr/^Infected\b/,
#    qr/^(?:Info|Virus Name):\s+(.+)/ ],
# NOTE: check options and patterns to see which entry better applies

# ### http://www.f-secure.com/products/anti-virus/  version 4.65
#  [‘F-Secure Antivirus for Linux servers’,
#   [‘/opt/f-secure/fsav/bin/fsav’, ‘fsav’],
#   ‘—delete=no —disinf=no —rename=no —archive=yes —auto=yes ‘.
#   ‘—dumb=yes —list=no —mime=yes {}’, [0], [3,6,8],
#   qr/(?:infection|Infected|Suspected): (.+)/ ],

### http://www.f-secure.com/products/anti-virus/  version 5.52
#   [‘F-Secure Antivirus for Linux servers’,
#    [‘/opt/f-secure/fsav/bin/fsav’, ‘fsav’],
#    ‘—virus-action1=report —archive=yes —auto=yes ‘.
#    ‘—dumb=yes —list=no —mime=yes {}’, [0], [3,4,6,8],
#    qr/(?:infection|Infected|Suspected|Riskware): (.+)/ ],
# NOTE: internal archive handling may be switched off by ‘—archive=no’
#   to prevent fsav from exiting with status 9 on broken archives

# ### http://www.avast.com/
# [‘avast! Antivirus daemon’,
#   \&ask_daemon,    # greets with 220, terminate with QUIT
#   [«SCAN {}\015\012QUIT\015\012″, ‘/var/run/avast4/mailscanner.sock’],
#   qr/\t\[\+\]/, qr/\t\[L\]\t/, qr/\t\[L\]\t([^[ \t\015\012]+)/ ],

# ### http://www.avast.com/
# [‘avast! Antivirus — Client/Server Version’, ‘avastlite’,
#   ‘-a /var/run/avast4/mailscanner.sock -n {}’, [0], [1],
#   qr/\t\[L\]\t([^[ \t\015\012]+)/ ],

#  [‘CAI InoculateIT’, ‘inocucmd’,  # retired product
#    ‘-sec -nex {}’, [0], [100],
#    qr/was infected by virus (.+)/ ],
# see: http://www.flatmtn.com/computer/Linux-Antivirus_CAI.html

### http://www3.ca.com/Solutions/Product.asp?ID=156  (ex InoculateIT)
#  [‘CAI eTrust Antivirus’, ‘etrust-wrapper’,
#    ‘-arc -nex -spm h {}’, [0], [101],
#    qr/is infected by virus: (.+)/ ],
# NOTE: requires suid wrapper around inocmd32; consider flag: -mod reviewer
# see http://marc.theaimsgroup.com/?l=amavis-user&m=109229779912783

### http://mks.com.pl/english.html
#  [‘MkS_Vir for Linux (beta)’, [‘mks32′,’mks’],
#   ‘-s {}/*’, [0], [1,2],
#   qr/—[ \t]*(.+)/ ],

### http://mks.com.pl/english.html
#  [‘MkS_Vir daemon’, ‘mksscan’,
#    ‘-s -q {}’, [0], [1..7],
#    qr/^… (\S+)/ ],

# ### http://www.nod32.com/,  version v2.52 and above
# [‘ESET NOD32 for Linux Mail servers’,
#   [‘/opt/eset/nod32/bin/nod32cli’, ‘nod32cli’],
#    ‘—subdir —files -z —sfx —rtp —adware —unsafe —pattern —heur ‘.
#    ‘-w -a —action-on-infected=accept —action-on-uncleanable=accept ‘.
#    ‘—action-on-notscanned=accept {}’,
#   [0,3], [1,2], qr/virus=»([^»]+)»/ ],

### http://www.eset.com/, version v2.7
#  [‘ESET NOD32 Linux Mail Server — command line interface’,
#    [‘/usr/bin/nod32cli’, ‘/opt/eset/nod32/bin/nod32cli’, ‘nod32cli’],
#    ‘—subdir {}’, [0,3], [1,2], qr/virus=»([^»]+)»/ ],

