Sim Scan Config

The clamdscan program needs to have permission to scan directories. By default, the /var/qmail/simscan directory is owned by simscan and grouped to root. This means that only simscan and root can access this directory. We don't want to open this directory up to the world, that might allow an unauthorized user to see someone else's email. So, the easiest way to do this is to change the group ownership of the directory and set a sticky bit.

rootshell> chgrp clamav /var/qmail/simscan

rootshell> chmod g+s /var/qmail/simscan

In order to have qmail send all emails through simscan, you must place the appropriate setting in the tcp.smtp file. For each netblock you want to use Simscan, add the following :

QMAILQUEUE="/var/qmail/bin/simscan"

For our setup, we want to do the following :

rootshell> echo ':allow,QMAILQUEUE="/var/qmail/bin/simscan"' >> /home/vpopmail/etc/tcp.smtp

rootshell> cd ~vpopmail/etc

rootshell> tcprules tcp.smtp.cdb tcp.smtp.tmp < tcp.smtp

The simcontrol file is used to set per-domain settings, as well as the site-wide defaults. The format of the file is as follows :

shell> cat /var/qmail/control/simcontrol

postmaster@example.com:clam=yes,spam=no,attach=.txt:.com
example.com:clam=no,spam=yes,attach=.mp3
:clam=yes,spam=yes,trophie=yes,spam_hits=20.1

This file is relatively self explanatory. See the simscan README for more information on settings. For now, set up this file as follows :

rootshell> echo ":clam=yes,spam=yes" > /var/qmail/control/simcontrol

rootshell> /var/qmail/bin/simscanmk

Page last modified on December 28, 2006, at 06:57 PM