PerlStalker's SysAdmin Notes and Tools

Home / amavis

scripts

amavis-ng

amavisd-new

Printer Friendly

Note: I have switched to amavisd-new. These docs should still work but I am no longer maintaining them.

Using AMaViS-ng with Courier

These intructions walk you through the setup of AMaViS-ng with the F-Prot virus scanner from Frisk. It should be fairly trivial to use another virus scanner, such as clamav, instead.

Needed Ports

archivers/lha
archivers/unarj or archivers/arj
archivers/unrar or archivers/rar
archivers/zoo or archivers/unzoo
archivers/arc
archivers/p5-Compress-Zlib
archivers/p5-Archive-Tar
archivers/p5-Archive-Zip
archivers/bzip2
devel/p5-IO-stringy
converters/p5-MIME-Base64
converters/p5-Convert-UUlib
converters/p5-Convert-TNEF
mail/p5-MIME-Tools
mail/p5-Mail-Tools
devel/p5-Config-IniFiles
devel/p5-File-MMagic
sysutils/p5-Unix-Syslog

F-Prot

You need to install wget (ftp/wget) and unzip (archivers/unzip) for check-updates.sh.

 cd /usr/local
 tar -zxf /path/to/fp-freebsd-eb-<ver>.tar.gz
 ln -s /usr/local/f-prot/f-protd  /usr/local/sbin/f-protd
 ln -s /usr/local/f-prot/f-prot.sh  /usr/local/bin/f-prot
 ln -s /usr/local/f-prot/man8/f-protd.8 /usr/local/man/man8/
 ln -s /usr/local/f-prot/man8/f-prot.8 /usr/local/man/man8/
 ln -s /usr/local/f-prot/man8/check-updates.sh.8 /usr/local/man/man8/
 chmod +x /usr/local/f-prot/f-prot*
 chmod +x /usr/local/f-prot/check*
 cp /usr/local/f-prot/f-protd.rc /usr/local/etc/rc.d/f-prot.sh

Instead of the last copy, you can do (at least on my systems):

 ln -s /usr/local/f-prot/f-protd.sh /usr/local/etc/rc.d/f-prot.sh

AMaVis

We're going to use amavis-ng because it has built in support for courierfilters and f-protd. Unfortunatly, there is no port for it yet.

Note: Actually, as of this writting (Oct. 28, 2003), f-protd support is very poor. One of these days, I may do something about that.

Download amavis-ng

amavis-ng is not available in the ports collection, so we'll do it the "old fashioned" way. Download amavis-ng from http://www.amavis.org/download.php3#amavis-ng. (http://unc.dl.sourceforge.net/sourceforge/amavis/amavis-ng_0.1.6.4.orig.tar.gz)

Extract

 cd /usr/local
 tar -zxf tar -zxf amavis-ng_0.1.6.4.orig.tar.gz

Patch

I wrote a patch to disable the quarantine.

 cd amavis-ng-ver.orig
 fetch http://perlstalker.amigo.net/amavis/scripts/AMAVIS.pm.diff
 patch < AMAVIS.pm.diff

Build/Install

Make sure you build amavis-ng with the same version of perl as couirer or you could run into a problems later.

 perl Makefile.PL
 make && make install

Fix things

 cp -R etc /usr/local/etc/amavis-ng
 ln -s /usr/local/etc/amavis-ng /etc/amavis-ng
 cp magic.mime /usr/local/etc/amavis-ng

Configure

 [general]
 mail-transfer-agent = Courier
 virus-scanner = FPROT
 notifiers = Recipients
 x-header = true
 x-header-tag = X-Scanned-By
 x-header-line = AMaViS-ng
 magic file = /usr/local/etc/amavis-ng/magic.mime

 [paths]
 unpackdir = /var/tmp/
 do quarantine = no
 cleanup = yes

 [Logging]
 syslog = mail|info
 syslog loglevel = 3

 [Notify]
 local domain = .*amigo\.net
 mail from = postmaster@amigo.net
 admin = postmaster@amigo.net

 [Courier]
 sendmail = /usr/sbin/courier
 args =

 [external]
 bzip2 = /usr/bin/bzip2
 ;arj = /usr/bin/arj
 ;nomarch = /usr/bin/nomarch
 gzip = /usr/bin/gzip
 ;unzoo = /usr/bin/unzoo

 ;; lha, unrar are non-free.
 ; lha = /usr/bin/lha
 ; unrar = /usr/bin/unrar

 ;; For arc zoo, unarj, there are free alternatives whcih are enabled
 ;; above.
 arc = /usr/local/bin/arc
 zoo = /usr/local/bin/zoo
 unarj = /usr/local/bin/unarj

 [security]
 uid = courier
 gid = courier

 [FPROT]
 fprot = /usr/local/bin/f-prot

Enable in Courier

 echo "all" > /usr/local/etc/courier/filters/perlfilter-mode
 echo "30" > /usr/local/etc/courier/filters/perlfilter-numprocs
 echo "/usr/local/bin/amavis" > /usr/local/etc/courier/filters/perlfilter
 ln -s /usr/local/libexec/filters/perlfilter /usr/local/etc/courier/filters/active/perlfilter

Starting/Stoping the Filter

See courierfilter.

 courierfilter stop
 courierfilter start
 courierfilter restart

If everything is working, you should see a message in your mail log that says "Perlfilter starting." If you see messages about not being able to find AMAVIS.pm. it means that you used different verions of perl to build.