Question about ClamAV libclamav.so
As I know, there is 3 way to integrate ClamAV to JES messaging server 6.2
1. conversion channel, old, fade out?
2. aliasedetourhost
3. libclamav.so like libspamass.so interface
Jay and bsnl both said libaclamav.sois in latest JMS patch, but I patched 118207-51, still can not found it, it must be in other patch. could any one tell me the patch ID? Thanks.
And I found libaclamav.so in ClamAV package, wondering how to use it? There is not much docs about this. Does libaclamav.so return some verdict like SpamAssassin? and MTA does the Sieve action based that verdict?
Thanks.
# 1
Hi,
> As I know, there is 3 way to integrate ClamAV to JES
> messaging server 6.2
Actually there are 4 that I can think of.
> 1. conversion channel, old, fade out?
Yep. I would avoid this for virus scanning.
> 2. aliasedetourhost
Yep. A very useful generic approach.
> 3. libclamav.so like libspamass.so interface
Correct.
The forth way is to write your own custom channel - this was the approach I took at my previous employer to integrate SpamAssassin, Sophos virus scanning, attachment replacement/stripping in the one go - this was before aliasedetourhost or libspamass.so were created.
> Jay and bsnl both said libaclamav.sois in latest
> JMS patch, but I patched 118207-51, still can not
> found it, it must be in other patch. could any one
> tell me the patch ID? Thanks.
I can tell you it is in the latest T-Patch 118207-58. You will need to log a support request to get a copy.
> And I found libaclamav.so in ClamAV package,
> wondering how to use it?
libaclamav.so isn't the same as libclamav.so (typo with the extra "a"?).
This is the cksum of my copy of the file:
bash-2.05# cksum /opt/SUNWmsgsr/lib/libclamav.so
460454078138800/opt/SUNWmsgsr/lib/libclamav.so
> There is not much docs
> about this. Does libaclamav.so return some verdict
> like SpamAssassin? and MTA does the Sieve action
> based that verdict?
Jay would be a better one to answer this. I haven't tried out the plugin myself and as you said there is very little documentation as yet.
Regards,
Shane.
# 2
libclamav.so is included with patch -58.
It is not the same file that you get with clamAV. That's a totally different thing, and has no relationship with our integration.
When running our integration, Messaging sends clamd the message, and accepts the answer back, and you can use it very much like you use SpamAssassin.
# 3
I typed my response before Shane put his in.
more. . .
libclamav.so was developed directly from the spamassassin plugin code. It's configured exactly the same way, and works exactly the same way.
Before it was available, I used either
amavis-new
or
clamSMTP
with the aliasdetourhost technique. both work acceptably
# 4
Thanks Shane and Jay!
Yes, Shane, that is my typo, I mean libclamav.so
one more Q:
in Jay's reply "Testing Integration of SpamAssassin with Sun Java Messaging server 6"
about tcp_local setting:
> ! tcp_local
> tcp_local smtp mx remotehost inner switchchannel
identnonenumeric subdirs 20 maxjobs 2 pool SMTP_POOL
maytlsserver maysaslserver saslswitchchannel tcp_auth
missingrecipientpolicy 0 daemon smtp.comcast.net
mailfromdnsverify backoff "pt30m" "pt2h" "pt4h"
sourcespamfilter2 sourcespamfilter1optin spam
tcp-daemon
I am wondering
sourcespamfilter2 sourcespamfilter1optin spam ?
should be
sourcespamfilter2option spam sourcespamfilter1optin spam
OR
sourcespamfilter2option virus sourcespamfilter1optin spam
I think "virus" or "spam" is not important, important is some thing come back from LDAP, right?
# 5
> Thanks Shane and Jay!
>
> Yes, Shane, that is my typo, I mean libclamav.so
>
>
> one more Q:
>
> in Jay's reply "Testing Integration of SpamAssassin
> with Sun Java Messaging server 6"
> about tcp_local setting:
>
> > ! tcp_local
> > tcp_local smtp mx remotehost inner switchchannel
> identnonenumeric subdirs 20 maxjobs 2 pool SMTP_POOL
> maytlsserver maysaslserver saslswitchchannel
> tcp_auth
> missingrecipientpolicy 0 daemon smtp.comcast.net
> mailfromdnsverify backoff "pt30m" "pt2h" "pt4h"
> sourcespamfilter2 sourcespamfilter1optin spam
> tcp-daemon
>
> I am wondering
> sourcespamfilter2 sourcespamfilter1optin spam ?
>
> should be
> sourcespamfilter2option spam sourcespamfilter1optin
> spam
> OR
> sourcespamfilter2option virus sourcespamfilter1optin
> spam
Um, you might try it, however, what's above is a full copy/paste from the configuration on my current production system, and it does work as advertised.
>
> I think "virus" or "spam" is not important, important
> is some thing come back from LDAP, right?
# 6
yes, Jay, you are right, sourcespamfilter2 sourcespamfilter1optin spam does work. and sourcespamfilter2optin virus sourcespamfilter1optin virusalso work, seem virus or spam does not matter.
# 7
The "spam" and "virus" keywords actually work for Brightmail, but they are merely placeholders for the SpamAssassin setup......
