Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Feature Requests

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 5th October 2005, 02:32
Ovidiu Ovidiu is offline
Senior Member
 
Join Date: Sep 2005
Posts: 1,269
Thanks: 84
Thanked 25 Times in 21 Posts
Default ading av - x-header to incoming emails

hi guys,

can anyone explain how I add a x-header to incoming mails to indicate they have been scanned? I already noticed the kludge portion inside the trashscan file but I would like to (if possible) include some special x-header that also states the version of clamav/date of the virus signatures ...

at the moment I have had severall viri inside my inbox and I doubt that they all got past clamav, I suppose somehow these mailswere not scanned so this header would also be an indicator if mails are correctly processed...
Reply With Quote
Sponsored Links
  #2  
Old 5th October 2005, 10:58
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,752 Times in 2,582 Posts
Default

You could include a line like this:

Code:
${FORMAIL} -I "X-Virus-Scanner: `/home/admispconfig/ispconfig/tools/clamav/usr/bin/clamscan -V` on `date`" < ${MSGDIR}/rec.msg | ${PROCMAIL}
But make sure to comment out this line:
Code:
${FORMAIL} -I "$VKLUDGE Scanned by $TSCV running on $HOSTNAME" < ${MSGDIR}/rec.msg | ${PROCMAIL}
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 5th October 2005, 11:15
Ovidiu Ovidiu is offline
Senior Member
 
Join Date: Sep 2005
Posts: 1,269
Thanks: 84
Thanked 25 Times in 21 Posts
Default

do you mean there should be a line present inside each mail saying it was scanned by TSCV running on $HOSTNAME ? I don't see this in any email... seems the mails are not scanned..
Reply With Quote
  #4  
Old 7th October 2005, 00:39
Ovidiu Ovidiu is offline
Senior Member
 
Join Date: Sep 2005
Posts: 1,269
Thanks: 84
Thanked 25 Times in 21 Posts
Default

ok, seems the problem is solved: the virus I was hit by was a mytob variant. it seems like the signatures are not yet included in clamav. while searching in their database I found the mytob signatures were included in the daily.cvd while signatures for older viruses were included in main.cvd file ... I do not know what this means exactly

I did a freshclam but I already had the latest definition files, I thought about restarting clamav or clamd and there was no such process running, is that right? does the process get started when an email is scanned or is there something wrong with my install?
Reply With Quote
  #5  
Old 7th October 2005, 04:38
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,752 Times in 2,582 Posts
Default

Quote:
Originally Posted by Tenaka
I did a freshclam but I already had the latest definition files, I thought about restarting clamav or clamd and there was no such process running, is that right? does the process get started when an email is scanned or is there something wrong with my install?
Emails are scanned by clamscan, this is no daemon that's running all the time. clamscan is called whenever an email arrives. There's nothing wrong with your install.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #6  
Old 12th October 2005, 11:36
Ovidiu Ovidiu is offline
Senior Member
 
Join Date: Sep 2005
Posts: 1,269
Thanks: 84
Thanked 25 Times in 21 Posts
Default

now I have one more question towards spamassassin. other solutions beside ispconfig seemed to be using spamc or spamd running as daemon. ispconfig doesn't.

I want to use a plugin for a wordpress installation. its details can be found here: http://www.ioerror.us/software/wp-spamassassin/
this plugin uses spamassassin to filter comments in the blog. it seems to expect spamassassin running as daemon. here is a config file excerpt:

Quote:
// If you want to use a spamd server running on the same machine, uncomment
// the next line, changing the name of the UNIX domain socket if necessary,
// and comment out the two lines after it.
// $wp_spamd_socket = "/tmp/spamd.socket";
$wp_spamd_server = "localhost";
$wp_spamd_port = 783;
how can I get spamassassin running as daemon, where do I find its socket fiel and will it interfere with ispconfig??? any ideas?
Reply With Quote
  #7  
Old 12th October 2005, 13:09
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 37,041
Thanks: 841
Thanked 5,660 Times in 4,467 Posts
Default

You can install a second spamassassin beside the one that comes with ISPConfig.
Reply With Quote
  #8  
Old 19th October 2005, 09:34
Ovidiu Ovidiu is offline
Senior Member
 
Join Date: Sep 2005
Posts: 1,269
Thanks: 84
Thanked 25 Times in 21 Posts
Default

does anyone know hot to change the subject of mails filtered as virus to reflect the name of the virus in the subject? like the ***SPAM*** with spammails that gets prepended to spam messages?
so that my virus filtered mails would look like: *VIRUS:MYTOB* regular subject or something similar
Reply With Quote
  #9  
Old 23rd December 2005, 23:06
hendry hendry is offline
Junior Member
 
Join Date: Dec 2005
Location: Apeldoorn, The Netherlands
Posts: 18
Thanks: 0
Thanked 0 Times in 0 Posts
Send a message via ICQ to hendry Send a message via MSN to hendry Send a message via Yahoo to hendry
Default

Quote:
Originally Posted by falko
You could include a line like this:

Code:
${FORMAIL} -I "X-Virus-Scanner: `/home/admispconfig/ispconfig/tools/clamav/usr/bin/clamscan -V` on `date`" < ${MSGDIR}/rec.msg | ${PROCMAIL}
But make sure to comment out this line:
Code:
${FORMAIL} -I "$VKLUDGE Scanned by $TSCV running on $HOSTNAME" < ${MSGDIR}/rec.msg | ${PROCMAIL}
Wich file(s) must be edited to do this?
Reply With Quote
  #10  
Old 24th December 2005, 14:09
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,752 Times in 2,582 Posts
 
Default

Quote:
Originally Posted by hendry
Wich file(s) must be edited to do this?
/home/admispconfig/ispconfig/tools/clamav/bin/trashscan
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Postfix Header Checks dirk Installation/Configuration 8 30th May 2010 14:38
Cannot receive emails skeeta Installation/Configuration 18 22nd April 2006 17:02
Unable to receive emails?!!! nandhu HOWTO-Related Questions 7 24th October 2005 00:49
Emails received but I cannot read them skeeta Installation/Configuration 2 28th August 2005 13:24


All times are GMT +2. The time now is 21:22.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.