0.) Conditions
1.) Stop postfix
# /etc/init.d/postfix stop
2.) Update your packages and install some new one
# apt-get update && apt-get upgrade # apt-get install libdbd-mysql-perl libdbi-perl libphp-jpgraph libossp-uuid-perl php-pear
3.) Recommended pear-modules
# pear upgrade-all #Errors could be ignored # pear install Log Mail_Mime Mail_mimeDecode File Date DB DB_Pager Net_Sieve Net_Pop3 # pear -d preferred_state=alpha install Image_Color Image_Canvas Image_Graph Numbers_Roman Numbers_Words # pear install Pager Net_SMTP Auth_SASL
4.) Install AMaVis
# apt-get install amavisd-new spamassassin clamav clamav-daemon
On installation of cclamAV, i got an Error: This version of the ClamAV engine is outdated.. There is an Advice at the clamAV-Page, that all Versions earlyer than 0.95 are not supportet anymore. For Debian Lenny do the following to install the newest Version: http://lists.debian.org/debian-volatile-announce/2009/msg00010.html
Attention: Please make a backup of every single config that you modify
5.) Modifiy the Postfix Config
Open the main.cf and activate AMaViS
# vi /etc/postfix/main.cf
Search for this Part and remove the ”#” before the line, that it looks like this:
# # AMaViS parameters; activate, if avaible/used # content_filter = amavis:[127.0.0.1]:10024
Add the following line to the config. This prevents spamassassin to score authenticated users basend on their IP:
smtpd_sasl_authenticated_header = yes receive_override_options = no_address_mappings
If you use “domain mail” and “mail forward” for the same emailadress you must edit this! Otherwise the email forwarder will receive the email two times. open master.cf
# vi /etc/postfix/master.cf
Search for this Part
localhost:10025 inet n - n - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_client_restrictions= -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o smtpd_override_options=no_address_mappings -o mynetworks=127.0.0.0/8 -o strict_rfc821_envelopes=yes
Add this line after
-o receive_override_options=no_header_body_checks,no_unknown_recipient_checks
6.) Modify the AMaViS config
Out to compatibility-base we must use an extern configuration file
# cd /etc/amavis # wget http://www200.pair.com/mecham/amavisd.conf.maia # mv amavisd.conf.maia amavisd.conf
Open the config
# vi /etc/amavis/amavisd.conf
First, change ‘$mydomain’ and ‘$myhostname’ to yours. Then search for these entries:
$final_virus_destiny = D_DISCARD; $final_spam_destiny = D_DISCARD; $final_banned_destiny = D_DISCARD; $final_bad_header_destiny = D_DISCARD;
and add this text block after it:
$warnvirussender = 1; $warnspamsender = 0; $warnbannedsender = 1; $warnvirusrecip = 1; $warnbannedrecip = 1;
search for this line and enter a new AMaVis password
lookup_sql_dsn = ( ['DBI:mysql:maia:localhost', 'amavis', '_YOUR_PASS_'] );
and after
$X_HEADER_TAG = 'X-Virus-Scanned'; $X_HEADER_LINE = "Maia Mailguard 1.0.2";
copy these lines
use DBI;
my $db = "ispcp";
my $user="root"; # Type here your ispCP MySQL User
# (is the same you typed during the setup)
my $host="localhost";
my $password="_YOUR_PASS"; # Type here your ispCP MySQL Password
#(is the same you typed during the setup)
my $dbh = DBI->connect("DBI:mysql:database=$db;host=$host", $user, $password, {RaiseError => 1});
my $arr = $dbh->selectcol_arrayref('SELECT domain_name, 1 FROM domain', {Columns=>[1,2]});
my $arre = $dbh->selectcol_arrayref('SELECT alias_name, 1 FROM domain_aliasses', {Columns=>[1,2]});
my $lis = ($arre,$arr);
%local_domains = (@$arr,@$arre);
7.) The Spamassassin config
Please create a config with the generator at http://www.yrex.com/spam/spamconfig.php and save it under ”/etc/spamassassin/local.cf”
8.) Add user clamav to the amavis group
# usermod -G amavis clamav
9.) MySQL must start before AMaVis
# update-rc.d -f mysql remove # update-rc.d mysql start 18 2 3 4 5 . stop 22 0 1 6 .
10.) Restart the services
# /etc/init.d/amavis restart # /etc/init.d/clamav-daemon restart # /etc/init.d/postfix restart
11.) Install Maia
We create a new directory and donwload the needed files.
