Однажды я уже писал про Почтовую систему на базе Postix и Dovecot.
Решил немного усложнить задачу, дабы еще и боротся со спамом. Ну и заодно прикрутить антивирусное приложение.
И так что же нам понадобится: Postfix (должен быть собран с поддержкой MySQL), MySQL (храниться вся информация о пользователях), Cyrus-Sasl (необходим для авторизации пользователей), Dovecot (IMAP сервер тоже должен быть собран с поддержкой MySQL), Spamassassin (фильтр спама, служит для отлова спама), amavisd и clamav (служит для проверки входящих сообщений на наличие вирусов и троянов и прочей дряни), Postfixadmin (PHP скрипт для управлением почтовыми доменами и ящиками пользователей), Roundcubemail (почтовый клиент для веб доступа к почтовому ящику).
Итак приступим…
Первое что нам необходимо сделать, так это поправить файл /etc/hosts следующим образом.
127.0.0.1 localhost
217.25.159.205 ns1.kipalex.ru kipalex.ru
Так как я использую исключительно на серверах CentOS, используем yum.
Обновим систему.
yum update
Далее необходимо поставить все необходимые нам пакеты для сборки Postfix.
yum groupinstall ‘Development Tools’
and
yum groupinstall ‘Development Libraries’
В принципе все то можно и не ставить, я же поступил другим образом на локальной машине своей собрал Postfix, а потом уже перелил на сервер, но рекомендую поставить.
Далее ставим пакеты веб сервера, php, mysql и т.д. В принципе все то в одной строке можно и не писать, по зависимостям все само подхватится.
yum install ntp httpd mysql-server php php-mysql php-mbstring php-mcrypt phpmyadmin rpm-build gcc mysql-devel openssl-devel cyrus-sasl-devel pkgconfig zlib-devel pcre-devel openldap-devel postgresql-devel expect libtool-ltdl-devel openldap-servers libtool gdbm-devel pam-devel gamin-devel
Для поддержки в Postfix квот необходимо на него поставить patch и пересобрать с нужными нам параметрами.
Postfix берем с сайта: http://ftp-stud.fht-esslingen.de/pub/Mirrors/centos/ ищем нашу версию дистрибутива и качаем src.rpm
cd /usr/src
wget http://ftp-stud.fht-esslingen.de/pub/Mirrors/centos/5.3/os/SRPMS/postfix-2.3.3-2.1.el5_2.src.rpm
rpm -ivh postfix-2.3.3-2.1.el5_2.src.rpm
Далее качаем патч с сайта http://vda.sourceforge.net/VDA/
cd /usr/src/redhat/SOURCES
wget http://vda.sourceforge.net/VDA/postfix-2.3.3-vda.patch.gz
gunzip postfix-2.3.3-vda.patch.gz
cd /usr/src/redhat/SPECS/
Только не забываем чтобы версии были одинаковыми!
Включаем поддержку MySQL в Postfix для этого правим postfix.spec
[…]
%define MYSQL 1
[…]
# Patches
Patch0: postfix-2.3.3-vda.patch
Patch1: postfix-2.1.1-config.patch
Patch3: postfix-alternatives.patch
Patch6: postfix-2.1.1-obsolete.patch
Patch7: postfix-2.1.5-aliases.patch
Patch8: postfix-large-fs.patch
Patch9: postfix-2.2.5-cyrus.patch
[…]
%setup -q
# Apply obligatory patches
%patch0 -p1 -b .vda
%patch1 -p1 -b .config
%patch3 -p1 -b .alternatives
%patch6 -p1 -b .obsolete
%patch7 -p1 -b .aliases
%patch8 -p1 -b .large-fs
%patch9 -p1 -b .cyrus
[…]
У Вас должно получиться так же.
Собираем наш Postfix командой rpmbuild -ba postfix.spec или rpmbuild —rebuild —define=’MYSQL 1′ postfix-2.3.3.src.rpm (но тут не получиться тогда patch поставить).
Наш пакет собрался идем
cd /usr/src/redhat/RPMS/i386
И ставим его
rpm -ivh postfix-2.3.3-2.i386.rpm
Там правда еще есть пакет debug и пакет для просмотров логов и их анализа самого postfix, кому надо тот установит, мне он не нужен.
Даем команду для запуска MySQL при старте системы
chkconfig —levels 235 mysqld on
/etc/init.d/mysqld start и запускаем сам сервер.
Ставим пароль на сервер
mysqladmin -u root password mypassword
mysqladmin -h localhost -u root password mypassword
Надо теперь изменить файл /etc/httpd/conf.d/phpmyadmin.conf
Alias /phpMyAdmin /usr/share/phpMyAdmin
Alias /phpmyadmin /usr/share/phpMyAdmin
<Directory /usr/share/phpMyAdmin/>
order deny,allow
deny from all
allow from all
</Directory>
И обязательно файл config.inc.php (phpMyAdmin тоже)
$cfg[‘Servers’][$i][‘auth_type’] = ‘http’;
Командуем для Apache запуск при старте системы
chkconfig —levels 235 httpd on
/etc/init.d/httpd start и запускаем его
После запуска Apache можно войти в phpMyAdmin по адресу https://kipalex.ru/phpMyAdmin (Доменная система и ДНС сервер bind у меня уже настроены!)
Создаем БД mail
И создаем пользователя admin и даем ему полные права на свежесозданную БД mail
Теперь надо создать таблицы в БД mail
CREATE TABLE domains (
domain varchar(50) NOT NULL,
PRIMARY KEY (domain) )
TYPE=MyISAM;
CREATE TABLE forwardings (
source varchar(80) NOT NULL,
destination TEXT NOT NULL,
PRIMARY KEY (source) )
TYPE=MyISAM;
CREATE TABLE users (
email varchar(80) NOT NULL,
password varchar(20) NOT NULL,
quota INT(10) DEFAULT ‘10485760’,
PRIMARY KEY (email)
) TYPE=MyISAM;
CREATE TABLE transport (
domain varchar(128) NOT NULL default »,
transport varchar(128) NOT NULL default »,
UNIQUE KEY domain (domain)
) TYPE=MyISAM;
Теперь надо нашему Postfix создать файлы конфигураций для работы с MySQL
1. mysql_virtual_domains_maps.cf
user = admin
password = password
hosts = localhost
dbname = mail
table = domain
select_field = domain
where_field = domain
additional_conditions = and backupmx = ‘0’ and active = ‘1’
2. mysql_virtual_mailbox_maps.cfuser = mail_admin
user = admin
password = password
hosts = localhost
dbname = mail
table = mailbox
select_field = CONCAT(domain,’/’,maildir)
where_field = username
additional_conditions = and active = ‘1’
3. mysql_virtual_alias_maps.cf
user = admin
password = password
hosts = localhost
dbname = mail
table = alias
select_field = goto
where_field = address
additional_conditions = and active = ‘1’
4. mysql_virtual_mailbox_limit_maps.cf
user = admin
password = password
hosts = localhost
dbname = mail
table = mailbox
select_field = quota
where_field = username
additional_conditions = and active = ‘1’
Дадим права.
chmod o= /etc/postfix/mysql-virtual_*.cf
chgrp postfix /etc/postfix/mysql-virtual_*.cf
Создадим группу и пользователя.
groupadd -g 5000 vmail
useradd -g vmail -u 5000 vmail -d /home/vmail -m
Ну а теперь самое главное согласно куче мануалов создадим главный файл конфигурации Postfix main.cf
myhostname = ns1.kipalex.ru
mydestination = ns1.kipalex.ru, localhost
mynetworks = 127.0.0.0/8
virtual_mailbox_domains = mysql:$config_directory/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = mysql:$config_directory/mysql_virtual_mailbox_maps.cf
virtual_alias_maps = mysql:$config_directory/mysql_virtual_alias_maps.cf
virtual_mailbox_base = /home/vmail
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
smtpd_sasl_auth_enable = yes
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_use_tls = yes
smtpd_tls_cert_file = /etc/postfix/smtpd.cert #наши сертификаты, создадим позже
smtpd_tls_key_file = /etc/postfix/smtpd.key #наши сертификаты, создадим позже
virtual_create_maildirsize = yes
virtual_maildir_extended = yes
virtual_mailbox_limit_override = yes
virtual_maildir_limit_message = «The user you are trying to reach is over quota.»
virtual_overquota_bounce = yes
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_mailbox_base $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
inet_interfaces = all #интерфейсы все
content_filter = amavis:[127.0.0.1]:10024 #тут указываем где висит наш фильтр
receive_override_options = no_address_mappings
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
sample_directory = /usr/share/doc/postfix-2.3.3/samples
sendmail_path = /usr/sbin/sendmail
html_directory = no
setgid_group = postdrop
command_directory = /usr/sbin
manpage_directory = /usr/share/man
daemon_directory = /usr/libexec/postfix
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
queue_directory = /var/spool/postfix
mail_owner = postfix
unknown_local_recipient_reject_code = 450
Генерируем сертификаты.
cd /etc/postfix
openssl req -new -outform PEM -out smtpd.cert -newkey rsa:2048 -nodes -keyout smtpd.key -keyform PEM -days 365 -x509
Выставим права.
chmod o= /etc/postfix/smtpd.key
Теперь надо указать Postfix как проходить будет авторизация. Для этого правим конфиг
/usr/lib/sasl2/smtpd.conf
pwcheck_method: auxprop
auxprop_plugin: sql
mech_list: PLAIN LOGIN
sql_engine: mysql
sql_user: admin
sql_passwd: password
sql_hostnames: localhost
sql_database: mail
sql_select: SELECT password FROM mailbox WHERE username = ‘%u@%r’
password_format: plaintext
log_level: 3
Почти все с Postfix разобрались.
