我正在FreeBSD 11.2上运行postfix postfix-3.3.1_1,1和clamav-milter clamav-milter-0.100.1_1。Postfix和milter设置为通过套接字进行通信。我无法使milter和postfix一起工作,我必须忽略一些东西。
在我maillog
我得到的消息:
xSep 21 11:33:57 mail2 postfix / smtpd [85759]:警告:连接到Milter服务Unix:/var/run/clamav/clmilter.sock:权限被拒绝
Postfix以user:group postfix:postfix的身份运行。Clamav作为clamav:clamav运行。(当我将clamav作为postfix:postfix运行时,问题仍然存在。)用户postfix也是clamav组的成员。
套接字本身的权限是:
srwxrwxrwx 1 clamav clamav 0B Sep 21 11:46:26 2018 /var/run/clamav/clmilter.sock
在clamav-milter.conf中,我运行默认值,将用户更改为postfix无效:
MilterSocket unix:/var/run/clamav/clmilter.sock
# MilterSocket unix:/var/spool/postfix/var/run/clamav/clmilter.sock
# MilterSocket inet:8890
# ClamdSocket unix:/var/run/clamav/clmilter.sock
#MilterSocket inet:7357
# Define the group ownership for the (unix) milter socket.
# Default: disabled (the primary group of the user running clamd)
#MilterSocketGroup postfix
# Sets the permissions on the (unix) milter socket to the specified mode.
# Default: disabled (obey umask)
#MilterSocketMode 660
# Remove stale socket after unclean shutdown.
#
# Default: yes
FixStaleSocket yes
# Run as another user (clamav-milter must be started by root for this option to work)
#
# Default: unset (don't drop privileges)
User postfix
在rc.conf中
clamav_milter_enable="YES"
clamav_milter_socket="/var/run/clamav/clmilter.sock"
clamav_milter_socket_user="postfix"
clamav_milter_socket_group="postfix"
在postfix的main.cf中,它也是相当标准的:
smtpd_milters = unix:/var/run/clamav/clmilter.sock inet:127.0.0.1:8891
我忘记了这个问题,但是我已经让它工作了一段时间,所以这是我现在如何配置它。
Postfix和Clamav的版本:
clamav-0.102.2,1后缀3.5.1,1
在/usr/local/etc/postfix/main.cf中,我通过inet在端口7357上具有clamav-milter:
smtpd_milters = inet:127.0.0.1:7357 inet:127.0.0.1:8891
milter_default_action = accept
在/usr/local/etc/clamav-milter.conf中:
MilterSocket inet:7357
FixStaleSocket yes
PidFile /var/run/clamav/clamav-milter.pid
ClamdSocket unix:/var/run/clamav/clamd.sock
在/usr/local/etc/clamd.conf中:
PidFile /var/run/clamav/clamd.pid
LocalSocket /var/run/clamav/clamd.sock
User clamav
在/etc/rc.conf中:
clamav_freshclam_enable="YES"
clamav_clamd_enable="YES"
clamav_milter_enable="YES"
clamav_milter_socket="inet:7357"
clamav_milter_socket_mode=777
本文收集自互联网,转载请注明来源。
如有侵权,请联系[email protected] 删除。
我来说两句