You must change the second file (maia-lang-de.tar.gz) if German “de” is not your default language. Change it to your need. English is per default running.
# mkdir /usr/src/maia # cd /usr/src/maia # wget http://www.maiamailguard.com/files/maia-1.0.2a.tar.gz # wget http://www.maiamailguard.com/files/maia-lang-de.tar.gz # wget http://ratsnet.org/vhcs/maia_vhcs_theme_v2.12.tar.bz2
Decompress the files.
# tar -xzf maia-1.0.2a.tar.gz # tar -xzf maia-lang-de.tar.gz # tar xjvf maia_vhcs_theme_v2.12.tar.bz2
Create the Maia-DB
# cd /usr/src/maia # mysql -u root -p mysql> CREATE DATABASE maia; mysql> quit
Give the user ‘amavis’ a Password
# passwd amavis
Give the user ‘amavis’ no shell
# chsh -s /bin/false amavis
Create the DB structure and set the permissions
(change ‘_YOUR_AMaVIS_PASS_’ to your Pass)
# cd /usr/src/maia/maia-1.0.2 # mysql -u root -p maia < maia-mysql.sql # mysql -u root -p maia mysql> GRANT CREATE, DROP, ALTER, SELECT, INSERT, UPDATE, DELETE ON mysql> maia.* TO amavis@localhost IDENTIFIED BY '_YOUR_AMaVIS_PASS_'; mysql> quit
Create directories for Maia
# mkdir /var/lib/amavis/maia # mkdir /var/lib/amavis/maia/scripts # mkdir /var/lib/amavis/maia/templates
The Maia config
# cd /usr/src/maia/maia-1.0.2 # mv maia.conf.dist maia.conf # vi maia.conf
Change $password to your AMaViS Password and $base_url to http://admin.yourserver.tld/tools/antispam
And also correct the following file locations
$script_dir = "/var/lib/amavis/maia/scripts"; $template_dir = "/var/lib/amavis/maia/templates"; $pid_file = "/var/run/amavis/.process-quarantine.pid";
Copy the files
# cp /usr/src/maia/maia-1.0.2/maia.conf /etc/maia.conf # cp -R /usr/src/maia/maia-1.0.2/scripts/* /var/lib/amavis/maia/scripts # cp -R /usr/src/maia/maia-1.0.2/templates/* /var/lib/amavis/maia/templates
Set the right permissions
# chown -R amavis /var/lib/amavis/maia # chgrp -R amavis /var/lib/amavis/maia # chmod 640 /var/lib/amavis/maia/templates/*.tpl # chmod 750 /var/lib/amavis/maia/scripts/*.pl # chown amavis /etc/maia.conf # chgrp amavis /etc/maia.conf # chmod 640 /etc/maia.conf
Correct the directories in the scripts
# vi /var/lib/amavis/maia/scripts/process-quarantine.pl
change ‘/var/amavisd/maia/scripts’ to ‘/var/lib/amavis/maia/scripts’ and also change ‘/var/amavisd/.process-quarantine.pid’ to ‘/var/run/amavis/.process-quarantine.pid’
# vi /var/lib/amavis/maia/scripts/send-quarantine-digests.pl
change ‘/var/amavisd/maia/templates/’ to ‘/var/lib/amavis/maia/templates/’ and change the $base_url with used before
Then we can test the config
# cd /var/lib/amavis/maia/scripts # ./configtest.pl
“NOT INSTALLED” is OK for some modules.
