Clamav Postfix unix socket integration

[clamavlist]

Hello list,

Excuse the beginner question please.

Clamav is correctly built (without --enable-milter) and running. It
doesn't listen on any TCP port but does open a unix socket here:

  $ ls /pfx/var/clamav/clamd.sock
  1 pfixuser pfixuser    0 2009-11-01 16:00 /pfx/var/clamav/clamd.sock

I've tested with clamscan(1) and the 'test' directory virus examples.

Premise
-------
Postfix master.cf (truncated):
smtp       inet  n       -       n       -       -       smtpd -o content_filter=spamass
spamass    unix  -       n       n       -       -       pipe flags=R user=pfixuser argv=/pfx/bin/spamc -f -u ${user} -e /pfx/sbin/sendmail -oi -f ${sender} ${recipient}

Questions
---------
How can I configure Postfix to use Clamav's unix socket interface?
Is it practical to use the 'content_filter' option of Postfix's
smtp(8) or is there a better way?

It seems that its not possible to attach more than one
'content_filter' to smtp(8) and I'm already using that for
Spamassassin.

Would building the clamav-milter be helpful for this problem?

Should I not use the 'local mode' and instead configure 'TCPSocket'
and 'TCPAddr' (going against the recommendation 'Due to security
reasons we recommend the local mode')?

I'd rather not start with Amavis, Amavisd, Amavis(new), or any
other software if it's possible to use Clamav directly with my
MTA+Spamassasin.

Thanks,
Brian
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[aCaB]

clamavlist@... wrote:
> Hello list,
>
> Excuse the beginner question please.

Hi Brian,

To answer your final question: yes, it is possible. Yes you don't need
amavis.

However you seem a bit confused about postix interfaces.
In particular the content_filter interface is not the same as the milter
interface.

I'd suggest you to start from http://www.postfix.org/MILTER_README.html
which will answer all your other questions.

Cheers,
-acab
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[clamavlist]

Hello acab,

On mon., Nov 02, 2009, aCaB wrote:

>On mon., Nov 02, 2009, clamavlist@... wrote:
>> Questions
>> ---------
>>
>> [...]
>>
>> I'd rather not start with Amavis, Amavisd, Amavis(new), or any
>> other software if it's possible to use Clamav directly with my
>> MTA+Spamassasin.
>>
>To answer your final question: yes, it is possible. Yes you don't
>need amavis.
>

Thanks, that's nice to know. What a good design.

>> Clamav is correctly built (without --enable-milter) and running.
>>
>> Questions
>> ---------
>> How can I configure Postfix to use Clamav's unix socket interface?
>> Is it practical to use the 'content_filter' option of Postfix's
>> smtp(8) or is there a better way?
>>
>However you seem a bit confused about postfix interfaces. In
>particular the content_filter interface is not the same as the
>milter interface.
>

Yes, I assumed that. Knowing nothing about milter interfaces, I
was hoping to configure Clamav (with its unix socket interface)
using the same pattern I used with Spamassassin (content_filter.)

So you are suggesting that this will not work, right?

>I'd suggest you to start from http://www.postfix.org/MILTER_README.html
>which will answer all your other questions.
>
I'll take a look at that, but first...

>> Questions
>> ---------
>>
>> [...]
>>
>> Would building the clamav-milter be helpful for this problem?
>>
Should I build again with --enable-milter? ...keeping the unix
socket on and TCP port off?

Is there a way to accomplish this without clamav-milter?

Regards,
Brian
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml