Re: [exim] Re: Configure ClamAV and SpamAssassin for Exim4

Top Page
Delete this message
Reply to this message
Author: oliver
Date:  
To: Mike Grice
CC: exim-users
Subject: Re: [exim] Re: Configure ClamAV and SpamAssassin for Exim4
Hello Mike,
thanks. The daemon is running but there is no /tmp/spamd. Maby I have to 
restart the daemon with the option:
 --socketpath=path                  Listen on given UNIX domain socket


???

Regards,
Oliver

On Sunday 02 October 2005 17:44, you wrote:
> Ok,
>
> Make sure the daemon is running. This is set (I think) in /etc/
> default/spamd.
>
> If this is now the case, look for the socket. If it's not listening
> on a TCP socket, its listening on a UNIX socket. The .pid file isn't
> a socket, its a file holding the process ID (for init scripts). If I
> remember (though I might be wrong), the socket will be at /tmp/spamd
> - put that in as in your example 2.
>
> Cheers
> Mike
>
> On 2 Oct 2005, at 15:52, oliver@??? wrote:
> > Hello Mike,
> > thanks for your help. ClamAV is now working but I still have a
> > problem with
> > SpamAssassin.
> >
> > Option 1)
> > spamd_address = 127.0.0.1 783
> > -> SpamAssassin doesn't seem to do anything.
> >
> > Option 2)
> > spamd_address = /var/run/spamd.pid
> > -> /var/log/exim4/mainlog says that the pid file cannot be found
> > although the
> > file exists.
> >
> > ### acl/40_exim4-config_check_data
> > acl_check_data:
> >
> >   # Deny unless the address list headers are syntactically correct.
> >   #
> >   # If you enable this, you might reject legitimate mail.
> >   .ifdef CHECK_DATA_VERIFY_HEADER_SYNTAX
> >   deny
> >     message = Message headers fail syntax check
> >     !acl = acl_whitelist_local_deny
> >     !verify = header_syntax
> >   .endif

> >
> >
> >   # require that there is a verifiable sender address in at least
> >   # one of the "Sender:", "Reply-To:", or "From:" header lines.
> >   .ifdef CHECK_DATA_VERIFY_HEADER_SENDER
> >   deny
> >     message = No verifiable sender address in message headers
> >     !acl = acl_whitelist_local_deny
> >     !verify = header_sender
> >   .endif

> >
> >   # Added by Oliver 2005-10-02
> >   deny
> >     message = Found blacklisted file attachment
> >     demime  = vbs:com:bat:pif:prf:lnk

> >
> >   # put headers in all messages (no matter if spam or not)
> >   warn  message = X-Spam-Score: $spam_score ($spam_bar)
> >         spam = nobody:true
> >   warn  message = X-Spam-Report: $spam_report
> >         spam = nobody:true

> >
> >   # add second subject line with *SPAM* marker when message
> >   # is over threshold
> >   warn  message = Subject: *SPAM* $h_Subject:
> >         spam = nobody

> >
> >   # reject spam at high scores (> 12)
> >   deny   message = This message scored $spam_score spam points.
> >          spam = nobody:true
> >          condition = ${if >{$spam_score_int}{120}{1}{0}}