Нам необходимо удостовериться что стоит все нам нужно авторизации через cyrus
rpm -qa | grep cyrus*
cyrus-sasl-plain-2.1.22-4
cyrus-sasl-sql-2.1.22-4
cyrus-sasl-devel-2.1.22-4
cyrus-sasl-2.1.22-4
cyrus-sasl-lib-2.1.22-4
Все эти пакеты должны присутствовать в системе!
Командуем.
chkconfig —levels 235 postfix on
/etc/init.d/postfix start
Далее настраиваем Dovecot
Всего 2 конфига.
1. dovecot.conf
base_dir = /var/run/dovecot/
protocols = imap imaps
protocol imap {
listen = *:143
ssl_listen = *:993
}
shutdown_clients = yes
log_path = /var/log/dovecot.log
info_log_path = /var/log/dovecot-info.log
log_timestamp = «%b %d %H:%M:%S »
syslog_facility = mail
auth_verbose=yes
auth_debug=yes
auth_debug_passwords=yes
mail_debug=yes
verbose_ssl=yes
mail_location = maildir:/home/vmail/%d/%n@%d
mbox_read_locks = fcntl
log_timestamp = «%Y-%m-%d %H:%M:%S »
#log_path = /var/log/maillog
mail_access_groups = mail
first_valid_uid = 5000
last_valid_uid = 5000
maildir_copy_with_hardlinks = yes
auth default {
mechanisms = plain login cram-md5
userdb sql {
args = /etc/dovecot-mysql.conf
}
passdb sql {
args = /etc/dovecot-mysql.conf
}
}
protocol lda {
mail_plugin_dir = /usr/lib/dovecot/lda
mail_plugins = cmusieve
}
plugin {
sieve = /etc/sieve.conf
sieve = /home/vmail/domain.ru/user@domain.ru/.dovecot.sieve
}
С sieve плагином сейчас идет активная переписка с разработчиками сервера, он почему напрочь отказывается работать.
Ничего страшного не будет если вы его укажите.
2. dovecot-mysql.conf
driver = mysql
default_pass_scheme = plain
connect = host=localhost dbname=mail user=admin password=password
user_query = SELECT concat(‘/home/vmail/’, maildir) as home, concat(‘maildir:/home/vmail/’, maildir) as mail, 5000 AS uid, 12 AS gid, concat(‘maildir:storage=’, quota) AS quota FROM mailbox WHERE username = ‘%u’ AND active = ‘1’
user_query = SELECT ‘/home/vmail/%d/%n@%d’ as home, ‘maildir:/home/vmail/%d/%n@%d’ as mail, 5000 AS uid, 12 AS gid, concat(‘dirsize:storage=’, quota) AS quota FROM mailbox WHERE username = ‘%u’ AND active = ‘1’
password_query = SELECT username as user, password, concat(‘/home/vmail/’, maildir) as userdb_home, concat(‘maildir:/home/vmail/’, maildir) as userdb_mail, 5000 as userdb_uid, 12 as userdb_gid FROM mailbox WHERE username = ‘%u’ AND active = ‘1’
password_query = SELECT username as user, password, ‘/home/vmail/%d/%n@%d’ as userdb_home, ‘maildir:/home/vmail/%d/%n@%d’ as userdb_mail, 5000 as userdb_uid, 12 as userdb_gid FROM mailbox WHERE username = ‘%u’ AND active = ‘1’
Командуем Dovecot.
chkconfig —levels 235 dovecot on
/etc/init.d/dovecot start
Ставим Amavisd-new, SpamAssassin And ClamAV
yum install amavisd-new spamassassin clamav clamd unzip bzip2 unrar
Правим файл /etc/amavisd.conf
Должно получиться следующее.
$pax=’pax’;
use strict;
# a minimalistic configuration file for amavisd-new with all necessary settings
#
# see amavisd.conf-default for a list of all variables with their defaults;
# see amavisd.conf-sample for a traditional-style commented file;
# for more details see documentation in INSTALL, README_FILES/*
# and at http://www.ijs.si/software/amavisd/amavisd-new-docs.html
# COMMONLY ADJUSTED SETTINGS:
# @bypass_virus_checks_maps = (1); # controls running of anti-virus code
# @bypass_spam_checks_maps = (1); # controls running of anti-spam code
# $bypass_decode_parts = 1; # controls running of decoders&dearchivers
$max_servers = 2; # num of pre-forked children (2..30 is common), -m
$daemon_user = «amavis»; # (no default; customary: vscan or amavis), -u
$daemon_group = «amavis»; # (no default; customary: vscan or amavis), -g
#$mydomain = ‘example.com’; # a convenient default for other settings
$mydomain = ‘localhost’;
# $MYHOME = ‘/var/amavis’; # a convenient default for other settings, -H
$TEMPBASE = «$MYHOME/tmp»; # working directory, needs to exist, -T
$ENV{TMPDIR} = $TEMPBASE; # environment variable TMPDIR, used by SA, etc.
$QUARANTINEDIR = «/var/virusmails»;
# $quarantine_subdir_levels = 1; # add level of subdirs to disperse quarantine
# $daemon_chroot_dir = $MYHOME; # chroot directory or undef, -R
$db_home = «$MYHOME/db»; # dir for bdb nanny/cache/snmp databases, -D
# $helpers_home = «$MYHOME/var»; # working directory for SpamAssassin, -S
# $lock_file = «$MYHOME/var/amavisd.lock»; # -L
# $pid_file = «$MYHOME/var/amavisd.pid»; # -P
#NOTE: create directories $MYHOME/tmp, $MYHOME/var, $MYHOME/db manually
$log_level = 0; # verbosity 0..5, -d
$log_recip_templ = undef; # disable by-recipient level-0 log entries
$DO_SYSLOG = 1; # log via syslogd (preferred)
$syslog_facility = ‘mail’; # Syslog facility as a string
# e.g.: mail, daemon, user, local0, … local7
$syslog_priority = ‘debug’; # Syslog base (minimal) priority as a string,
# choose from: emerg, alert, crit, err, warning, notice, info, debug
$enable_db = 1; # enable use of BerkeleyDB/libdb (SNMP and nanny)
$enable_global_cache = 1; # enable use of libdb-based cache if $enable_db=1
$nanny_details_level = 2; # nanny verbosity: 1: traditional, 2: detailed
@local_domains_maps = ( [«.$mydomain»] ); # list of all local domains
@mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10
10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 );
$unix_socketname = «$MYHOME/amavisd.sock»; # amavisd-release or amavis-milter
# option(s) -p overrides $inet_socket_port and $unix_socketname
$inet_socket_port = 10024; # listen on this local TCP port(s)
# $inet_socket_port = [10024,10026]; # listen on multiple TCP ports
$policy_bank{‘MYNETS’} = { # mail originating from @mynetworks
originating => 1, # is true in MYNETS by default, but let’s make it explicit
os_fingerprint_method => undef, # don’t query p0f for internal clients
};
# it is up to MTA to re-route mail from authenticated roaming users or
# from internal hosts to a dedicated TCP port (such as 10026) for filtering
$interface_policy{‘10026’} = ‘ORIGINATING’;
$policy_bank{‘ORIGINATING’} = { # mail supposedly originating from our users
originating => 1, # declare that mail was submitted by our smtp client
allow_disclaimers => 1, # enables disclaimer insertion if available
# notify administrator of locally originating malware
virus_admin_maps => [«virusalert\@$mydomain»],
spam_admin_maps => [«virusalert\@$mydomain»],
warnbadhsender => 1,
# forward to a smtpd service providing DKIM signing service
forward_method => ‘smtp:[127.0.0.1]:10027’,
# force MTA conversion to 7-bit (e.g. before DKIM signing)
smtpd_discard_ehlo_keywords => [‘8BITMIME’],
bypass_banned_checks_maps => [1], # allow sending any file names and types
terminate_dsn_on_notify_success => 0, # don’t remove NOTIFY=SUCCESS option
};
$interface_policy{‘SOCK’} = ‘AM.PDP-SOCK’; # only applies with $unix_socketname
# Use with amavis-release over a socket or with Petr Rehor’s amavis-milter.c
# (with amavis-milter.c from this package or old amavis.c client use ‘AM.CL’):
$policy_bank{‘AM.PDP-SOCK’} = {
protocol => ‘AM.PDP’,
auth_required_release => 0, # do not require secret_id for amavisd-release
};
#$sa_tag_level_deflt = 2.0; # add spam info headers if at, or above that level
#$sa_tag2_level_deflt = 6.2; # add ‘spam detected’ headers at that level
#$sa_kill_level_deflt = 6.9; # triggers spam evasive actions (e.g. blocks mail)
#$sa_dsn_cutoff_level = 10; # spam level beyond which a DSN is not sent
$sa_tag_level_deflt = 2.0; # add spam info headers if at, or above that level
$sa_tag2_level_deflt = 4.0; # add ‘spam detected’ headers at that level
$sa_kill_level_deflt = $sa_tag2_level_deflt; # triggers spam evasive actions (e.g. blocks mail)
$sa_dsn_cutoff_level = 10; # spam level beyond which a DSN is not sent
# $sa_quarantine_cutoff_level = 25; # spam level beyond which quarantine is off
$penpals_bonus_score = 8; # (no effect without a @storage_sql_dsn database)
$penpals_threshold_high = $sa_kill_level_deflt; # don’t waste time on hi spam
$sa_mail_body_size_limit = 400*1024; # don’t waste time on SA if mail is larger
$sa_local_tests_only = 0; # only tests which do not require internet access?
