Re: [exim] Re: Configure ClamAV and SpamAssassin for Exim4

Top Page
Delete this message
Reply to this message
Author: oliver
Date:  
To: exim-users, Mike Grice
CC: 
Subject: Re: [exim] Re: Configure ClamAV and SpamAssassin for Exim4
Hello Mike,
thanks for your help. ClamAV is now working but I still have a problem with
SpamAssassin.

Option 1)
spamd_address = 127.0.0.1 783
-> SpamAssassin doesn't seem to do anything.

Option 2)
spamd_address = /var/run/spamd.pid
-> /var/log/exim4/mainlog says that the pid file cannot be found although the
file exists.

### acl/40_exim4-config_check_data
acl_check_data:

  # Deny unless the address list headers are syntactically correct.
  #
  # If you enable this, you might reject legitimate mail.
  .ifdef CHECK_DATA_VERIFY_HEADER_SYNTAX
  deny
    message = Message headers fail syntax check
    !acl = acl_whitelist_local_deny
    !verify = header_syntax
  .endif



  # require that there is a verifiable sender address in at least
  # one of the "Sender:", "Reply-To:", or "From:" header lines.
  .ifdef CHECK_DATA_VERIFY_HEADER_SENDER
  deny
    message = No verifiable sender address in message headers
    !acl = acl_whitelist_local_deny
    !verify = header_sender
  .endif


  # Added by Oliver 2005-10-02
  deny
    message = Found blacklisted file attachment
    demime  = vbs:com:bat:pif:prf:lnk


  # put headers in all messages (no matter if spam or not)
  warn  message = X-Spam-Score: $spam_score ($spam_bar)
        spam = nobody:true
  warn  message = X-Spam-Report: $spam_report
        spam = nobody:true


  # add second subject line with *SPAM* marker when message
  # is over threshold
  warn  message = Subject: *SPAM* $h_Subject:
        spam = nobody


  # reject spam at high scores (> 12)
  deny   message = This message scored $spam_score spam points.
         spam = nobody:true
         condition = ${if >{$spam_score_int}{120}{1}{0}}


# This hook allows you to hook in your own ACLs without having to
# modify this file. If you do it like we suggest, you'll end up with
# a small performance penalty since there is an additional file being
# accessed. This doesn't happen if you leave the macro unset.
.ifdef CHECK_DATA_LOCAL_ACL_FILE
.include CHECK_DATA_LOCAL_ACL_FILE
.endif