## http://www.nod32.com/,  NOD32LFS version 2.5 and above
#  [‘ESET NOD32 for Linux File servers’,
#    [‘/opt/eset/nod32/sbin/nod32′,’nod32’],
#    ‘—files -z —mail —sfx —rtp —adware —unsafe —pattern —heur ‘.
#    ‘-w -a —action=1 -b {}’,
#    [0], [1,10], qr/^object=.*, virus=»(.*?)»,/ ],

# Experimental, based on posting from Rado Dibarbora (Dibo) on 2002-05-31
# [‘ESET Software NOD32 Client/Server (NOD32SS)’,
#   \&ask_daemon2,    # greets with 200, persistent, terminate with QUIT
#   [«SCAN {}/*\r\n», ‘127.0.0.1:8448’ ],
#   qr/^200 File OK/, qr/^201 /, qr/^201 (.+)/ ],

### http://www.norman.com/products_nvc.shtml
#  [‘Norman Virus Control v5 / Linux’, ‘nvcc’,
#    ‘-c -l:0 -s -u -temp:$TEMPBASE {}’, [0,10,11], [1,2,14],
#    qr/(?i).* virus in .* -> \'(.+)\’/ ],

### http://www.pandasoftware.com/
#  [‘Panda CommandLineSecure 9 for Linux’,
#    [‘/opt/pavcl/usr/bin/pavcl’,’pavcl’],
#    ‘-auto -aex -heu -cmp -nbr -nor -nos -eng -nob {}’,
#    qr/Number of files infected[ .]*: 0+(?!\d)/,
#    qr/Number of files infected[ .]*: 0*[1-9]/,
#    qr/Found virus :\s*(\S+)/ ],
# NOTE: for efficiency, start the Panda in resident mode with ‘pavcl -tsr’
# before starting amavisd — the bases are then loaded only once at startup.
# To reload bases in a signature update script:
#   /opt/pavcl/usr/bin/pavcl -tsr -ulr; /opt/pavcl/usr/bin/pavcl -tsr
# Please review other options of pavcl, for example:
#  -nomalw, -nojoke, -nodial, -nohackt, -nospyw, -nocookies

# ### http://www.pandasoftware.com/
# [‘Panda Antivirus for Linux’, [‘pavcl’],
#   ‘-TSR -aut -aex -heu -cmp -nbr -nor -nso -eng {}’,
#   [0], [0x10, 0x30, 0x50, 0x70, 0x90, 0xB0, 0xD0, 0xF0],
#   qr/Found virus :\s*(\S+)/ ],

# GeCAD AV technology is acquired by Microsoft; RAV has been discontinued.
# Check your RAV license terms before fiddling with the following two lines!
# [‘GeCAD RAV AntiVirus 8’, ‘ravav’,
#   ‘—all —archive —mail {}’, [1], [2,3,4,5], qr/Infected: (.+)/ ],
# # NOTE: the command line switches changed with scan engine 8.5 !
# # (btw, assigning stdin to /dev/null causes RAV to fail)

### http://www.nai.com/
#  [‘NAI McAfee AntiVirus (uvscan)’, ‘uvscan’,
#    ‘—secure -rv —mime —summary —noboot — {}’, [0], [13],
#    qr/(?x) Found (?:
#        \ the\ (.+)\ (?:virus|trojan)  |
#        \ (?:virus|trojan)\ or\ variant\ ([^ ]+)  |
#        :\ (.+)\ NOT\ a\ virus)/,
# sub {$ENV{LD_PRELOAD}=’/lib/libc.so.6′},
# sub {delete $ENV{LD_PRELOAD}},
#  ],
# NOTE1: with RH9: force the dynamic linker to look at /lib/libc.so.6 before
# anything else by setting environment variable LD_PRELOAD=/lib/libc.so.6
# and then clear it when finished to avoid confusing anything else.
# NOTE2: to treat encrypted files as viruses replace the [13] with:
#  qr/^\s{5,}(Found|is password-protected|.*(virus|trojan))/

### http://www.virusbuster.hu/en/
#  [‘VirusBuster’, [‘vbuster’, ‘vbengcl’],
#    «{} -ss -i ‘*’ -log=$MYHOME/vbuster.log», [0], [1],
#    qr/: ‘(.*)’ — Virus/ ],
# VirusBuster Ltd. does not support the daemon version for the workstation
# engine (vbuster-eng-1.12-linux-i386-libc6.tgz) any longer. The names of
# binaries, some parameters AND return codes have changed (from 3 to 1).
# See also the new Vexira entry ‘vascan’ which is possibly related.