# @lookup_sql_dsn =
# ( [‘DBI:mysql:database=mail;host=127.0.0.1;port=3306’, ‘user1’, ‘passwd1’],
# [‘DBI:mysql:database=mail;host=host2’, ‘username2’, ‘password2’],
# [«DBI:SQLite:dbname=$MYHOME/sql/mail_prefs.sqlite», », »] );
# @storage_sql_dsn = @lookup_sql_dsn; # none, same, or separate database
@lookup_sql_dsn =
( [‘DBI:mysql:database=mail;host=127.0.0.1;port=3306’, ‘mail_admin’, ‘mail_admin_password’] );
$sql_select_policy = ‘SELECT «Y» as local FROM domain WHERE CONCAT(«@»,domain) IN (%k)’;
$sql_select_white_black_list = undef; # undef disables SQL white/blacklisting
# $recipient_delimiter = ‘+’; # (default is ‘+’)
$recipient_delimiter = undef;
$replace_existing_extension = 1; # (default is false)
$localpart_is_case_sensitive = 0; # (default is false)
# $timestamp_fmt_mysql = 1; # if using MySQL *and* msgs.time_iso is TIMESTAMP;
# defaults to 0, which is good for non-MySQL or if msgs.time_iso is CHAR(16)
$virus_admin = «virusalert\@$mydomain»; # notifications recip.
$mailfrom_notify_admin = «virusalert\@$mydomain»; # notifications sender
$mailfrom_notify_recip = «virusalert\@$mydomain»; # notifications sender
$mailfrom_notify_spamadmin = «spam.police\@$mydomain»; # notifications sender
$mailfrom_to_quarantine = »; # null return path; uses original sender if undef
@addr_extension_virus_maps = (‘virus’);
@addr_extension_banned_maps = (‘banned’);
@addr_extension_spam_maps = (‘spam’);
@addr_extension_bad_header_maps = (‘badh’);
# $recipient_delimiter = ‘+’; # undef disables address extensions altogether
# when enabling addr extensions do also Postfix/main.cf: recipient_delimiter=+
$path = ‘/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bin’;
# $dspam = ‘dspam’;
$MAXLEVELS = 14;
$MAXFILES = 1500;
$MIN_EXPANSION_QUOTA = 100*1024; # bytes (default undef, not enforced)
$MAX_EXPANSION_QUOTA = 300*1024*1024; # bytes (default undef, not enforced)
$sa_spam_subject_tag = ‘***SPAM*** ‘;
$defang_virus = 1; # MIME-wrap passed infected mail
$defang_banned = 1; # MIME-wrap passed mail containing banned name
# for defanging bad headers only turn on certain minor contents categories:
$defang_by_ccat{+CC_BADH.»,3″} = 1; # NUL or CR character in header
$defang_by_ccat{+CC_BADH.»,5″} = 1; # header line longer than 998 characters
$defang_by_ccat{+CC_BADH.»,6″} = 1; # header field syntax error
# OTHER MORE COMMON SETTINGS (defaults may suffice):
# $myhostname = ‘host.example.com’; # must be a fully-qualified domain name!
# $notify_method = ‘smtp:[127.0.0.1]:10025’;
# $forward_method = ‘smtp:[127.0.0.1]:10025’; # set to undef with milter!
# $final_virus_destiny = D_DISCARD;
# $final_banned_destiny = D_BOUNCE;
# $final_spam_destiny = D_BOUNCE;
# $final_bad_header_destiny = D_PASS;
# $bad_header_quarantine_method = undef;
$final_virus_destiny = D_REJECT;
$final_banned_destiny = D_REJECT;
$final_spam_destiny = D_PASS;
$final_bad_header_destiny = D_PASS;
# $os_fingerprint_method = ‘p0f:*:2345′; # to query p0f-analyzer.pl
## hierarchy by which a final setting is chosen:
## policy bank (based on port or IP address) -> *_by_ccat
## *_by_ccat (based on mail contents) -> *_maps
## *_maps (based on recipient address) -> final configuration value
# SOME OTHER VARIABLES WORTH CONSIDERING (see amavisd.conf-default for all)
# $warnbadhsender,
# $warnvirusrecip, $warnbannedrecip, $warnbadhrecip, (or @warn*recip_maps)
#
# @bypass_virus_checks_maps, @bypass_spam_checks_maps,
# @bypass_banned_checks_maps, @bypass_header_checks_maps,
#
# @virus_lovers_maps, @spam_lovers_maps,
# @banned_files_lovers_maps, @bad_header_lovers_maps,
#
# @blacklist_sender_maps, @score_sender_maps,
#
# $clean_quarantine_method, $virus_quarantine_to, $banned_quarantine_to,
# $bad_header_quarantine_to, $spam_quarantine_to,
#
# $defang_bad_header, $defang_undecipherable, $defang_spam
# REMAINING IMPORTANT VARIABLES ARE LISTED HERE BECAUSE OF LONGER ASSIGNMENTS
@keep_decoded_original_maps = (new_RE(
# qr’^MAIL$’, # retain full original message for virus checking (can be slow)
qr’^MAIL-UNDECIPHERABLE$’, # recheck full mail if it contains undecipherables
qr’^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)’i,
# qr’^Zip archive data’, # don’t trust Archive::Zip
));
# for $banned_namepath_re (a new-style of banned table) see amavisd.conf-sample
$banned_filename_re = new_RE(
### BLOCKED ANYWHERE
# qr’^UNDECIPHERABLE$’, # is or contains any undecipherable components
qr’^\.(exe-ms|dll)$’, # banned file(1) types, rudimentary
# qr’^\.(exe|lha|tnef|cab|dll)$’, # banned file(1) types
### BLOCK THE FOLLOWING, EXCEPT WITHIN UNIX ARCHIVES:
# [ qr’^\.(gz|bz2)$’ => 0 ], # allow any in gzip or bzip2
# [ qr’^\.(rpm|cpio|tar)$’ => 0 ], # allow any in Unix-type archives
qr’.\.(pif|scr)$’i, # banned extensions — rudimentary
# qr’^\.zip$’, # block zip type
### BLOCK THE FOLLOWING, EXCEPT WITHIN ARCHIVES:
# [ qr’^\.(zip|rar|arc|arj|zoo)$’=> 0 ], # allow any within these archives
qr’^application/x-msdownload$’i, # block these MIME types
qr’^application/x-msdos-program$’i,
qr’^application/hta$’i,
# qr’^message/partial$’i, # rfc2046 MIME type
# qr’^message/external-body$’i, # rfc2046 MIME type
# qr’^(application/x-msmetafile|image/x-wmf)$’i, # Windows Metafile MIME type
# qr’^\.wmf$’, # Windows Metafile file(1) type
# block certain double extensions in filenames
qr’\.[^./]*[A-Za-z][^./]*\.\s*(exe|vbs|pif|scr|bat|cmd|com|cpl|dll)[.\s]*$’i,
# qr’\{[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}\}?’i, # Class ID CLSID, strict
# qr’\{[0-9a-z]{4,}(-[0-9a-z]{4,}){0,7}\}?’i, # Class ID extension CLSID, loose
qr’.\.(exe|vbs|pif|scr|cpl)$’i, # banned extension — basic
# qr’.\.(exe|vbs|pif|scr|cpl|bat|cmd|com)$’i, # banned extension — basic+cmd
# qr’.\.(ade|adp|app|bas|bat|chm|cmd|com|cpl|crt|emf|exe|fxp|grp|hlp|hta|
# inf|ins|isp|js|jse|lnk|mda|mdb|mde|mdw|mdt|mdz|msc|msi|msp|mst|
# ops|pcd|pif|prg|reg|scr|sct|shb|shs|vb|vbe|vbs|
# wmf|wsc|wsf|wsh)$’ix, # banned ext — long
# qr’.\.(ani|cur|ico)$’i, # banned cursors and icons filename
# qr’^\.ani$’, # banned animated cursor file(1) type
# qr’.\.(mim|b64|bhx|hqx|xxe|uu|uue)$’i, # banned extension — WinZip vulnerab.
);
# See http://support.microsoft.com/default.aspx?scid=kb;EN-US;q262631
# and http://www.cknow.com/vtutor/vtextensions.htm
# ENVELOPE SENDER SOFT-WHITELISTING / SOFT-BLACKLISTING
@score_sender_maps = ({ # a by-recipient hash lookup table,
# results from all matching recipient tables are summed
# ## per-recipient personal tables (NOTE: positive: black, negative: white)
# ‘user1@example.com’ => [{‘bla-mobile.press@example.com’ => 10.0}],
# ‘user3@example.com’ => [{‘.ebay.com’ => -3.0}],
# ‘user4@example.com’ => [{‘cleargreen@cleargreen.com’ => -7.0,
# ‘.cleargreen.com’ => -5.0}],
## site-wide opinions about senders (the ‘.’ matches any recipient)
‘.’ => [ # the _first_ matching sender determines the score boost
new_RE( # regexp-type lookup table, just happens to be all soft-blacklist
[qr’^(bulkmail|offers|cheapbenefits|earnmoney|foryou)@’i => 5.0],
[qr’^(greatcasino|investments|lose_weight_today|market\.alert)@’i=> 5.0],
[qr’^(money2you|MyGreenCard|new\.tld\.registry|opt-out|opt-in)@’i=> 5.0],
[qr’^(optin|saveonlsmoking2002k|specialoffer|specialoffers)@’i => 5.0],
[qr’^(stockalert|stopsnoring|wantsome|workathome|yesitsfree)@’i => 5.0],
[qr’^(your_friend|greatoffers)@’i => 5.0],
[qr’^(inkjetplanet|marketopt|MakeMoney)\d*@’i => 5.0],
),
# read_hash(«/var/amavis/sender_scores_sitewide»),
{ # a hash-type lookup table (associative array)
‘nobody@cert.org’ => -3.0,
‘cert-advisory@us-cert.gov’ => -3.0,
‘owner-alert@iss.net’ => -3.0,
‘slashdot@slashdot.org’ => -3.0,
‘securityfocus.com’ => -3.0,
‘ntbugtraq@listserv.ntbugtraq.com’ => -3.0,
‘security-alerts@linuxsecurity.com’ => -3.0,
‘mailman-announce-admin@python.org’ => -3.0,
‘amavis-user-admin@lists.sourceforge.net’=> -3.0,
‘amavis-user-bounces@lists.sourceforge.net’ => -3.0,
‘spamassassin.apache.org’ => -3.0,
‘notification-return@lists.sophos.com’ => -3.0,
‘owner-postfix-users@postfix.org’ => -3.0,
‘owner-postfix-announce@postfix.org’ => -3.0,
‘owner-sendmail-announce@lists.sendmail.org’ => -3.0,
‘sendmail-announce-request@lists.sendmail.org’ => -3.0,
‘donotreply@sendmail.org’ => -3.0,
‘ca+envelope@sendmail.org’ => -3.0,
‘noreply@freshmeat.net’ => -3.0,
‘owner-technews@postel.acm.org’ => -3.0,
‘ietf-123-owner@loki.ietf.org’ => -3.0,
‘cvs-commits-list-admin@gnome.org’ => -3.0,
‘rt-users-admin@lists.fsck.com’ => -3.0,
‘clp-request@comp.nus.edu.sg’ => -3.0,
‘surveys-errors@lists.nua.ie’ => -3.0,
’emailnews@genomeweb.com’ => -5.0,
‘yahoo-dev-null@yahoo-inc.com’ => -3.0,
‘returns.groups.yahoo.com’ => -3.0,
‘clusternews@linuxnetworx.com’ => -3.0,
lc(‘lvs-users-admin@LinuxVirtualServer.org’) => -3.0,
lc(‘owner-textbreakingnews@CNNIMAIL12.CNN.COM’) => -5.0,
# soft-blacklisting (positive score)
‘sender@example.net’ => 3.0,
‘.example.net’ => 1.0,
},
], # end of site-wide tables
});
@decoders = (
[‘mail’, \&do_mime_decode],
[‘asc’, \&do_ascii],
[‘uue’, \&do_ascii],
[‘hqx’, \&do_ascii],
[‘ync’, \&do_ascii],
[‘F’, \&do_uncompress, [‘unfreeze’,’freeze -d’,’melt’,’fcat’] ],
[‘Z’, \&do_uncompress, [‘uncompress’,’gzip -d’,’zcat’] ],
[‘gz’, \&do_uncompress, ‘gzip -d’],
[‘gz’, \&do_gunzip],
[‘bz2’, \&do_uncompress, ‘bzip2 -d’],
[‘lzo’, \&do_uncompress, ‘lzop -d’],
[‘rpm’, \&do_uncompress, [‘rpm2cpio.pl’,’rpm2cpio’] ],
[‘cpio’, \&do_pax_cpio, [‘pax’,’gcpio’,’cpio’] ],
[‘tar’, \&do_pax_cpio, [‘pax’,’gcpio’,’cpio’] ],
[‘deb’, \&do_ar, ‘ar’],
# [‘a’, \&do_ar, ‘ar’], # unpacking .a seems an overkill
[‘zip’, \&do_unzip],
[‘7z’, \&do_7zip, [‘7zr’,’7za’,’7z’] ],
[‘rar’, \&do_unrar, [‘rar’,’unrar’] ],
[‘arj’, \&do_unarj, [‘arj’,’unarj’] ],
[‘arc’, \&do_arc, [‘nomarch’,’arc’] ],
[‘zoo’, \&do_zoo, [‘zoo’,’unzoo’] ],
[‘lha’, \&do_lha, ‘lha’],
# [‘doc’, \&do_ole, ‘ripole’],
[‘cab’, \&do_cabextract, ‘cabextract’],
[‘tnef’, \&do_tnef_ext, ‘tnef’],
[‘tnef’, \&do_tnef],
# [‘sit’, \&do_unstuff, ‘unstuff’], # broken/unsafe decoder
[‘exe’, \&do_executable, [‘rar’,’unrar’], ‘lha’, [‘arj’,’unarj’] ],
);
@av_scanners = (
# ### http://www.clanfield.info/sophie/ (http://www.vanja.com/tools/sophie/)
# [‘Sophie’,
# \&ask_daemon, [«{}/\n», ‘/var/run/sophie’],
# qr/(?x)^ 0+ ( : | [\000\r\n]* $)/, qr/(?x)^ 1 ( : | [\000\r\n]* $)/,
# qr/(?x)^ [-+]? \d+ : (.*?) [\000\r\n]* $/ ],
# ### http://www.csupomona.edu/~henson/www/projects/SAVI-Perl/
# [‘Sophos SAVI’, \&sophos_savi ],
# ### http://www.clamav.net/
# [‘ClamAV-clamd’,
# \&ask_daemon, [«CONTSCAN {}\n», «/var/run/clamav/clamd»],
# qr/\bOK$/, qr/\bFOUND$/,
# qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# # NOTE: run clamd under the same user as amavisd, or run it under its own
# # uid such as clamav, add user clamav to the amavis group, and then add
# # AllowSupplementaryGroups to clamd.conf;
# # NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in
# # this entry; when running chrooted one may prefer socket «$MYHOME/clamd».
### http://www.clamav.net/
[‘ClamAV-clamd’,
\&ask_daemon, [«CONTSCAN {}\n», «/var/run/clamav/clamd.socket»],
qr/\bOK$/, qr/\bFOUND$/,
qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# NOTE: run clamd under the same user as amavisd, or run it under its own
