Postfix + Clamav + Amavisd2014/09/26

	Configure Virus-Scanning with Postfix + Clamav.
[1]	Install Clamav, refer to here.
[2]	Install Amavisd and Clamav Server.

# install from EPEL

[root@mail ~]#

yum --enablerepo=epel -y install amavisd-new clamav-scanner clamav-scanner-systemd

[3]	If SELinux is enabled, change policy like follows.

[root@mail ~]#

setsebool -P antivirus_can_scan_system on

[4]	Configure Amavisd.

[root@mail ~]#

vi /etc/amavisd/amavisd.conf

# line 20: change to own domain name

$mydomain = '

srv.world

# line 152: change to the own hostname

$myhostname = '

mail.srv.world

# line 154: uncomment

$notify_method = 'smtp:[127.0.0.1]:10025';
$forward_method = 'smtp:[127.0.0.1]:10025';

# line 383: make sure settings are like folows

['ClamAV-clamd',
    \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamd.amavisd/clamd.sock"],
    qr/\bOK$/m, qr/\bFOUND$/m,
    qr/^.*?: (?!Infected Archive)(.*) FOUND$/m ],

[root@mail ~]#

systemctl start clamd@amavisd amavisd spamassassin

[root@mail ~]#

systemctl enable clamd@amavisd amavisd spamassassin

[5]	Configure Postfix.

[root@mail ~]#

vi /etc/postfix/main.cf

# add to the end

content_filter=smtp-amavis:[127.0.0.1]:10024

[root@mail ~]#

vi /etc/postfix/master.cf

# add to the end

smtp-amavis unix -    -    n    -    2 smtp
    -o smtp_data_done_timeout=1200
    -o smtp_send_xforward_command=yes
    -o disable_dns_lookups=yes
127.0.0.1:10025 inet n    -    n    -    - smtpd
    -o content_filter=
    -o local_recipient_maps=
    -o relay_recipient_maps=
    -o smtpd_restriction_classes=
    -o smtpd_client_restrictions=
    -o smtpd_helo_restrictions=
    -o smtpd_sender_restrictions=
    -o smtpd_recipient_restrictions=permit_mynetworks,reject
    -o mynetworks=127.0.0.0/8
    -o strict_rfc821_envelopes=yes
    -o smtpd_error_sleep_time=0
    -o smtpd_soft_error_limit=1001
    -o smtpd_hard_error_limit=1000

[root@mail ~]#

systemctl restart postfix

[6]	It' OK all. These lines below are added in the header section of emails after this configuration and emails with known Virus will not sent to Clients.

Matched Content