  # accept otherwise
  accept                                


What do I have to do? Thanks!
Oliver

On Sunday 02 October 2005 14:52, Mike Grice wrote:
> OK,
>
> You may need to remove one of those d's from clamdd :-)
>
> Check the logs for clam and spamassassin. Under Debian by default
> they are /var/log/clamav and /var/log/mail (I think). You can then
> see if they are being scanned.
>
> The only problem you may come across is that clam sometimes doesnt
> have permission to write into exim's spool directory, you will have
> to alter the users / groups concerned.
>
> Cheers
> Mike
>
> On 2 Oct 2005, at 13:41, oliver@??? wrote:
> > Hello Mike,
> > thanks a lot. So I changed the entries to:
> > av_scanner = clamdd:/var/run/clamav.ctl
> > spamd_address = 127.0.0.1 783
> >
> > How can I test, that it's working now?
> >
> > Regards,
> > Oliver
> >
> > On Sunday 02 October 2005 14:24, you wrote:
> >> Hi,
> >> SpamD almost always listens on port 783 (but can be configured to
> >> listen on a unix socket). ClamAV listens on a unix socket by
> >> default, but can be configured to open a TCP socket (the default is
> >> 3310). You can check their respective config files or do something
> >> like lsof -i and grep for clam and spam respectively...
> >>
> >> Cheers,
> >> Mike
> >>
> >> On 2 Oct 2005, at 13:10, oliver@??? wrote:
> >>> Hello,
> >>> I cahnged from exim-daemon-light to exim-daemon-heavy, so the
> >>> entries for
> >>> av_scanner and spamd_address are now being accepted by Exim!
> >>>
> >>> My next problem is only that I do not now if these entries are
> >>> correct? Are
> >>> SpamAssassin and ClamAV listening on port 25 or 783?
> >>>
> >>> Regards,
> >>> Oliver
> >>>
> >>> On Sunday 02 October 2005 13:50, you wrote:
> >>>> hi,
> >>>>
> >>>> check if your version of exim is exim-light or exim-heavy and so
> >>>> forth... you probrably have the good config file but the wrong
> >>>> packages.
> >>>>
> >>>> cheers,
> >>>> jonathan
> >>>>
> >>>> oliver@??? wrote:
> >>>>> Hello,
> >>>>> I did:
> >>>>> apt-get install clamav
> >>>>> apt-get install clamav-freshclam
> >>>>>
> >>>>> and I assume that the Debian package was compiled with
> >>>>> WITH_CONTENT_SCAN
> >>>>> so, I should be able to set the options but each time I edit the
> >>>>> Exim
> >>>>> config and do: # invoke-rc.d exim4 reload"
> >>>>> the result is:
> >>>>>
> >>>>> 2005-10-01 22:47:50 Exim configuration error in line 92
> >>>>> of /var/lib/exim4/config.autogenerated.tmp:
> >>>>> main option "spamd_address" unknown
> >>>>>
> >>>>> Invalid new configfile /var/lib/exim4/config.autogenerated.tmp
> >>>>> not installing /var/lib/exim4/config.autogenerated.tmp to
> >>>>> /var/lib/exim4/config.autogenerated
> >>>>> invoke-rc.d: initscript exim4, action "reload" failed.
> >>>>>
> >>>>> I still cannot set the following options in:
> >>>>> /etc/exim4/exim4.conf.template:
> >>>>>
> >>>>> av_scanner = clamd:server.windfinder.com 25
> >>>>> spamd_address = 127.0.0.1 783
> >>>>>
> >>>>> After doing invoke-rc.d exim4 reload I always get:
> >>>>> Reloading exim4 configuration files
> >>>>> 2005-10-01 22:49:51 Exim configuration error in line 92
> >>>>> of /var/lib/exim4/config.autogenerated.tmp:
> >>>>> main option "av_scanner" unknown
> >>>>> main option "spamd_address" unknown
> >>>>> Invalid new configfile /var/lib/exim4/config.autogenerated.tmp
> >>>>> not installing /var/lib/exim4/config.autogenerated.tmp to
> >>>>> /var/lib/exim4/config.autogenerated
> >>>>> invoke-rc.d: initscript exim4, action "reload" failed.
> >>>>>
> >>>>> Might it be that the Debian Exim 4.50 package is not compiled with
> >>>>> content-scanning features? Please help! thanks!
> >>>>>
> >>>>> Regards,
> >>>>> Oliver
> >>>>>
> >>>>> On Saturday 01 October 2005 18:05, you wrote:
> >>>>>> Hi again,
> >>>>>>
> >>>>>> check if you are using exim-ligh or exim-heavy and also i
> >>>>>> provide my own
> >>>>>> howto:
> >>>>>>
> >>>>>> http://www.surestorm.com/MAIL/
> >>>>>>
> >>>>>> Best regards,
> >>>>>>
> >>>>>> jonathan
> >>>>>>
> >>>>>> oliver@??? wrote:
> >>>>>>> Hello,
> >>>>>>> I a trying to configure ClamAV (0.87-0) for Exim (4.50-8) on
> >>>>>>> Debian
> >>>>>>> Sarge. I added the follwong line to /etc/exim4/
> >>>>>>> exim4.conf.template:
> >>>>>>>
> >>>>>>> av_scanner = clamd:127.0.0.1 25
> >>>>>>>
> >>>>>>> .. as suggested at:http://www.exim.org/exim-html-4.50/doc/html/
> >>>>>>> spec.html
> >>>>>>> and then restarted the daemon with:
> >>>>>>>
> >>>>>>> # invoke-rc.d exim4 reload
> >>>>>>>
> >>>>>>> The following error occured:
> >>>>>>> Reloading exim4 configuration files
> >>>>>>> 2005-10-01 16:56:32 Exim configuration error in line 92
> >>>>>>> of /var/lib/exim4/config.autogenerated.tmp:
> >>>>>>> main option "av_scanner" unknown
> >>>>>>> Invalid new configfile /var/lib/exim4/config.autogenerated.tmp
> >>>>>>> not installing /var/lib/exim4/config.autogenerated.tmp to
> >>>>>>> /var/lib/exim4/config.autogenerated
> >>>>>>> invoke-rc.d: initscript exim4, action "reload" failed.
> >>>>>>>
> >>>>>>> What is going wrong? Can anyone help me? Does anyone have a
> >>>>>>> HOWTO?
> >>>>>>> Thanks!
> >>>
> >>> --
> >
> > --
> > ## List details at http://www.exim.org/mailman/listinfo/exim-users
> > ## Exim details at http://www.exim.org/
> > ## Please use the Wiki with this list - http://www.exim.org/eximwiki/
>
> --
> Sticking feathers up your butt does not make you a chicken.


--
Oliver König

Windfinder.com
Knorrstr. 24 Hinterhaus
24106 Kiel
Germany
phone +49 431-8008643
VoIP +49 1801-7775558229
fax +49 431-8008644
Mobile +49 177-4933362
oliver@???
www.windfinder.com