OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: clamav

From: Tom Lee (tom_lee01hotmail.com)
Date: Fri Feb 03 2006 - 19:42:16 CST


>From: mouss <usebsdfree.fr>
>To: Tom Lee <tom_lee01hotmail.com>
>CC: postfix-userspostfix.org
>Subject: Re: clamav
>Date: Sat, 04 Feb 2006 01:47:25 +0100
>
>Tom Lee a écrit :
> >
> > Thanks for all suggestions.
> > there are problems in running clamav.
> >
> > my main.cf:
>Please post output of postconf -n, not excerpt from main.cf.
>
>
> > content_filter = scan:127.0.0.1:10025
>
>better use:
>
>content_filter = scan:[127.0.0.1]:10025
>

The following is the comments made by Wietse a couple of years ago.
Based on your suggestions and the following information, I got it work now.
thanks.

If you want to filter inbound SMTP mail only, then:
|
| /etc/postfix/main.cf:
| smtpd_recipient_restrictions =
| check_recipient_access hash:/etc/postfix/recipient_access
| ...the usual stuff here...
| reject_unauth_destination
|
| /etc/postfix/recipient_access:
| my.domain FILTER foo:bar
|
| That filters all the mail that has at least one recipient in your
| domain, and does not filter mail with external recipients only.
| the 'foo:bar' is what you would traditionally specify
| in content_filter option, i.e. smtp-amavis:[127.0.0.1]:10024

However, I noticed that the following line has to be commented out
  content_filter = scan:[127.0.0.1]:10025

In other words, content_filter should be empty. otherwise, it will scan all
outgoing mails.

The reason for such a setting is to limit the use of resources for the mail
server.
all clients has antivirus installed on the PC with antivirus, it will scan
all sending out emails.
no need to scan twice again inthe server side.

Tom