# ### http://www.virusbuster.hu/en/
# [‘VirusBuster (Client + Daemon)’, ‘vbengd’,
#   ‘-f -log scandir {}’, [0], [3],
#   qr/Virus found = (.*);/ ],
# # HINT: for an infected file it always returns 3,
# # although the man-page tells a different story

### http://www.cyber.com/
#  [‘CyberSoft VFind’, ‘vfind’,
#    ‘—vexit {}/*’, [0], [23], qr/##==>>>> VIRUS ID: CVDL (.+)/,
# sub {$ENV{VSTK_HOME}=’/usr/lib/vstk’},
#  ],

### http://www.avast.com/
#  [‘avast! Antivirus’, [‘/usr/bin/avastcmd’,’avastcmd’],
#    ‘-a -i -n -t=A {}’, [0], [1], qr/\binfected by:\s+([^ \t\n\[\]]+)/ ],

### http://www.ikarus-software.com/
#  [‘Ikarus AntiVirus for Linux’, ‘ikarus’,
#    ‘{}’, [0], [40], qr/Signature (.+) found/ ],

### http://www.bitdefender.com/
#  [‘BitDefender’, ‘bdscan’,  # new version
#    ‘—action=ignore —no-list {}’, qr/^Infected files *:0+(?!\d)/,
#    qr/^(?:Infected files|Identified viruses|Suspect files) *:0*[1-9]/,
#    qr/(?:suspected|infected): (.*)(?:\033|$)/ ],

### http://www.bitdefender.com/
#  [‘BitDefender’, ‘bdc’,  # old version
#    ‘—arc —mail {}’, qr/^Infected files *:0+(?!\d)/,
#    qr/^(?:Infected files|Identified viruses|Suspect files) *:0*[1-9]/,
#    qr/(?:suspected|infected): (.*)(?:\033|$)/ ],
# consider also: —all —nowarn —alev=15 —flev=15.  The —all argument may
# not apply to your version of bdc, check documentation and see ‘bdc —help’

### ArcaVir for Linux and Unix http://www.arcabit.pl/
#  [‘ArcaVir for Linux’, [‘arcacmd’,’arcacmd.static’],
#    ‘-v 1 -summary 0 -s {}’, [0], [1,2],
#    qr/(?:VIR|WIR):[ \t]*(.+)/ ],

# [‘File::Scan’, sub {Amavis::AV::ask_av(sub{
#   use File::Scan; my($fn)=@_;
#   my($f)=File::Scan->new(max_txt_size=>0, max_bin_size=>0);
#   my($vname) = $f->scan($fn);
#   $f->error ? (2,»Error: «.$f->error)
#   : ($vname ne ») ? (1,»$vname FOUND») : (0,»Clean»)}, @_) },
#   [«{}/*»], [0], [1], qr/^(.*) FOUND$/ ],

# ### fully-fledged checker for JPEG marker segments of invalid length
# [‘check-jpeg’,
#   sub { use JpegTester (); Amavis::AV::ask_av(\&JpegTester::test_jpeg, @_) },
#   [«{}/*»], undef, [1], qr/^(bad jpeg: .*)$/ ],
# # NOTE: place file JpegTester.pm somewhere where Perl can find it,
# #       for example in /usr/local/lib/perl5/site_perl

);

@av_scanners_backup = (

### http://www.clamav.net/   — backs up clamd or Mail::ClamAV
[‘ClamAV-clamscan’, ‘clamscan’,
«—stdout —no-summary -r —tempdir=$TEMPBASE {}»,
[0], qr/:.*\sFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],

### http://www.f-prot.com/   — backs up F-Prot Daemon, V6
#[‘F-PROT Antivirus for UNIX’, [‘fpscan’],
#    ‘—report —mount —adware {}’,  # consider: —applications -s 4 -u 3 -z 10
#    [0,8,64],  [1,2,3, 4+1,4+2,4+3, 8+1,8+2,8+3, 12+1,12+2,12+3],
#    qr/^\[Found\s+[^\]]*\]\s+<([^ \t(>]*)/ ],

