Today has been a day for hacking mail infrastructure. First, I arrived at the office at 8 a.m. to cut over our old RedHat 7.3-based SMTP gateway to a new Fedora Core 4 virtual machine. The purpose of this box (or VMWare GSX Server guest, in our case) is to act as a final sanity check before inbound e-mail hits Microsoft Virus Exchange Server. Previous admins were smart enough to realize that once a virus hits Exchange it will spread like wildfire, so there needs to be a special box placed in front of Exchange to scan for viruses.
The new setup is similar to the old setup, but with updated packages. The machine runs Postfix with amavisd-new as the content_filter
, and any clean messages are passed over the internal LAN to the Exchange server. We’re using ClamAV as the antivirus scanner.
I encountered one problem while cutting this over which is that clamd likes to drop privileges right after starting, and I’d forgotten to set AllowSupplementaryGroups
in the clamd configuration file. This meant ClamAV couldn’t read any of the temporary spool files written by amavis.
Continue reading →