RH9+Sendmail+MailScanner-4.31.6-1+clamav-0.72-1+MailWatch for MailScanner 0.51(需PHP+MYSQL)
第一節
1-1
==================解壓縮MailScanner-4.31.6-1.rpm.tar.gz檔案
[root@ftp test]# tar zxvf MailScanner-4.31.6-1.rpm.tar.gz
MailScanner-4.31.6-1/
MailScanner-4.31.6-1/perl-Archive-Zip-1.09-3.src.rpm
MailScanner-4.31.6-1/perl-Compress-Zlib-1.33-2.src.rpm
.........
1-2
=============安裝MailScanner-4.31.6-1
[root@ftp test]# cd MailScanner-4.31.6-1
[root@ftp MailScanner-4.31.6-1]# ./install.sh
........系統會自動安裝,直到看到下方的訊息,代表完成
To activate MailScanner run the following commands:
service sendmail stop => Sendmail 停止
chkconfig sendmail off => 開機時不啟動 Sendmail
chkconfig --level 2345 MailScanner on =>開機時啟動 Mailscanner
service MailScanner start => Mailscanner自行起動
1-3
===============依自己的環境做適當的修改MailScanner.conf的組態檔
[root@ftp MailScanner-4.31.6-1]# vi /etc/MailScanner/MailScanner.conf
相關參數可參考以下網站
http://www.vbird.org/somepaper/20030905-mailscanner-conf.htm
1-4
==================Clamav 0.72-1 安裝
[root@ftp test]# rpm -ivh clamav-0.72-1.i386.rpm
[root@ftp test]# rpm -ivh clamav-devel-0.72-1.i386.rpm
[root@ftp test]# rpm -ivh clamav-milter-0.72-1.i386.rpm
[root@ftp test]# cd /etc/rc.d/init.d/
[root@ftp init.d]# /sbin/chkconfig --level 2345 clamd on => 開機時啟動 clamd
[root@ftp init.d]# /sbin/chkconfig --level 2345 clamav-milter on => 開機時啟動clamav-milter
1-5
===========另外如有使用webmin的人,可以使用webmin-clamav模組
相關使用說明可參考
http://wbmclamav.labs.libre-entreprise.org/
下載位置
http://labs.libre-entreprise.org/download.php/163/wbmclamav-0.3.9.wbm.gz
第二節
2-1
=====MailWatch for MailScanner+php+MYSQL 主要的作用在監控郵件處理情形,統計:垃圾郵件.病毒郵件.統計圖等...
相關使用說明可參考
http://mailwatch.sourceforge.net/
下載位置
http://aleron.dl.sourceforge.net/sourceforge/mailwatch/mailwatch-0.5.1.tar.gz
2-2
確定MYSQL已經啟動
2-3
===解壓縮DBD-mysql-2.1028.tar.gz檔案,並安裝Perl-DBD-MySQL 2.1028
下載位置http://search.cpan.org/CPAN/authors/id/J/JW/JWIED/DBD-mysql-2.1028.tar.gz
[root@ftp test]# tar zxvf DBD-mysql-2.1028.tar.gz
[root@ftp test]# cd DBD-mysql-2.1028
[root@ftp DBD-mysql-2.1028]# perl Makefile.PL
[root@ftp DBD-mysql-2.1028]# make
[root@ftp DBD-mysql-2.1028]# make test
[root@ftp DBD-mysql-2.1028]# make install
2-4
===修改php.ini檔中以下的參數
[root@ftp mailwatch]# vi /etc/php.ini
short_open_tag = On
safe_mode = Off
register_globals = Off
magic_quotes_gpc = On
magic_quotes_runtime = Off
session.auto_start = 0
2-5
========解壓縮mailwatch-0.5.1.tar.gz檔案
[root@ftp test]# tar zxvf mailwatch-0.5.1.tar.gz
[root@ftp test]# cd mailwatch
[root@ftp mailwatch]# mysql -p < create.sql => 建立名為mailscanner資料庫
Enter password: =>輸入mysql中root的密碼,如果root沒有設定密碼-p參數不用加