### http://www.f-prot.com/   — backs up F-Prot Daemon (old)
#  [‘FRISK F-Prot Antivirus’, [‘f-prot’,’f-prot.sh’],
#    ‘-dumb -archive -packed {}’, [0,8], [3,6],   # or: [0], [3,6,8],
#    qr/(?:Infection:|security risk named) (.+)|\s+contains\s+(.+)$/ ],

### http://www.trendmicro.com/   — backs up Trophie
#  [‘Trend Micro FileScanner’, [‘/etc/iscan/vscan’,’vscan’],
#    ‘-za -a {}’, [0], qr/Found virus/, qr/Found virus (.+) in/ ],

### http://www.sald.com/, http://drweb.imshop.de/   — backs up DrWebD
#  [‘drweb — DrWeb Antivirus’,  # security LHA hole in Dr.Web 4.33 and earlier
#    [‘/usr/local/drweb/drweb’, ‘/opt/drweb/drweb’, ‘drweb’],
#    ‘-path={} -al -go -ot -cn -upn -ok-‘,
#    [0,32], [1,9,33], qr’ infected (?:with|by)(?: virus)? (.*)$’],

### http://www.kaspersky.com/
#[‘Kaspersky Antivirus v5.5’,
#     [‘/opt/kaspersky/kav4fs/bin/kav4fs-kavscanner’,
#      ‘/opt/kav/5.5/kav4unix/bin/kavscanner’,
#      ‘/opt/kav/5.5/kav4mailservers/bin/kavscanner’, ‘kavscanner’],
#     ‘-i0 -xn -xp -mn -R -ePASBME {}/*’, [0,10,15], [5,20,21,25],
#     qr/(?:INFECTED|WARNING|SUSPICION|SUSPICIOUS) (.*)/ ,
#    sub {chdir(‘/opt/kav/bin’) or die «Can’t chdir to kav: $!»},
#    sub {chdir($TEMPBASE) or die «Can’t chdir back to $TEMPBASE $!»},
#   ],

# Commented out because the name ‘sweep’ clashes with Debian and FreeBSD
# package/port of an audio editor. Make sure the correct ‘sweep’ is found
# in the path when enabling.
#
# ### http://www.sophos.com/   — backs up Sophie or SAVI-Perl
# [‘Sophos Anti Virus (sweep)’, ‘sweep’,
#   ‘-nb -f -all -rec -ss -sc -archive -cab -mime -oe -tnef ‘.
#   ‘—no-reset-atime {}’,
#   [0,2], qr/Virus .*? found/,
#   qr/^>>> Virus(?: fragment)? ‘?(.*?)’? found/,
# ],
# # other options to consider: -idedir=/usr/local/sav

# always succeeds (uncomment to consider mail clean if all other scanners fail)
# [‘always-clean’, sub {0}],
);
1;  # insure a defined return

Командуем.
chkconfig —levels 235 amavisd on
chkconfig —levels 235 clamd on
/etc/init.d/amavisd start
/etc/init.d/clamd start
/usr/bin/freshclam

Теперь осталось добавить в Postfix в master.cf следующее.
amavis unix — — — — 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
127.0.0.1:10025 inet n — — — — smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o strict_rfc821_envelopes=yes
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
-o smtpd_bind_address=127.0.0.1

