|
|
发表于 2004-9-14 23:23:14
|
显示全部楼层
建立qmail服务器的防病毒系统
所需软件:
maildrop-1.5.2.20030423.tar.gz?
perl-Time-HiRes-1.38-3.i386.rpm?
clamav-0.65.tar.gz?
qmail-scanner-1.20.tgz?
安装maildrop:?
tar?zxvf?maildrop-1.5.2.20030423.tar.gz?
cd?maildrop-1.5.2.20030423
./configure
make?
make?install-strip?
make?install-man?
安装?perl-Time-HiRes-1.38-3.i386.rpm?
rpm?-ivh?perl-Time-HiRes-1.38-3.i386.rpm?
安装clamav-0.65.tar.gz?
groupadd?clamav?
useradd??g?clamav??s?/bin/false?clamav?
tar?zxvf?clamav-0.65.tar.gz?
cd?clamav-0.65?
./configure?
make?check?
make?install?
更新病毒库
运行freshclam?
把freshclam加入crontab?定时更新病毒库,?
vi?/usr/local/etc/clamav.conf?
注释掉Example
执行clamscan?
执行clamd?
然后执行clamdscan?
安装qmail-scanner-1.20.tgz?
groupadd?qscand?
useradd?-g?qscand?-s?/bin/false?qscand?
tar?zxvf?qmail-scanner-1.20.tgz?
cd?qmail-scanner-1.20?
./configure?--qmail-queue-binary?/var/qmail/bin/qmail-queue?--admin?postmaster
--domain?nero.3322.org?--notify?sender,admin?--local-domains?nero.3322.org?--lang?en_GB?--debug?yes?--unzip?yes?--scanners?clamscan?--install
在编译过程中需要安装perl-DB_File-x.x.x.rpm,在光盘中可找到。
chown?qscand:qscand?/var/qmail/bin/qmail-scanner-queue.pl?
chmod?4755?/var/qmail/bin/qmail-scanner-queue.pl?
然后用一个普通用户登陆,执行/var/qmail/bin/qmail-scanner-queue.pl?-z?
如果没有Can't?do?setuid出现,恭喜你,如果有?
回到安装文件目录,有个contrib目录,?
make?
make?install?
附加步骤:
chown?qscand:qscand?/var/qmail/bin/qmail-scanner-queue?
chmod?4755?/var/qmail/bin/qmail-scanner-queue?
chmod?0755?/var/qmail/bin/qmail-scanner-queue.pl?
然后用一个普通用户登陆,执行
/var/qmail/bin/qmail-scanner-queue?-z?
/var/qmail/bin/qmail-scanner-queue?-g?
修改环境变量?
1.在你的qmail启动脚本加入?
QMAILQUEUE=/var/qmail/bin/qmail-scanner-queue.pl
如果作了附加步骤用下面的?
QMAILQUEUE=/var/qmail/bin/qmail-scanner-queue?
export?QMAILQUEUE?
2.修改qmail-scanner-queue.pl中的?
my?$clamscan_options="-r?--disable-summary?--max-recursion=10?--max-space=1000000";为?
my?$clamscan_options="-r?--mbox?--disable-summary?--max-recursion=10?--max-space=1000000";?
重起qmail?测试?
这里有测试程序?
/software/qmail-scanner-1.20/contrib/test_installation.sh?
主要的排错监测日志?
/var/spool/qmailscan/quarantine.log?
/var/spool/qmailscan/qmail-queue.log?
/var/log/clamd.log?
/var/log/maillog |
|