2-6
======建立一組MySQL的帳號及密碼,透過此組帳號將Mailscanner的log寫進mailscanner資料庫
[root@ftp mailwatch]# mysql
mysql> GRANT ALL ON mailscanner.* TO mailwatch@localhost IDENTIFIED BY '<password>'
2-7
=======編輯mailwatch目錄下MailWatch.pm檔
將 MailWatch.pm檔案中的$db_user and $db_pass值,改成2-6步驟建立的帳號及密碼
[root@ftp mailwatch]# vi MailWatch.pm
修改完成後將MailWatch.pm移動至 /usr/lib/MailScanner/MailScanner/目錄下
[root@ftp mailwatch]# mv MailWatch.pm /usr/lib/MailScanner/MailScanner/
2-8
=======編輯/usr/lib/MailScanner/MailScanner/CustomConfig.pm
[root@ftp mailwatch]# vi /usr/lib/MailScanner/MailScanner/CustomConfig.pm
找到$VERSION = substr q$Revision: 1.3.2.26 $, 10;此行,並跳至一行加入require 'MailScanner/MailWatch.pm';
2-9
======建立一組登入到MailWatch網頁所需的帳號密碼(以帳號test密碼test為例)
[root@ftp mailwatch]# mysql mailscanner -u mailwatch -p
Enter password: ******
mysql> INSERT INTO users VALUES ('test',md5('test'),'test','A');
2-10
======= 安裝及設定 MailWatch 網頁
將mailwatch目錄下的mailscanner移至 /var/www/html/目錄下
[root@ftp mailwatch]# mv mailscanner /var/www/html/
設定/var/www/html/mailscanner/images and /var/www/html/mailscanner/images/cache這二個目錄權限
[root@ftp mailwatch]# chown root:apache /var/www/html/mailscanner/images
[root@ftp mailwatch]# chmod ug+rwx /var/www/html/mailscanner/images
[root@ftp mailwatch]# chown root:apache /var/www/html/mailscanner/images/cache
[root@ftp mailwatch]# chmod ug+rwx /var/www/html/mailscanner/images/cach
[root@ftp mailwatch]# cp /var/www/html/mailscanner/conf.php.example /var/www/html/mailscanner/conf.php
編輯conf.php檔案中的DB_USER and DB_PASS =>應該在30及31行,更改成2-6步驟建立的帳號及密碼
2-11
======= 修改 /etc/MailScanner/MailScanner.conf的參數
[root@ftp mailwatch]# vi /etc/MailScanner/MailScanner.conf
Always Looked Up Last = &MailWatchLogging
Detailed Spam Report = yes
Quarantine Whole Message = yes
Quarantine Whole Message As Queue Files = no
Include Scores In SpamAssassin Report = yes
Quarantine User = root
Quarantine Group = apache (this should be the same group as your web server)
Quarantine Permissions = 0660
2-12
========= 重新啟動MailScanner
[root@ftp mailwatch]# /etc/rc.d/init.d/MailScanner restart
2-13
========== 測試MailWatch網頁
輸入http://<hostname>/mailscanner/此位置時,應該會跳出一個認證視窗此時輸入2-9步驟建立的帳號及密碼test and test
備註:
1.當完成以上的動作即完成簡易的設定,如需更詳細的功能請自行參考各軟體的官方說明文件.
2.資料庫的帳號建立時,小弟都是用phpmyadmin建立
3.MailScanner安裝完成後,在/var/spool/MailScanner/quarantine目錄中主要都是放置被隔離(中毒)的附件,MailWatch for MailScanner有提供針對quarantine目錄下的子目錄及檔案查詢或刪除的處理,但必需先將/var/spool/MailScanner/此目錄下的檔案都權限都要改成770
4.記得要每天早晚更新Clamav的病毒碼~病毒碼存放路徑如下:
/usr/local/share/clamav/main.cvd
/usr/local/share/clamav/daily.cvd |