OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: clamav

From: Magnus Bäck (magnusdsek.lth.se)
Date: Thu Feb 02 2006 - 12:00:32 CST

On Thursday, February 02, 2006 at 18:49 CET,
     Tom Lee <tom_lee01hotmail.com> wrote:

> > How is this supposed to change the efficency?
>
> I mean the network, memory or CPU resources are consumed less.
> You think either way are the same?

A before queue (proxy) content filter doesn't require the mail to pass
through Postfix twice, so it should be more efficient. More importantly,
it allows you to reject messages based on their content, which isn't
possible with after queue content filters. However, the proxy filter
needs to function as a truly transparent proxy, and I doubt clamsmtp
qualifies.

> under the link:
>
> http://www.enlartenment.com/packages/fedora/4/i386/repodata/repoview/clamsmtp-0-1.6-1.fc4.mf.html
>
> ClamSMTP is an SMTP filter that checks for viruses using ClamAV. It
> aims to be lightweight, reliable, and simple.this package is designed
> to work with postfix.
>
> not sure what to add the option in postfix configuration file to work
> with the clamav or clamsmtp?

Read FILTER_README. You probably want to use clamsmtp over plain
command-driven clamav, but that depends on your requirements.

> > Why did you install Postfix from source? There ARE rpms...
>
> there are two reasons:
> 1) I want to make the postfix small in size by removing unneeded
> supporting package in the compilation.

What makes you think the size of Postfix will change in any significant
way if you opt out on a few feature, and what makes you think this even
matters? You are attempting to optimize a non-problem.

> 2) postfix 2.3 uses devoct to smtp authentification, I used postfix
> 2.2 sasl. doing yum upgrade will upgrade the version to 2.3 in the
> future and I want to stick with postfix 2.2 and sasl.

This is false. In Postfix 2.3 Dovecot authentication is an option, but
Cyrus SASL support is still there.

--
Magnus Bäck
magnusdsek.lth.se