И делаем рестарт.
/etc/init.d/postfix restart

Ставим Razor, Pyzor And DCC и настраиваем SpamAssassin
yum install perl-Razor-Agent razor-agents
rpm -ivh ftp://ftp.pbone.net/mirror/download.fedora.redhat.com/pub/fedora/epel/5/i386/pyzor-0.4.0-11.el5.noarch.rpm
Выставляем права.
chmod -R a+rX /usr/share/doc/pyzor-0.4.0 /usr/bin/pyzor /usr/bin/pyzord
chmod -R a+rX /usr/lib/python2.4/site-packages/pyzor
mkdir /var/spool/amavisd
chown amavis:amavis /var/spool/amavisd
su -m amavis -c ‘pyzor —homedir /var/spool/amavisd discover’
su -m amavis -c ‘razor-admin -home=/var/spool/amavisd -create’
su -m amavis -c ‘razor-admin -home=/var/spool/amavisd -register’
Ставим DCC
cd /tmp
wget http://www.dcc-servers.net/dcc/source/dcc-dccproc.tar.Z
tar xzvf dcc-dccproc.tar.Z
cd dcc-dccproc-1.3.76
./configure —with-uid=amavis
make
make install
chown -R amavis:amavis /var/dcc
ln -s /var/dcc/libexec/dccifd /usr/local/bin/dccifd
И правим главный конфиг Spamassassin /etc/mail/spamassassin/local.cf
# These values can be overridden by editing ~/.spamassassin/user_prefs.cf
# (see spamassassin(1) for details)
# These should be safe assumptions and allow for simple visual sifting
# without risking lost emails.
#required_hits 5
#report_safe 0
#rewrite_header Subject [SPAM]
# dcc
use_dcc 1
dcc_path /usr/local/bin/dccproc
#pyzor
use_pyzor 1
pyzor_path /usr/bin/pyzor
#razor
use_razor2 1
razor_config /var/spool/amavisd/razor-agent.conf
#bayes
use_bayes 1
use_bayes_rules 1
bayes_auto_learn 1

И файл /etc/mail/spamassassin/v310.pre
# This is the right place to customize your installation of SpamAssassin.
#
# See ‘perldoc Mail::SpamAssassin::Conf’ for details of what can be
# tweaked.
#
# This file was installed during the installation of SpamAssassin 3.1.0,
# and contains plugin loading commands for the new plugins added in that
# release.  It will not be overwritten during future SpamAssassin installs,
# so you can modify it to enable some disabled-by-default plugins below,
# if you so wish.
#
# There are now multiple files read to enable plugins in the
# /etc/mail/spamassassin directory; previously only one, «init.pre» was
# read.  Now both «init.pre», «v310.pre», and any other files ending in
# «.pre» will be read.  As future releases are made, new plugins will be
# added to new files, named according to the release they’re added in.
###########################################################################

# DCC — perform DCC message checks.
#
# DCC is disabled here because it is not open source.  See the DCC
# license for more details.
#
loadplugin Mail::SpamAssassin::Plugin::DCC
# Pyzor — perform Pyzor message checks.
#
loadplugin Mail::SpamAssassin::Plugin::Pyzor
# Razor2 — perform Razor2 message checks.
#
loadplugin Mail::SpamAssassin::Plugin::Razor2
# SpamCop — perform SpamCop message reporting
#
loadplugin Mail::SpamAssassin::Plugin::SpamCop
# AntiVirus — some simple anti-virus checks, this is not a replacement
# for an anti-virus filter like Clam AntiVirus
#
#loadplugin Mail::SpamAssassin::Plugin::AntiVirus
# AWL — do auto-whitelist checks
#
loadplugin Mail::SpamAssassin::Plugin::AWL
# AutoLearnThreshold — threshold-based discriminator for Bayes auto-learning
#
loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
# TextCat — language guesser
#
#loadplugin Mail::SpamAssassin::Plugin::TextCat
# AccessDB — lookup from-addresses in access database
#
#loadplugin Mail::SpamAssassin::Plugin::AccessDB
# WhitelistSubject — Whitelist/Blacklist certain subject regular expressions
#
loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject
###########################################################################
# experimental plugins
# DomainKeys — perform DomainKeys verification
#
# External modules required for use, see INSTALL for more information.
# Note that this may be redundant if you also plan to use the DKIM plugin.
#
#loadplugin Mail::SpamAssassin::Plugin::DomainKeys
# MIMEHeader — apply regexp rules against MIME headers in the message
#
loadplugin Mail::SpamAssassin::Plugin::MIMEHeader
# ReplaceTags
#
loadplugin Mail::SpamAssassin::Plugin::ReplaceTags

Проверим правильность конфигов командой.
spamassassin —lint
Если ошибок нету значит все правильно.