# uid such as clamav, add user clamav to the amavis group, and then add
# AllowSupplementaryGroups to clamd.conf;
# NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in
# this entry; when running chrooted one may prefer socket «$MYHOME/clamd».
# ### http://www.clamav.net/
# [‘ClamAV-clamd’,
# \&ask_daemon, [«CONTSCAN {}\n», «/var/run/clamav/clamd»],
# qr/\bOK$/, qr/\bFOUND$/,
# qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
# # NOTE: run clamd under the same user as amavisd, or run it under its own
# # uid such as clamav, add user clamav to the amavis group, and then add
# # AllowSupplementaryGroups to clamd.conf;
# # NOTE: match socket name (LocalSocket) in clamav.conf to the socket name in
# # this entry; when running chrooted one may prefer socket «$MYHOME/clamd».
# ### http://www.clamav.net/ and CPAN (memory-hungry! clamd is preferred)
# # note that Mail::ClamAV requires perl to be build with threading!
# [‘Mail::ClamAV’, \&ask_clamav, «*», [0], [1], qr/^INFECTED: (.+)/],
# ### http://www.openantivirus.org/
# [‘OpenAntiVirus ScannerDaemon (OAV)’,
# \&ask_daemon, [«SCAN {}\n», ‘127.0.0.1:8127’],
# qr/^OK/, qr/^FOUND: /, qr/^FOUND: (.+)/ ],
# ### http://www.vanja.com/tools/trophie/
# [‘Trophie’,
# \&ask_daemon, [«{}/\n», ‘/var/run/trophie’],
# qr/(?x)^ 0+ ( : | [\000\r\n]* $)/, qr/(?x)^ 1 ( : | [\000\r\n]* $)/,
# qr/(?x)^ [-+]? \d+ : (.*?) [\000\r\n]* $/ ],
# ### http://www.grisoft.com/
# [‘AVG Anti-Virus’,
# \&ask_daemon, [«SCAN {}\n», ‘127.0.0.1:55555’],
# qr/^200/, qr/^403/, qr/^403 .*?: ([^\r\n]+)/ ],
# ### http://www.f-prot.com/
# [‘F-Prot fpscand’, # F-PROT Antivirus for BSD/Linux/Solaris, version 6
# \&ask_daemon,
# [«SCAN FILE {}/*\n», ‘127.0.0.1:10200’],
# qr/^(0|8|64) /,
# qr/^([1235679]|1[01345]) |<[^>:]*(?i)(infected|suspicious|unwanted)/,
# qr/(?i)<[^>:]*(?:infected|suspicious|unwanted)[^>:]*: ([^>]*)>/ ],
# ### http://www.f-prot.com/
# [‘F-Prot f-protd’, # old version
# \&ask_daemon,
# [«GET {}/*?-dumb%20-archive%20-packed HTTP/1.0\r\n\r\n»,
# [‘127.0.0.1:10200’, ‘127.0.0.1:10201’, ‘127.0.0.1:10202’,
# ‘127.0.0.1:10203’, ‘127.0.0.1:10204’] ],
# qr/(?i)<summary[^>]*>clean<\/summary>/,
# qr/(?i)<summary[^>]*>infected<\/summary>/,
# qr/(?i)<name>(.+)<\/name>/ ],
# ### http://www.sald.com/, http://www.dials.ru/english/, http://www.drweb.ru/
# [‘DrWebD’, \&ask_daemon, # DrWebD 4.31 or later
# [pack(‘N’,1). # DRWEBD_SCAN_CMD
# pack(‘N’,0x00280001). # DONT_CHANGEMAIL, IS_MAIL, RETURN_VIRUSES
# pack(‘N’, # path length
# length(«$TEMPBASE/amavis-yyyymmddTHHMMSS-xxxxx/parts/pxxx»)).
# ‘{}/*’. # path
# pack(‘N’,0). # content size
# pack(‘N’,0),
# ‘/var/drweb/run/drwebd.sock’,
# # ‘/var/amavis/var/run/drwebd.sock’, # suitable for chroot
# # ‘/usr/local/drweb/run/drwebd.sock’, # FreeBSD drweb ports default
# # ‘127.0.0.1:3000’, # or over an inet socket
# ],
# qr/\A\x00[\x10\x11][\x00\x10]\x00/s, # IS_CLEAN,EVAL_KEY; SKIPPED
# qr/\A\x00[\x00\x01][\x00\x10][\x20\x40\x80]/s, # KNOWN_V,UNKNOWN_V,V._MODIF
# qr/\A.{12}(?:infected with )?([^\x00]+)\x00/s,
# ],
# # NOTE: If using amavis-milter, change length to:
# # length(«$TEMPBASE/amavis-milter-xxxxxxxxxxxxxx/parts/pxxx»).
### http://www.kaspersky.com/ (kav4mailservers)
# [‘KasperskyLab AVP — aveclient’,
# [‘/usr/local/kav/bin/aveclient’,’/usr/local/share/kav/bin/aveclient’,
# ‘/opt/kav/5.5/kav4mailservers/bin/aveclient’,’aveclient’],
# ‘-p /var/run/aveserver -s {}/*’,
# [0,3,6,8], qr/\b(INFECTED|SUSPICION|SUSPICIOUS)\b/,
# qr/(?:INFECTED|WARNING|SUSPICION|SUSPICIOUS) (.+)/,
# ],
# NOTE: one may prefer [0],[2,3,4,5], depending on how suspicious,
# currupted or protected archives are to be handled
### http://www.kaspersky.com/
# [‘KasperskyLab AntiViral Toolkit Pro (AVP)’, [‘avp’],
# ‘-* -P -B -Y -O- {}’, [0,3,6,8], [2,4], # any use for -A -K ?
# qr/infected: (.+)/,
# sub {chdir(‘/opt/AVP’) or die «Can’t chdir to AVP: $!»},
# sub {chdir($TEMPBASE) or die «Can’t chdir back to $TEMPBASE $!»},
# ],
### The kavdaemon and AVPDaemonClient have been removed from Kasperky
### products and replaced by aveserver and aveclient
# [‘KasperskyLab AVPDaemonClient’,
# [ ‘/opt/AVP/kavdaemon’, ‘kavdaemon’,
# ‘/opt/AVP/AvpDaemonClient’, ‘AvpDaemonClient’,
# ‘/opt/AVP/AvpTeamDream’, ‘AvpTeamDream’,
# ‘/opt/AVP/avpdc’, ‘avpdc’ ],
# «-f=$TEMPBASE {}», [0,8], [3,4,5,6], qr/infected: ([^\r\n]+)/ ],
# change the startup-script in /etc/init.d/kavd to:
# DPARMS=»-* -Y -dl -f=/var/amavis /var/amavis»
# (or perhaps: DPARMS=»-I0 -Y -* /var/amavis» )
# adjusting /var/amavis above to match your $TEMPBASE.
# The ‘-f=/var/amavis’ is needed if not running it as root, so it
# can find, read, and write its pid file, etc., see ‘man kavdaemon’.
# defUnix.prf: there must be an entry «*/var/amavis» (or whatever
# directory $TEMPBASE specifies) in the ‘Names=’ section.
# cd /opt/AVP/DaemonClients; configure; cd Sample; make
# cp AvpDaemonClient /opt/AVP/
# su — vscan -c «${PREFIX}/kavdaemon ${DPARMS}»
### http://www.centralcommand.com/
# [‘CentralCommand Vexira (new) vascan’,
# [‘vascan’,’/usr/lib/Vexira/vascan’],
# «-a s —timeout=60 —temp=$TEMPBASE -y $QUARANTINEDIR «.
# «—log=/var/log/vascan.log {}»,
# [0,3], [1,2,5],
# qr/(?x)^\s* (?:virus|iworm|macro|mutant|sequence|trojan)\ found:\ ( [^\]\s’]+ )\ \.\.\.\ / ],
# Adjust the path of the binary and the virus database as needed.
# ‘vascan’ does not allow to have the temp directory to be the same as
# the quarantine directory, and the quarantine option can not be disabled.
# If $QUARANTINEDIR is not used, then another directory must be specified
# to appease ‘vascan’. Move status 3 to the second list if password
# protected files are to be considered infected.
### http://www.avira.com/
### Avira AntiVir (formerly H+BEDV) or (old) CentralCommand Vexira Antivirus
# [‘Avira AntiVir’, [‘antivir’,’vexira’],
# ‘—allfiles -noboot -nombr -rs -s -z {}’, [0], qr/ALERT:|VIRUS:/,
# qr/(?x)^\s* (?: ALERT: \s* (?: \[ | [^’]* ‘ ) |
# (?i) VIRUS:\ .*?\ virus\ ‘?) ( [^\]\s’]+ )/ ],
# NOTE: if you only have a demo version, remove -z and add 214, as in:
# ‘—allfiles -noboot -nombr -rs -s {}’, [0,214], qr/ALERT:|VIRUS:/,
### http://www.commandsoftware.com/
# [‘Command AntiVirus for Linux’, ‘csav’,
# ‘-all -archive -packed {}’, [50], [51,52,53],
# qr/Infection: (.+)/ ],
### http://www.symantec.com/
# [‘Symantec CarrierScan via Symantec CommandLineScanner’,
# ‘cscmdline’, ‘-a scan -i 1 -v -s 127.0.0.1:7777 {}’,
# qr/^Files Infected:\s+0$/, qr/^Infected\b/,
# qr/^(?:Info|Virus Name):\s+(.+)/ ],
### http://www.symantec.com/
# [‘Symantec AntiVirus Scan Engine’,
# ‘savsecls’, ‘-server 127.0.0.1:7777 -mode scanrepair -details -verbose {}’,
# [0], qr/^Infected\b/,
# qr/^(?:Info|Virus Name):\s+(.+)/ ],
# NOTE: check options and patterns to see which entry better applies
# ### http://www.f-secure.com/products/anti-virus/ version 4.65
# [‘F-Secure Antivirus for Linux servers’,
# [‘/opt/f-secure/fsav/bin/fsav’, ‘fsav’],
# ‘—delete=no —disinf=no —rename=no —archive=yes —auto=yes ‘.
# ‘—dumb=yes —list=no —mime=yes {}’, [0], [3,6,8],
# qr/(?:infection|Infected|Suspected): (.+)/ ],
### http://www.f-secure.com/products/anti-virus/ version 5.52
# [‘F-Secure Antivirus for Linux servers’,
# [‘/opt/f-secure/fsav/bin/fsav’, ‘fsav’],
# ‘—virus-action1=report —archive=yes —auto=yes ‘.
