| ・ |
ドキュメントセンターを初めてご利用する方や運営方針についての基本的な姿勢をご覧になりたい方へ。
|
| ご利用の皆様から多く寄せられる質問にお答えしています。 |
|
| ・ |
ディーエーオフィスなどが利用する用語に関する解説を行います。
|
|
|
|
 | |
amavis |
※以下はインストール時のメモですが、こちらでは動作を確認することができませんでした。主たるはpostfixでの動作が確認されていますが、qmailでも動作するとあります。
cd /usr/ports/security/amavisd-new
make install
sh /usr/local/etc/rc.d/amavisd.sh start
sh /usr/local/etc/rc.d/amavis-milter.sh start
# amavisd-newの動作確認
# openできれば動作中
telnet 127.0.0.1 10024
quit
# logファイル
cd /var/log
mkdir amavis
chown vscan:vscan amavis
cd amavis
touch amavis.log
chown vscan amavis.log
cd /var
chown -R vscan:clamav amavis
ee /etc/rc.conf
---
clamav_clamd_enable="YES" # clamav分
clamav_freshclam_enable="YES" # clamav分
amavisd_enable="YES"
---
# 以下がスキャン時にメールヘッダーへ入る
X-Virus-Scanned: by amavisd-new at uxmac.com
# 設定
cd /usr/local/etc
cp amavisd.conf-dist amavisd.conf
ee /usr/local/etc/amavisd.conf
# 完全なパスでプログラム名を指定する。amavisdでは、
# マッチした最初のスキャナが利用され、マッチしない場合は無効となる。
# スパムチェックのみの場合は、「@av_scanners」には
# 「TURNS OFF LOADING AND、COMPILING OF THE ANTIVIRUS CODE」を
# 指定するだけで良い(amavisd.conf内の記述を確認する)
---
1. av scanner plain name, to be used in log and reports;
2. scanner program name; this string will be submitted to subroutine
find_external_programs(), which will try to find the full program
path name; if program is not found, this scanner is disabled.
Besides a simple string (full program path name or just the basename
to be looked for in PATH), this may be an array ref of alternative
program names or full paths - the first match in the list will be used;
As a special case for more complex scanners, this field may be
a subroutine reference, and the whole n-tuple is passed to it as args.
3. command arguments to be given to the scanner program;
a substring {} will be replaced by the directory name to be scanned,
i.e. "$tempdir/parts", a "*" will be replaced by file names of parts;
4. an array ref of av scanner exit status values, or a regexp (to be
matched against scanner output), indicating NO VIRUSES found;
5. an array ref of av scanner exit status values, or a regexp (to be
matched against scanner output), indicating VIRUSES WERE FOUND;
Note: the virus match prevails over a ’not found’ match, so it is safe
even if the no. 4. matches for viruses too;
6. a regexp (to be matched against scanner output), returning a list
of virus names found.
7. and 8.: (optional) subroutines to be executed before and after scanner
(e.g. to set environment or current directory);
see examples for these at KasperskyLab AVP and Sophos sweep.
NOTES:
- NOT DEFINING @av_scanners (e.g. setting it to empty list, or deleting the
whole assignment) TURNS OFF LOADING AND COMPILING OF THE ANTIVIRUS CODE
(which can be handy if all you want to do is spam scanning);
- the order matters: although _all_ available entries from the list are
always tried regardless of their verdict, scanners are run in the order
specified: the report from the first one detecting a virus will be used
(providing virus names and scanner output); REARRANGE THE ORDER TO WILL;
- it doesn’t hurt to keep an unused command line scanner entry in the list
if the program can not be found; the path search is only performed once
during the program startup;
COROLLARY: to disable a scanner that _does_ exist on your system,
comment out its entry or use undef or ’’ as its program name/path
(second parameter). An example where this is almost a must: disable
Sophos ’sweep’ if you have its daemonized version Sophie or SAVI-Perl
(same for Trophie/vscan, and clamd/clamscan), or if another unrelated
program happens to have a name matching one of the entries (’sweep’
again comes to mind);
- it DOES HURT to keep unwanted entries which use INTERNAL SUBROUTINES
for interfacing (where the second parameter starts with &).
Keeping such entry and not having a corresponding virus scanner daemon
causes an unnecessary connection attempt (which eventually times out,
but it wastes precious time). For this reason the daemonized entries
are commented in the distribution - just remove the ’#’ where needed.
CERT list of av resources: http://www.cert.org/other_sources/viruses.html
---
# amavis-perl
cd /usr/ports/security/amavis-perl
http://www.maid.ne.jp/~yy/memoru/2002-04.html
http://mstk.que.jp/FreeBSD/
make WITH_QMAIL=yes
make WITH_QMAIL=yes install
# 変更を確認。所有ユーザ名が気になる
-rws--x--x 1 qmailq qmail 25769 Apr 6 07:27 qmail-queue
-rws--x--x 1 qmailq qmail 12460 Apr 6 07:16 qmail-queue-real
chown root:qmail qmail-queue
chown root:qmail qmail-queue-real
# amavisd-new
cd /usr/ports/security/amavisd-new
make install
# amavisd
cd /usr/local/src/qmail-amavisd-0.92
make
# 以下が画面に表示される
---
cc -I/usr/local/include -c qmail-qsmtp.c
Linking qmail-queue.smtp ...
done
---
make install
# 以下が画面に表示される
---
Installing qmail-queue.smtp in /var/qmail/bin
Installing makerbl in /usr/local/bin
install -m 0511 -S makerbl /usr/local/bin
---
|
| 文書番号 |
00803 |
| 日付 |
2004.04.14 |
| 参照数 |
663 |
|