Import the Spamassassin rules
# cd /var/lib/amavis/maia/scripts # ./load-sa-rules.pl
Install the Webinterface
# mkdir /home/viaza132/www/ispcp/gui/tools/antispam # cp -R /usr/src/maia/maia-1.0.2/php/* /home/viaza132/www/ispcp/gui/tools/antispam
Copy the German locales
# mkdir /home/viaza132/www/ispcp/gui/tools/antispam/locale/de # cp -R /usr/src/maia/de/* /home/viaza132/www/ispcp/gui/tools/antispam/locale/de
Edit the config.php
# cd /home/viaza132/www/ispcp/gui/tools/antispam # mv config.php.dist config.php # vi config.php
Change the default settings
(change ‘_YOUR_AMaVIS_PASS_ to your Pass)
$default_display_language = "de"; $maia_sql_dsn = "mysql://amavis:_YOUR_AMaVis_PASSd@tcp(localhost:3306)/maia"; $address_rewriting_type = 4; $auth_method = "pop3";
12.) Install the SMARTY TEMPLATE ENGINE
# cd /usr/src/maia/ # wget http://www.smarty.net/do_download.php?download_file=Smarty-2.6.20.tar.gz # tar -xzf Smarty-2.6.20.tar.gz # cd Smarty-2.6.20/libs # mkdir /home/viaza132/www/ispcp/gui/tools/antispam/libs/Smarty # cp -R ./* /home/viaza132/www/ispcp/gui/tools/antispam/libs/Smarty
Or alternatively on Debian …
apt-get install smarty
and edit the following file
# vi /home/viaza132/www/ispcp/gui/tools/antispam/config.php
uncomment the following line
$smarty_path = "/home/viaza132/www/ispcp/gui/tools/antispam/libs/Smarty";
13.) Install the modern_blue Theme
# mkdir /home/viaza132/www/ispcp/gui/tools/antispam/themes/modern_blue # cp -R /usr/src/maia/modern_blue/* /home/viaza132/www/ispcp/gui/tools/antispam/themes/modern_blue
Then, if you loged in, into Maia Admin Panel, go to Themes (Key Icon), and add the modern_blue Theme from the below to the above Table. Than go to Settings and choose it as Theme
Set the Permissions
# chown -R vu2000:www-data /home/viaza132/www/ispcp/gui/tools/antispam # chmod -R 555 /home/viaza132/www/ispcp/gui/tools/antispam # chmod -R 755 /home/viaza132/www/ispcp/gui/tools/antispam/themes
14.) Apache meets Maia
# cd /etc/apache2/sites-available/ # vi 00_master.conf
After this:
Alias /ftp /home/viaza132/www/ispcp/gui/tools/filemanger/
add this line:
Alias /antispam /home/viaza132/www/ispcp/gui/tools/antispam/
Restart Apache
# /etc/init.d/apache2 restart
15.) Test the GUI
Here should everything looks ‘OK’. If not install the needed modules with
pear install modulname
There is an error in PEAR::Image_Graph 0.7.2 that would be fixed in 0.7.3.