# ‘—dumb=yes —list=no —mime=yes {}’, [0], [3,4,6,8],
# qr/(?:infection|Infected|Suspected|Riskware): (.+)/ ],
# NOTE: internal archive handling may be switched off by ‘—archive=no’
# to prevent fsav from exiting with status 9 on broken archives
# ### http://www.avast.com/
# [‘avast! Antivirus daemon’,
# \&ask_daemon, # greets with 220, terminate with QUIT
# [«SCAN {}\015\012QUIT\015\012″, ‘/var/run/avast4/mailscanner.sock’],
# qr/\t\[\+\]/, qr/\t\[L\]\t/, qr/\t\[L\]\t([^[ \t\015\012]+)/ ],
# ### http://www.avast.com/
# [‘avast! Antivirus — Client/Server Version’, ‘avastlite’,
# ‘-a /var/run/avast4/mailscanner.sock -n {}’, [0], [1],
# qr/\t\[L\]\t([^[ \t\015\012]+)/ ],
# [‘CAI InoculateIT’, ‘inocucmd’, # retired product
# ‘-sec -nex {}’, [0], [100],
# qr/was infected by virus (.+)/ ],
# see: http://www.flatmtn.com/computer/Linux-Antivirus_CAI.html
### http://www3.ca.com/Solutions/Product.asp?ID=156 (ex InoculateIT)
# [‘CAI eTrust Antivirus’, ‘etrust-wrapper’,
# ‘-arc -nex -spm h {}’, [0], [101],
# qr/is infected by virus: (.+)/ ],
# NOTE: requires suid wrapper around inocmd32; consider flag: -mod reviewer
# see http://marc.theaimsgroup.com/?l=amavis-user&m=109229779912783
### http://mks.com.pl/english.html
# [‘MkS_Vir for Linux (beta)’, [‘mks32′,’mks’],
# ‘-s {}/*’, [0], [1,2],
# qr/—[ \t]*(.+)/ ],
### http://mks.com.pl/english.html
# [‘MkS_Vir daemon’, ‘mksscan’,
# ‘-s -q {}’, [0], [1..7],
# qr/^… (\S+)/ ],
# ### http://www.nod32.com/, version v2.52 and above
# [‘ESET NOD32 for Linux Mail servers’,
# [‘/opt/eset/nod32/bin/nod32cli’, ‘nod32cli’],
# ‘—subdir —files -z —sfx —rtp —adware —unsafe —pattern —heur ‘.
# ‘-w -a —action-on-infected=accept —action-on-uncleanable=accept ‘.
# ‘—action-on-notscanned=accept {}’,
# [0,3], [1,2], qr/virus=»([^»]+)»/ ],
### http://www.eset.com/, version v2.7
# [‘ESET NOD32 Linux Mail Server — command line interface’,
# [‘/usr/bin/nod32cli’, ‘/opt/eset/nod32/bin/nod32cli’, ‘nod32cli’],
# ‘—subdir {}’, [0,3], [1,2], qr/virus=»([^»]+)»/ ],
## http://www.nod32.com/, NOD32LFS version 2.5 and above
# [‘ESET NOD32 for Linux File servers’,
# [‘/opt/eset/nod32/sbin/nod32′,’nod32’],
# ‘—files -z —mail —sfx —rtp —adware —unsafe —pattern —heur ‘.
# ‘-w -a —action=1 -b {}’,
# [0], [1,10], qr/^object=.*, virus=»(.*?)»,/ ],
# Experimental, based on posting from Rado Dibarbora (Dibo) on 2002-05-31
# [‘ESET Software NOD32 Client/Server (NOD32SS)’,
# \&ask_daemon2, # greets with 200, persistent, terminate with QUIT
# [«SCAN {}/*\r\n», ‘127.0.0.1:8448’ ],
# qr/^200 File OK/, qr/^201 /, qr/^201 (.+)/ ],
### http://www.norman.com/products_nvc.shtml
# [‘Norman Virus Control v5 / Linux’, ‘nvcc’,
# ‘-c -l:0 -s -u -temp:$TEMPBASE {}’, [0,10,11], [1,2,14],
# qr/(?i).* virus in .* -> \'(.+)\’/ ],
### http://www.pandasoftware.com/
# [‘Panda CommandLineSecure 9 for Linux’,
# [‘/opt/pavcl/usr/bin/pavcl’,’pavcl’],
# ‘-auto -aex -heu -cmp -nbr -nor -nos -eng -nob {}’,
# qr/Number of files infected[ .]*: 0+(?!\d)/,
# qr/Number of files infected[ .]*: 0*[1-9]/,
# qr/Found virus :\s*(\S+)/ ],
# NOTE: for efficiency, start the Panda in resident mode with ‘pavcl -tsr’
# before starting amavisd — the bases are then loaded only once at startup.
# To reload bases in a signature update script:
# /opt/pavcl/usr/bin/pavcl -tsr -ulr; /opt/pavcl/usr/bin/pavcl -tsr
# Please review other options of pavcl, for example:
# -nomalw, -nojoke, -nodial, -nohackt, -nospyw, -nocookies
# ### http://www.pandasoftware.com/
# [‘Panda Antivirus for Linux’, [‘pavcl’],
# ‘-TSR -aut -aex -heu -cmp -nbr -nor -nso -eng {}’,
# [0], [0x10, 0x30, 0x50, 0x70, 0x90, 0xB0, 0xD0, 0xF0],
# qr/Found virus :\s*(\S+)/ ],
# GeCAD AV technology is acquired by Microsoft; RAV has been discontinued.
# Check your RAV license terms before fiddling with the following two lines!
# [‘GeCAD RAV AntiVirus 8’, ‘ravav’,
# ‘—all —archive —mail {}’, [1], [2,3,4,5], qr/Infected: (.+)/ ],
# # NOTE: the command line switches changed with scan engine 8.5 !
# # (btw, assigning stdin to /dev/null causes RAV to fail)
### http://www.nai.com/
# [‘NAI McAfee AntiVirus (uvscan)’, ‘uvscan’,
# ‘—secure -rv —mime —summary —noboot — {}’, [0], [13],
# qr/(?x) Found (?:
# \ the\ (.+)\ (?:virus|trojan) |
# \ (?:virus|trojan)\ or\ variant\ ([^ ]+) |
# :\ (.+)\ NOT\ a\ virus)/,
# sub {$ENV{LD_PRELOAD}=’/lib/libc.so.6′},
# sub {delete $ENV{LD_PRELOAD}},
# ],
# NOTE1: with RH9: force the dynamic linker to look at /lib/libc.so.6 before
# anything else by setting environment variable LD_PRELOAD=/lib/libc.so.6
# and then clear it when finished to avoid confusing anything else.
# NOTE2: to treat encrypted files as viruses replace the [13] with:
# qr/^\s{5,}(Found|is password-protected|.*(virus|trojan))/
### http://www.virusbuster.hu/en/
# [‘VirusBuster’, [‘vbuster’, ‘vbengcl’],
# «{} -ss -i ‘*’ -log=$MYHOME/vbuster.log», [0], [1],
# qr/: ‘(.*)’ — Virus/ ],
# VirusBuster Ltd. does not support the daemon version for the workstation
# engine (vbuster-eng-1.12-linux-i386-libc6.tgz) any longer. The names of
# binaries, some parameters AND return codes have changed (from 3 to 1).
# See also the new Vexira entry ‘vascan’ which is possibly related.
# ### http://www.virusbuster.hu/en/
# [‘VirusBuster (Client + Daemon)’, ‘vbengd’,
# ‘-f -log scandir {}’, [0], [3],
# qr/Virus found = (.*);/ ],
# # HINT: for an infected file it always returns 3,
# # although the man-page tells a different story
### http://www.cyber.com/
# [‘CyberSoft VFind’, ‘vfind’,
# ‘—vexit {}/*’, [0], [23], qr/##==>>>> VIRUS ID: CVDL (.+)/,
# sub {$ENV{VSTK_HOME}=’/usr/lib/vstk’},
# ],
### http://www.avast.com/
# [‘avast! Antivirus’, [‘/usr/bin/avastcmd’,’avastcmd’],
# ‘-a -i -n -t=A {}’, [0], [1], qr/\binfected by:\s+([^ \t\n\[\]]+)/ ],
### http://www.ikarus-software.com/
# [‘Ikarus AntiVirus for Linux’, ‘ikarus’,
# ‘{}’, [0], [40], qr/Signature (.+) found/ ],
### http://www.bitdefender.com/
# [‘BitDefender’, ‘bdscan’, # new version
# ‘—action=ignore —no-list {}’, qr/^Infected files *:0+(?!\d)/,
# qr/^(?:Infected files|Identified viruses|Suspect files) *:0*[1-9]/,
# qr/(?:suspected|infected): (.*)(?:\033|$)/ ],
### http://www.bitdefender.com/
# [‘BitDefender’, ‘bdc’, # old version
# ‘—arc —mail {}’, qr/^Infected files *:0+(?!\d)/,
# qr/^(?:Infected files|Identified viruses|Suspect files) *:0*[1-9]/,
# qr/(?:suspected|infected): (.*)(?:\033|$)/ ],
# consider also: —all —nowarn —alev=15 —flev=15. The —all argument may
# not apply to your version of bdc, check documentation and see ‘bdc —help’
### ArcaVir for Linux and Unix http://www.arcabit.pl/
# [‘ArcaVir for Linux’, [‘arcacmd’,’arcacmd.static’],
# ‘-v 1 -summary 0 -s {}’, [0], [1,2],
# qr/(?:VIR|WIR):[ \t]*(.+)/ ],
# [‘File::Scan’, sub {Amavis::AV::ask_av(sub{
# use File::Scan; my($fn)=@_;
# my($f)=File::Scan->new(max_txt_size=>0, max_bin_size=>0);
# my($vname) = $f->scan($fn);
# $f->error ? (2,»Error: «.$f->error)
# : ($vname ne ») ? (1,»$vname FOUND») : (0,»Clean»)}, @_) },
# [«{}/*»], [0], [1], qr/^(.*) FOUND$/ ],
# ### fully-fledged checker for JPEG marker segments of invalid length
# [‘check-jpeg’,
# sub { use JpegTester (); Amavis::AV::ask_av(\&JpegTester::test_jpeg, @_) },
# [«{}/*»], undef, [1], qr/^(bad jpeg: .*)$/ ],
# # NOTE: place file JpegTester.pm somewhere where Perl can find it,
# # for example in /usr/local/lib/perl5/site_perl
);