Делаем рестарт amavisd.
/etc/init.d/amavisd restart

Создадим файл обновления /usr/local/sbin/sa_rules_update.sh и поместим его в cron.
#!/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/71_sare_redirect_pre3.0.0.cf -O 71_sare_redirect_pre3.0.0.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_bayes_poison_nxm.cf -O 70_sare_bayes_poison_nxm.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_html.cf -O 70_sare_html.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_html4.cf -O 70_sare_html4.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_html_x30.cf -O 70_sare_html_x30.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_header0.cf -O 70_sare_header0.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_header3.cf -O 70_sare_header3.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_header_x30.cf -O 70_sare_header_x30.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_specific.cf -O 70_sare_specific.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_adult.cf -O 70_sare_adult.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/72_sare_bml_post25x.cf -O 72_sare_bml_post25x.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/99_sare_fraud_post25x.cf -O 99_sare_fraud_post25x.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_spoof.cf -O 70_sare_spoof.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_random.cf -O 70_sare_random.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_oem.cf -O 70_sare_oem.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_genlsubj0.cf -O 70_sare_genlsubj0.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_genlsubj3.cf -O 70_sare_genlsubj3.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_genlsubj_x30.cf -O 70_sare_genlsubj_x30.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_unsub.cf -O 70_sare_unsub.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_uri.cf -O 70_sare_uri.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.timj.co.uk/linux/bogus-virus-warnings.cf -O bogus-virus-warnings.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.yackley.org/sa-rules/evilnumbers.cf -O evilnumbers.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.stearns.org/sa-blacklist/random.current.cf -O random.current.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/88_FVGT_body.cf -O 88_FVGT_body.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/88_FVGT_rawbody.cf -O 88_FVGT_rawbody.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/88_FVGT_subject.cf -O 88_FVGT_subject.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/88_FVGT_headers.cf -O 88_FVGT_headers.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/88_FVGT_uri.cf -O 88_FVGT_uri.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/99_FVGT_DomainDigits.cf -O 99_FVGT_DomainDigits.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/99_FVGT_Tripwire.cf -O 99_FVGT_Tripwire.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/99_FVGT_meta.cf -O 99_FVGT_meta.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.nospamtoday.com/download/mime_validate.cf -O mime_validate.cf &> /dev/null
/etc/init.d/amavisd restart &> /dev/null
exit 0

Дадим права ему.
chmod 755 /usr/local/sbin/sa_rules_update.sh
Ну и конечно же запустим обновление.
/usr/local/sbin/sa_rules_update.sh
Поместим в cron.
crontab -e
23 4 */2 * * /usr/local/sbin/sa_rules_update.sh &> /dev/null

Поработаем с quota
cd /usr/local/sbin/
wget http://puuhis.net/vhcs/quota.txt
mv quota.txt quota_notify
chmod 755 quota_notify

Файл /usr/local/sbin/quota_notify
#!/usr/bin/perl -w

# Author <jps@tntmax.com>
#
# This script assumes that virtual_mailbox_base in defined
# in postfix’s main.cf file. This directory is assumed to contain
# directories which themselves contain your virtual user’s maildirs.
# For example:
#
# ————/
#            |
#            |
#    home/vmail/domains/
#        |          |
#        |          |
#  example.com/  foo.com/
#                   |
#                   |
#           ——————
#           |       |       |
#           |       |       |
#         user1/   user2/  user3/
#                           |
#                           |
#                        maildirsize
#

use strict;

my $POSTFIX_CF = «/etc/postfix/main.cf»;
my $MAILPROG = «/usr/sbin/sendmail -t»;
my $WARNPERCENT = 80;
my @POSTMASTERS = (‘postmaster@kipalex.ru’);
my $CONAME = ‘My Company’;
my $COADDR = ‘postmaster@kipalex.ru’;
my $SUADDR = ‘postmaster@kipalex.ru’;
my $MAIL_REPORT = 1;
my $MAIL_WARNING = 1;

print «Subject: WARNING: Your mailbox is $lusers{$luser}% full.\n»;
print «Your mailbox: $luser is $lusers{$luser}% full.\n\n»;
#get virtual mailbox base from postfix config
open(PCF, «< $POSTFIX_CF») or die $!;
my $mboxBase;
while (<PCF>) {
next unless /virtual_mailbox_base\s*=\s*(.*)\s*/;
$mboxBase = $1;
}
close(PCF);