Up to then use this Patch →[http://www.maiamailguard.org/maia/ticket/326]
Or you can download a patched Version:
cd /usr/share/php/Image/Graph/Plot/ mv Pie.php Pie.php.orig wget http://www200.pair.com/mecham/Pie.php.txt mv Pie.php.txt Pie.php
Does not need a OK:
PostgreSQL Support PEAR::Net_IMAP IMAP library LDAP library MCrypt library
16.) Maia-AMaVis
# mv /usr/sbin/amavisd-new /usr/sbin/amavisd-bak # cp /usr/src/maia/maia-1.0.2/amavisd-maia /usr/sbin/amavisd-new # chown root /usr/sbin/amavisd-new # chmod 755 /usr/sbin/amavisd-new
17.) Edit the Spamassassin config
# vi /etc/spamassassin/local.cf
Add these lines on the end of the file and set your PW
# Bayes database configuration use_bayes 1 bayes_store_module Mail::SpamAssassin::BayesStore::SQL bayes_sql_dsn DBI:mysql:maia bayes_sql_username amavis bayes_sql_password _YOUR_AMaViS_PASS_ # <-- change '_YOUR_AMaViS_PASS_ to your Pass bayes_sql_override_username amavis bayes_auto_learn 1 bayes_auto_learn_threshold_nonspam 0.1 bayes_auto_learn_threshold_spam 10.0 bayes_use_hapaxes 1 #bayes_use_chi2_combining 1 # in newer versions unknown bayes_ignore_header ReSent-Date bayes_ignore_header ReSent-From bayes_ignore_header ReSent-Message-ID bayes_ignore_header ReSent-Subject bayes_ignore_header ReSent-To bayes_ignore_header Resent-Date bayes_ignore_header Resent-From bayes_ignore_header Resent-Message-ID bayes_ignore_header Resent-Subject bayes_ignore_header Resent-To bayes_ignore_header X-Received-From-IP bayes_ignore_header X-Virus-Scanned bayes_ignore_header X-Spam-Status bayes_ignore_header X-Spam-Level bayes_ignore_header X-Sender bayes_ignore_header X-Mailer # Auto-Whitelist configuration auto_whitelist_factory Mail::SpamAssassin::SQLBasedAddrList user_awl_dsn DBI:mysql:maia user_awl_sql_username amavis user_awl_sql_password _YOUR_AMaViS_ # <-- change '_YOUR_AMaVis_PASS_ to your Pass
Create a symlink to the AMaViS config
# ln -s /etc/amavis/amavisd.conf /etc/amavisd.conf
Restart AMaVis
# /etc/init.d/amavis restart
18.) Register as Maia-Admin
http://admin.yourserver.tld/tools/antispam/login.php?super=register
You have to register an existing Mailbox on your Server like [email protected] or [email protected]. With this Login you are later the Maia-Admin and can control all.
19.) Maintenance Scripts
So we need some maintenance scripts in the cron
crontab –u amavis -e
Insert the scripts
55 * * * * /var/lib/amavis/maia/scripts/process-quarantine.pl --learn --report 1 * * * * /var/lib/amavis/maia/scripts/stats-snapshot.pl 5 1 * * * /var/lib/amavis/maia/scripts/expire-quarantine-cache.pl @weekly /var/lib/amavis/maia/scripts/send-quarantine-reminders.pl 15 1 * * * /var/lib/amavis/maia/scripts/send-quarantine-digests.pl
20.) The UTF-8 Patch (optional)
if ($doUTF8) {
# encode to individual utf8 bytes if
# $line is a string (in internal UTF-8)
utf8::encode($line) if utf8::is_utf8($line);
}
This problem occurs on SMTP 2.20 and above and will rewrite all your mails in UTF-8. (Not good if send e.g. in ISO-8859-1).
– Done
21.) Test your System
The GTUBE
(Generic Test for Unsolicited Bulk Email)
Send this line per E-Mail to a User of your System.
Should recognize as SPAM with 1000 points in Spamassassian.
XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X
The EICAR TEST-FILE
ClamAV should recognize it as a Virus.
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
22. Delete the admin subdirectory
The PHP scripts installed earlier included a number of administration scripts in the admin subdirectory. Once you’ve got Maia Mailguard up and running properly, you no longer need these scripts, and should delete that subdirectory and its contents as a security precaution, so that web visitors cannot access those scripts.
Useful Links
http://www.maiamailguard.com/maia/wiki/Install
http://www.bluevisiontec.com/Maia_Mailguard.pdf –> The original Document in German
To do:
– HowTo patch 1.0.2 → 1.0.2a http://www.maiamailguard.org/maia/ticket/479
– Upgrade HowTo http://www.maiamailguard.com/maia/wiki/UpgradeFrom1-0-x
– Add RulesDuJour Script
– Add Digest SQL Script