@av_scanners_backup = (
### http://www.clamav.net/ — backs up clamd or Mail::ClamAV
[‘ClamAV-clamscan’, ‘clamscan’,
«—stdout —no-summary -r —tempdir=$TEMPBASE {}»,
[0], qr/:.*\sFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
### http://www.f-prot.com/ — backs up F-Prot Daemon, V6
#[‘F-PROT Antivirus for UNIX’, [‘fpscan’],
# ‘—report —mount —adware {}’, # consider: —applications -s 4 -u 3 -z 10
# [0,8,64], [1,2,3, 4+1,4+2,4+3, 8+1,8+2,8+3, 12+1,12+2,12+3],
# qr/^\[Found\s+[^\]]*\]\s+<([^ \t(>]*)/ ],
### http://www.f-prot.com/ — backs up F-Prot Daemon (old)
# [‘FRISK F-Prot Antivirus’, [‘f-prot’,’f-prot.sh’],
# ‘-dumb -archive -packed {}’, [0,8], [3,6], # or: [0], [3,6,8],
# qr/(?:Infection:|security risk named) (.+)|\s+contains\s+(.+)$/ ],
### http://www.trendmicro.com/ — backs up Trophie
# [‘Trend Micro FileScanner’, [‘/etc/iscan/vscan’,’vscan’],
# ‘-za -a {}’, [0], qr/Found virus/, qr/Found virus (.+) in/ ],
### http://www.sald.com/, http://drweb.imshop.de/ — backs up DrWebD
# [‘drweb — DrWeb Antivirus’, # security LHA hole in Dr.Web 4.33 and earlier
# [‘/usr/local/drweb/drweb’, ‘/opt/drweb/drweb’, ‘drweb’],
# ‘-path={} -al -go -ot -cn -upn -ok-‘,
# [0,32], [1,9,33], qr’ infected (?:with|by)(?: virus)? (.*)$’],
### http://www.kaspersky.com/
#[‘Kaspersky Antivirus v5.5’,
# [‘/opt/kaspersky/kav4fs/bin/kav4fs-kavscanner’,
# ‘/opt/kav/5.5/kav4unix/bin/kavscanner’,
# ‘/opt/kav/5.5/kav4mailservers/bin/kavscanner’, ‘kavscanner’],
# ‘-i0 -xn -xp -mn -R -ePASBME {}/*’, [0,10,15], [5,20,21,25],
# qr/(?:INFECTED|WARNING|SUSPICION|SUSPICIOUS) (.*)/ ,
# sub {chdir(‘/opt/kav/bin’) or die «Can’t chdir to kav: $!»},
# sub {chdir($TEMPBASE) or die «Can’t chdir back to $TEMPBASE $!»},
# ],
# Commented out because the name ‘sweep’ clashes with Debian and FreeBSD
# package/port of an audio editor. Make sure the correct ‘sweep’ is found
# in the path when enabling.
#
# ### http://www.sophos.com/ — backs up Sophie or SAVI-Perl
# [‘Sophos Anti Virus (sweep)’, ‘sweep’,
# ‘-nb -f -all -rec -ss -sc -archive -cab -mime -oe -tnef ‘.
# ‘—no-reset-atime {}’,
# [0,2], qr/Virus .*? found/,
# qr/^>>> Virus(?: fragment)? ‘?(.*?)’? found/,
# ],
# # other options to consider: -idedir=/usr/local/sav
# always succeeds (uncomment to consider mail clean if all other scanners fail)
# [‘always-clean’, sub {0}],
);
1; # insure a defined return
Командуем.
chkconfig —levels 235 amavisd on
chkconfig —levels 235 clamd on
/etc/init.d/amavisd start
/etc/init.d/clamd start
/usr/bin/freshclam
Теперь осталось добавить в Postfix в master.cf следующее.
amavis unix — — — — 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes
127.0.0.1:10025 inet n — — — — smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o strict_rfc821_envelopes=yes
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
-o smtpd_bind_address=127.0.0.1
И делаем рестарт.
/etc/init.d/postfix restart
Ставим Razor, Pyzor And DCC и настраиваем SpamAssassin
yum install perl-Razor-Agent razor-agents
rpm -ivh ftp://ftp.pbone.net/mirror/download.fedora.redhat.com/pub/fedora/epel/5/i386/pyzor-0.4.0-11.el5.noarch.rpm
Выставляем права.
chmod -R a+rX /usr/share/doc/pyzor-0.4.0 /usr/bin/pyzor /usr/bin/pyzord
chmod -R a+rX /usr/lib/python2.4/site-packages/pyzor
mkdir /var/spool/amavisd
chown amavis:amavis /var/spool/amavisd
su -m amavis -c ‘pyzor —homedir /var/spool/amavisd discover’
su -m amavis -c ‘razor-admin -home=/var/spool/amavisd -create’
su -m amavis -c ‘razor-admin -home=/var/spool/amavisd -register’
Ставим DCC
cd /tmp
wget http://www.dcc-servers.net/dcc/source/dcc-dccproc.tar.Z
tar xzvf dcc-dccproc.tar.Z
cd dcc-dccproc-1.3.76
./configure —with-uid=amavis
make
make install
chown -R amavis:amavis /var/dcc
ln -s /var/dcc/libexec/dccifd /usr/local/bin/dccifd
И правим главный конфиг Spamassassin /etc/mail/spamassassin/local.cf
# These values can be overridden by editing ~/.spamassassin/user_prefs.cf
# (see spamassassin(1) for details)
# These should be safe assumptions and allow for simple visual sifting
# without risking lost emails.
#required_hits 5
#report_safe 0
#rewrite_header Subject [SPAM]
# dcc
use_dcc 1
dcc_path /usr/local/bin/dccproc
#pyzor
use_pyzor 1
pyzor_path /usr/bin/pyzor
#razor
use_razor2 1
razor_config /var/spool/amavisd/razor-agent.conf
#bayes
use_bayes 1
use_bayes_rules 1
bayes_auto_learn 1
И файл /etc/mail/spamassassin/v310.pre
# This is the right place to customize your installation of SpamAssassin.
#
# See ‘perldoc Mail::SpamAssassin::Conf’ for details of what can be
# tweaked.
#
# This file was installed during the installation of SpamAssassin 3.1.0,
# and contains plugin loading commands for the new plugins added in that
# release. It will not be overwritten during future SpamAssassin installs,
# so you can modify it to enable some disabled-by-default plugins below,
# if you so wish.
#
# There are now multiple files read to enable plugins in the
# /etc/mail/spamassassin directory; previously only one, «init.pre» was
# read. Now both «init.pre», «v310.pre», and any other files ending in
# «.pre» will be read. As future releases are made, new plugins will be
# added to new files, named according to the release they’re added in.
###########################################################################
# DCC — perform DCC message checks.
#
# DCC is disabled here because it is not open source. See the DCC
# license for more details.
#
loadplugin Mail::SpamAssassin::Plugin::DCC
# Pyzor — perform Pyzor message checks.
#
loadplugin Mail::SpamAssassin::Plugin::Pyzor
# Razor2 — perform Razor2 message checks.
#
loadplugin Mail::SpamAssassin::Plugin::Razor2
# SpamCop — perform SpamCop message reporting
#
loadplugin Mail::SpamAssassin::Plugin::SpamCop
# AntiVirus — some simple anti-virus checks, this is not a replacement
# for an anti-virus filter like Clam AntiVirus
#
#loadplugin Mail::SpamAssassin::Plugin::AntiVirus
# AWL — do auto-whitelist checks
#
loadplugin Mail::SpamAssassin::Plugin::AWL
# AutoLearnThreshold — threshold-based discriminator for Bayes auto-learning
#
loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
# TextCat — language guesser
#
#loadplugin Mail::SpamAssassin::Plugin::TextCat
# AccessDB — lookup from-addresses in access database
#
#loadplugin Mail::SpamAssassin::Plugin::AccessDB
# WhitelistSubject — Whitelist/Blacklist certain subject regular expressions
#
loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject
###########################################################################
# experimental plugins
# DomainKeys — perform DomainKeys verification
#
# External modules required for use, see INSTALL for more information.
# Note that this may be redundant if you also plan to use the DKIM plugin.
#
#loadplugin Mail::SpamAssassin::Plugin::DomainKeys
# MIMEHeader — apply regexp rules against MIME headers in the message
#
loadplugin Mail::SpamAssassin::Plugin::MIMEHeader
# ReplaceTags
#
loadplugin Mail::SpamAssassin::Plugin::ReplaceTags
Проверим правильность конфигов командой.
spamassassin —lint
Если ошибок нету значит все правильно.