#assume one level of subdirectories for domain names
my @domains;
opendir(DIR, $mboxBase) or die $!;
while (defined(my $name = readdir(DIR))) {
next if $name =~ /^\.\.?$/;        #skip ‘.’ and ‘..’
next unless (-d «$mboxBase/$name»);
push(@domains, $name);
}
closedir(DIR);
#iterate through domains for username/maildirsize files
my @users;
chdir($mboxBase);
foreach my $domain (@domains) {
opendir(DIR, $domain) or die $!;
while (defined(my $name = readdir(DIR))) {
next if $name =~ /^\.\.?$/;        #skip ‘.’ and ‘..’
next unless (-d «$domain/$name»);
push(@users, {«$name\@$domain» => «$mboxBase/$domain/$name»});
}
}
closedir(DIR);

#get user quotas and percent used
my (%lusers, $report);
foreach my $href (@users) {
foreach my $user (keys %$href) {
my $quotafile = «$href->{$user}/maildirsize»;
next unless (-f $quotafile);
open(QF, «< $quotafile») or die $!;
my ($firstln, $quota, $used);
while (<QF>) {
my $line = $_;
if (! $firstln) {
$firstln = 1;
die «Error: corrupt quotafile $quotafile»
unless ($line =~ /^(\d+)S/);
$quota = $1;
last if (! $quota);
next;
}
die «Error: corrupt quotafile $quotafile»
unless ($line =~ /\s*(-?\d+)/);
$used += $1;
}
close(QF);
next if (! $used);
my $percent = int($used / $quota * 100);
$lusers{$user} = $percent unless not $percent;
}
}

#send a report to the postmasters
if ($MAIL_REPORT) {
open(MAIL, «| $MAILPROG»);
select(MAIL);
map {print «To: $_\n»} @POSTMASTERS;
print «From: $COADDR\n»;
print «Subject: Daily Quota Report.\n»;
print «DAILY QUOTA REPORT:\n\n»;
print «———————————————-\n»;
print «| % USAGE |            ACCOUNT NAME          |\n»;
print «———————————————-\n»;
foreach my $luser ( sort { $lusers{$b} <=> $lusers{$a} } keys %lusers ) {
printf(«|   %3d   | %32s |\n», $lusers{$luser}, $luser);
print «———————————————\n»;
}
print «\n—\n»;
print «$CONAME\n»;
close(MAIL);
}

#email a warning to people over quota
if ($MAIL_WARNING) {
foreach my $luser (keys (%lusers)) {
next unless $lusers{$luser} >= $WARNPERCENT;       # skip those under quota
open(MAIL, «| $MAILPROG»);
select(MAIL);
print «To: $luser\n»;
map {print «BCC: $_\n»} @POSTMASTERS;
print «From: $SUADDR\n»;
print «Subject: WARNING: Your mailbox is $lusers{$luser} full.\n»;
print «Reply-to: $SUADDR\n»;
print «Your mailbox: $luser is $lusers{$luser} full.\n\n»;
print «Once your e-mail box has exceeded your monthly storage quota\n»;
print «your monthly billing will be automatically adjusted.\n»;
print «Please consider deleting e-mail and emptying your trash folder to clear some space.\n\n»;
print «Contact <$SUADDR> for further assistance.\n\n»;
print «Thank You.\n\n»;
print «—\n»;
print «$CONAME\n»;
close(MAIL);
}
}

Добавим в cron.
crontab -e
0 0 * * * /usr/local/sbin/quota_notify &> /dev/null

Все проверяем работу.
telnet localhost 25
Trying 127.0.0.1…
Connected to localhost.
Escape character is ‘^]’.
220 ns1.kipalex.ru ESMTP Postfix
EHLO kipalex.ru
250-ns1.kipalex.ru
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

А дальше ставим Postfixadmin, настраиваем апач, и создаем домены и пользователей и в бой. :)
Все сообщения помеченные как ***SPAM*** сортируются почтовым клиентом и помещаются в заранее созданную папку Spam.
Почему взялся за Dovecot? Новый проект быстрый, легкий.


Добавить комментарий