> >
> > # This hook allows you to hook in your own ACLs without having to
> > # modify this file. If you do it like we suggest, you'll end up with
> > # a small performance penalty since there is an additional file
> > being
> > # accessed. This doesn't happen if you leave the macro unset.
> > .ifdef CHECK_DATA_LOCAL_ACL_FILE
> > .include CHECK_DATA_LOCAL_ACL_FILE
> > .endif
> >
> > # accept otherwise
> > accept
> >
> > What do I have to do? Thanks!
> > Oliver
> >
> > On Sunday 02 October 2005 14:52, Mike Grice wrote:
> >> OK,
> >>
> >> You may need to remove one of those d's from clamdd :-)
> >>
> >> Check the logs for clam and spamassassin. Under Debian by default
> >> they are /var/log/clamav and /var/log/mail (I think). You can then
> >> see if they are being scanned.
> >>
> >> The only problem you may come across is that clam sometimes doesnt
> >> have permission to write into exim's spool directory, you will have
> >> to alter the users / groups concerned.
> >>
> >> Cheers
> >> Mike
> >>
> >> On 2 Oct 2005, at 13:41, oliver@??? wrote:
> >>> Hello Mike,
> >>> thanks a lot. So I changed the entries to:
> >>> av_scanner = clamdd:/var/run/clamav.ctl
> >>> spamd_address = 127.0.0.1 783
> >>>
> >>> How can I test, that it's working now?
> >>>
> >>> Regards,
> >>> Oliver
> >>>
> >>> On Sunday 02 October 2005 14:24, you wrote:
> >>>> Hi,
> >>>> SpamD almost always listens on port 783 (but can be configured to
> >>>> listen on a unix socket). ClamAV listens on a unix socket by
> >>>> default, but can be configured to open a TCP socket (the default is
> >>>> 3310). You can check their respective config files or do something
> >>>> like lsof -i and grep for clam and spam respectively...
> >>>>
> >>>> Cheers,
> >>>> Mike
> >>>>
> >>>> On 2 Oct 2005, at 13:10, oliver@??? wrote:
> >>>>> Hello,
> >>>>> I cahnged from exim-daemon-light to exim-daemon-heavy, so the
> >>>>> entries for
> >>>>> av_scanner and spamd_address are now being accepted by Exim!
> >>>>>
> >>>>> My next problem is only that I do not now if these entries are
> >>>>> correct? Are
> >>>>> SpamAssassin and ClamAV listening on port 25 or 783?
> >>>>>
> >>>>> Regards,
> >>>>> Oliver
> >>>>>
> >>>>> On Sunday 02 October 2005 13:50, you wrote:
> >>>>>> hi,
> >>>>>>
> >>>>>> check if your version of exim is exim-light or exim-heavy and so
> >>>>>> forth... you probrably have the good config file but the wrong
> >>>>>> packages.
> >>>>>>
> >>>>>> cheers,
> >>>>>> jonathan
> >>>>>>
> >>>>>> oliver@??? wrote:
> >>>>>>> Hello,
> >>>>>>> I did:
> >>>>>>> apt-get install clamav
> >>>>>>> apt-get install clamav-freshclam
> >>>>>>>
> >>>>>>> and I assume that the Debian package was compiled with
> >>>>>>> WITH_CONTENT_SCAN
> >>>>>>> so, I should be able to set the options but each time I edit the
> >>>>>>> Exim
> >>>>>>> config and do: # invoke-rc.d exim4 reload"
> >>>>>>> the result is:
> >>>>>>>
> >>>>>>> 2005-10-01 22:47:50 Exim configuration error in line 92
> >>>>>>> of /var/lib/exim4/config.autogenerated.tmp:
> >>>>>>> main option "spamd_address" unknown
> >>>>>>>
> >>>>>>> Invalid new configfile /var/lib/exim4/config.autogenerated.tmp
> >>>>>>> not installing /var/lib/exim4/config.autogenerated.tmp to
> >>>>>>> /var/lib/exim4/config.autogenerated
> >>>>>>> invoke-rc.d: initscript exim4, action "reload" failed.
> >>>>>>>
> >>>>>>> I still cannot set the following options in:
> >>>>>>> /etc/exim4/exim4.conf.template:
> >>>>>>>
> >>>>>>> av_scanner = clamd:server.windfinder.com 25
> >>>>>>> spamd_address = 127.0.0.1 783
> >>>>>>>
> >>>>>>> After doing invoke-rc.d exim4 reload I always get:
> >>>>>>> Reloading exim4 configuration files
> >>>>>>> 2005-10-01 22:49:51 Exim configuration error in line 92
> >>>>>>> of /var/lib/exim4/config.autogenerated.tmp:
> >>>>>>> main option "av_scanner" unknown
> >>>>>>> main option "spamd_address" unknown
> >>>>>>> Invalid new configfile /var/lib/exim4/config.autogenerated.tmp
> >>>>>>> not installing /var/lib/exim4/config.autogenerated.tmp to
> >>>>>>> /var/lib/exim4/config.autogenerated
> >>>>>>> invoke-rc.d: initscript exim4, action "reload" failed.
> >>>>>>>
> >>>>>>> Might it be that the Debian Exim 4.50 package is not compiled
> >>>>>>> with
> >>>>>>> content-scanning features? Please help! thanks!
> >>>>>>>
> >>>>>>> Regards,
> >>>>>>> Oliver
> >>>>>>>
> >>>>>>> On Saturday 01 October 2005 18:05, you wrote:
> >>>>>>>> Hi again,
> >>>>>>>>
> >>>>>>>> check if you are using exim-ligh or exim-heavy and also i
> >>>>>>>> provide my own
> >>>>>>>> howto:
> >>>>>>>>
> >>>>>>>> http://www.surestorm.com/MAIL/
> >>>>>>>>
> >>>>>>>> Best regards,
> >>>>>>>>
> >>>>>>>> jonathan
> >>>>>>>>
> >>>>>>>> oliver@??? wrote:
> >>>>>>>>> Hello,
> >>>>>>>>> I a trying to configure ClamAV (0.87-0) for Exim (4.50-8) on
> >>>>>>>>> Debian
> >>>>>>>>> Sarge. I added the follwong line to /etc/exim4/
> >>>>>>>>> exim4.conf.template:
> >>>>>>>>>
> >>>>>>>>> av_scanner = clamd:127.0.0.1 25
> >>>>>>>>>
> >>>>>>>>> .. as suggested at:http://www.exim.org/exim-html-4.50/doc/
> >>>>>>>>> html/
> >>>>>>>>> spec.html
> >>>>>>>>> and then restarted the daemon with:
> >>>>>>>>>
> >>>>>>>>> # invoke-rc.d exim4 reload
> >>>>>>>>>
> >>>>>>>>> The following error occured:
> >>>>>>>>> Reloading exim4 configuration files
> >>>>>>>>> 2005-10-01 16:56:32 Exim configuration error in line 92
> >>>>>>>>> of /var/lib/exim4/config.autogenerated.tmp:
> >>>>>>>>> main option "av_scanner" unknown
> >>>>>>>>> Invalid new configfile /var/lib/exim4/config.autogenerated.tmp
> >>>>>>>>> not installing /var/lib/exim4/config.autogenerated.tmp to
> >>>>>>>>> /var/lib/exim4/config.autogenerated
> >>>>>>>>> invoke-rc.d: initscript exim4, action "reload" failed.
> >>>>>>>>>
> >>>>>>>>> What is going wrong? Can anyone help me? Does anyone have a
> >>>>>>>>> HOWTO?
> >>>>>>>>> Thanks!
> >>>>>
> >>>>> --
> >>>
> >>> --
> >>> ## List details at http://www.exim.org/mailman/listinfo/exim-users
> >>> ## Exim details at http://www.exim.org/
> >>> ## Please use the Wiki with this list - http://www.exim.org/
> >>> eximwiki/
> >>
> >> --
> >> Sticking feathers up your butt does not make you a chicken.
> >
> > --
> > Oliver König
> >
> > Windfinder.com
> > Knorrstr. 24 Hinterhaus
> > 24106 Kiel
> > Germany
> > phone +49 431-8008643
> > VoIP +49 1801-7775558229
> > fax +49 431-8008644
> > Mobile +49 177-4933362
> > oliver@???
> > www.windfinder.com
> >
> > --
> > ## List details at http://www.exim.org/mailman/listinfo/exim-users
> > ## Exim details at http://www.exim.org/
> > ## Please use the Wiki with this list - http://www.exim.org/eximwiki/


--
Oliver König

Windfinder.com
Knorrstr. 24 Hinterhaus
24106 Kiel
Germany
phone +49 431-8008643
VoIP +49 1801-7775558229
fax +49 431-8008644
Mobile +49 177-4933362
oliver@???
www.windfinder.com