Делаем рестарт amavisd.
/etc/init.d/amavisd restart
Создадим файл обновления /usr/local/sbin/sa_rules_update.sh и поместим его в cron.
#!/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/71_sare_redirect_pre3.0.0.cf -O 71_sare_redirect_pre3.0.0.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_bayes_poison_nxm.cf -O 70_sare_bayes_poison_nxm.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_html.cf -O 70_sare_html.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_html4.cf -O 70_sare_html4.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_html_x30.cf -O 70_sare_html_x30.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_header0.cf -O 70_sare_header0.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_header3.cf -O 70_sare_header3.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_header_x30.cf -O 70_sare_header_x30.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_specific.cf -O 70_sare_specific.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_adult.cf -O 70_sare_adult.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/72_sare_bml_post25x.cf -O 72_sare_bml_post25x.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/99_sare_fraud_post25x.cf -O 99_sare_fraud_post25x.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_spoof.cf -O 70_sare_spoof.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_random.cf -O 70_sare_random.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_oem.cf -O 70_sare_oem.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_genlsubj0.cf -O 70_sare_genlsubj0.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_genlsubj3.cf -O 70_sare_genlsubj3.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_genlsubj_x30.cf -O 70_sare_genlsubj_x30.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_unsub.cf -O 70_sare_unsub.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/70_sare_uri.cf -O 70_sare_uri.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.timj.co.uk/linux/bogus-virus-warnings.cf -O bogus-virus-warnings.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.yackley.org/sa-rules/evilnumbers.cf -O evilnumbers.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.stearns.org/sa-blacklist/random.current.cf -O random.current.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/88_FVGT_body.cf -O 88_FVGT_body.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/88_FVGT_rawbody.cf -O 88_FVGT_rawbody.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/88_FVGT_subject.cf -O 88_FVGT_subject.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/88_FVGT_headers.cf -O 88_FVGT_headers.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/88_FVGT_uri.cf -O 88_FVGT_uri.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/99_FVGT_DomainDigits.cf -O 99_FVGT_DomainDigits.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/99_FVGT_Tripwire.cf -O 99_FVGT_Tripwire.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.rulesemporium.com/rules/99_FVGT_meta.cf -O 99_FVGT_meta.cf &> /dev/null
cd /etc/mail/spamassassin/ &> /dev/null && /usr/bin/wget http://www.nospamtoday.com/download/mime_validate.cf -O mime_validate.cf &> /dev/null
/etc/init.d/amavisd restart &> /dev/null
exit 0
Дадим права ему.
chmod 755 /usr/local/sbin/sa_rules_update.sh
Ну и конечно же запустим обновление.
/usr/local/sbin/sa_rules_update.sh
Поместим в cron.
crontab -e
23 4 */2 * * /usr/local/sbin/sa_rules_update.sh &> /dev/null
Поработаем с quota
cd /usr/local/sbin/
wget http://puuhis.net/vhcs/quota.txt
mv quota.txt quota_notify
chmod 755 quota_notify
Файл /usr/local/sbin/quota_notify
#!/usr/bin/perl -w
# Author <jps@tntmax.com>
#
# This script assumes that virtual_mailbox_base in defined
# in postfix’s main.cf file. This directory is assumed to contain
# directories which themselves contain your virtual user’s maildirs.
# For example:
#
# ————/
# |
# |
# home/vmail/domains/
# | |
# | |
# example.com/ foo.com/
# |
# |
# ——————
# | | |
# | | |
# user1/ user2/ user3/
# |
# |
# maildirsize
#
use strict;
my $POSTFIX_CF = «/etc/postfix/main.cf»;
my $MAILPROG = «/usr/sbin/sendmail -t»;
my $WARNPERCENT = 80;
my @POSTMASTERS = (‘postmaster@kipalex.ru’);
my $CONAME = ‘My Company’;
my $COADDR = ‘postmaster@kipalex.ru’;
my $SUADDR = ‘postmaster@kipalex.ru’;
my $MAIL_REPORT = 1;
my $MAIL_WARNING = 1;
print «Subject: WARNING: Your mailbox is $lusers{$luser}% full.\n»;
print «Your mailbox: $luser is $lusers{$luser}% full.\n\n»;
#get virtual mailbox base from postfix config
open(PCF, «< $POSTFIX_CF») or die $!;
my $mboxBase;
while (<PCF>) {
next unless /virtual_mailbox_base\s*=\s*(.*)\s*/;
$mboxBase = $1;
}
close(PCF);
#assume one level of subdirectories for domain names
my @domains;
opendir(DIR, $mboxBase) or die $!;
while (defined(my $name = readdir(DIR))) {
next if $name =~ /^\.\.?$/; #skip ‘.’ and ‘..’
next unless (-d «$mboxBase/$name»);
push(@domains, $name);
}
closedir(DIR);
#iterate through domains for username/maildirsize files
my @users;
chdir($mboxBase);
foreach my $domain (@domains) {
opendir(DIR, $domain) or die $!;
while (defined(my $name = readdir(DIR))) {
next if $name =~ /^\.\.?$/; #skip ‘.’ and ‘..’
next unless (-d «$domain/$name»);
push(@users, {«$name\@$domain» => «$mboxBase/$domain/$name»});
}
}
closedir(DIR);
#get user quotas and percent used
my (%lusers, $report);
foreach my $href (@users) {
foreach my $user (keys %$href) {
my $quotafile = «$href->{$user}/maildirsize»;
next unless (-f $quotafile);
open(QF, «< $quotafile») or die $!;
my ($firstln, $quota, $used);
while (<QF>) {
my $line = $_;
if (! $firstln) {
$firstln = 1;
die «Error: corrupt quotafile $quotafile»
unless ($line =~ /^(\d+)S/);
$quota = $1;
last if (! $quota);
next;
}
die «Error: corrupt quotafile $quotafile»
unless ($line =~ /\s*(-?\d+)/);
$used += $1;
}
close(QF);
next if (! $used);
my $percent = int($used / $quota * 100);
$lusers{$user} = $percent unless not $percent;
}
}
#send a report to the postmasters
if ($MAIL_REPORT) {
open(MAIL, «| $MAILPROG»);
select(MAIL);
map {print «To: $_\n»} @POSTMASTERS;
print «From: $COADDR\n»;
print «Subject: Daily Quota Report.\n»;
print «DAILY QUOTA REPORT:\n\n»;
print «———————————————-\n»;
print «| % USAGE | ACCOUNT NAME |\n»;
print «———————————————-\n»;
foreach my $luser ( sort { $lusers{$b} <=> $lusers{$a} } keys %lusers ) {
printf(«| %3d | %32s |\n», $lusers{$luser}, $luser);
print «———————————————\n»;
}
print «\n—\n»;
print «$CONAME\n»;
close(MAIL);
}
#email a warning to people over quota
if ($MAIL_WARNING) {
foreach my $luser (keys (%lusers)) {
next unless $lusers{$luser} >= $WARNPERCENT; # skip those under quota
open(MAIL, «| $MAILPROG»);
select(MAIL);
print «To: $luser\n»;
map {print «BCC: $_\n»} @POSTMASTERS;
print «From: $SUADDR\n»;
print «Subject: WARNING: Your mailbox is $lusers{$luser} full.\n»;
print «Reply-to: $SUADDR\n»;
print «Your mailbox: $luser is $lusers{$luser} full.\n\n»;
print «Once your e-mail box has exceeded your monthly storage quota\n»;
print «your monthly billing will be automatically adjusted.\n»;
print «Please consider deleting e-mail and emptying your trash folder to clear some space.\n\n»;
print «Contact <$SUADDR> for further assistance.\n\n»;
print «Thank You.\n\n»;
print «—\n»;
print «$CONAME\n»;
close(MAIL);
}
}
Добавим в cron.
crontab -e
0 0 * * * /usr/local/sbin/quota_notify &> /dev/null
Все проверяем работу.
telnet localhost 25
Trying 127.0.0.1…
Connected to localhost.
Escape character is ‘^]’.
220 ns1.kipalex.ru ESMTP Postfix
EHLO kipalex.ru
250-ns1.kipalex.ru
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
А дальше ставим Postfixadmin, настраиваем апач, и создаем домены и пользователей и в бой. 🙂
Все сообщения помеченные как ***SPAM*** сортируются почтовым клиентом и помещаются в заранее созданную папку Spam.
Почему взялся за Dovecot? Новый проект быстрый, легкий.