Installazione Amavisd-new in Debian - Revision history

Gabriele.vivinetto: /* Installazione decompressori */

2019-12-11T13:47:42Z

Installazione decompressori

← Older revision		Revision as of 13:47, 11 December 2019
Line 22:		Line 22:
	<pre>		<pre>
	sudo apt-get update		sudo apt-get update
	sudo apt-get install ~~zoo~~ unzip arj lzop bzip2 p7zip-full p7zip-rar rpm2cpio cabextract ~~ripole~~ lhasa zip unzip arc liblz4-tool unace-nonfree lrzip xzdec		sudo apt-get install unzip arj lzop bzip2 p7zip-full p7zip-rar rpm2cpio cabextract lhasa zip unzip arc liblz4-tool unace-nonfree lrzip xzdec
	</pre>		</pre>

Gabriele.vivinetto: /* Test */

2018-10-23T09:59:23Z

Test

← Older revision		Revision as of 09:59, 23 October 2018
Line 317:		Line 317:

	* Testare un link malare con:		* Testare un link malare con:
	echo "http://~~www~~.~~ianfette~~.~~org~~/" \| swaks -f nome.cognome@domain.dom -s smtpserver -t recipient@otherdomain.dom -au nome.cognome --body -		echo "http://malware.testing.google.test/testing/malware/" \| swaks -f nome.cognome@domain.dom -s smtpserver -t recipient@otherdomain.dom -au nome.cognome --body -

	* Testare come indicato in [http://sanesecurity.com/support/signature-testing/ Signature Testing - Sanesecurity ClamAV: Phishing, Spam & Malware Signatures]		* Testare come indicato in [http://sanesecurity.com/support/signature-testing/ Signature Testing - Sanesecurity ClamAV: Phishing, Spam & Malware Signatures]

Gabriele.vivinetto at 17:08, 23 February 2017

2017-02-23T17:08:23Z

← Older revision		Revision as of 17:08, 23 February 2017
Line 308:		Line 308:
	</pre>		</pre>

			=Test=
	* Testare un virus con		* Testare un virus con
	cd /tmp		cd /tmp
Line 318:		Line 318:
	* Testare un link malare con:		* Testare un link malare con:
	echo "http://www.ianfette.org/" \| swaks -f nome.cognome@domain.dom -s smtpserver -t recipient@otherdomain.dom -au nome.cognome --body -		echo "http://www.ianfette.org/" \| swaks -f nome.cognome@domain.dom -s smtpserver -t recipient@otherdomain.dom -au nome.cognome --body -
	*[http://sanesecurity.com/support/signature-testing/ Signature Testing - Sanesecurity ClamAV: Phishing, Spam & Malware Signatures]
			* Testare come indicato in [http://sanesecurity.com/support/signature-testing/ Signature Testing - Sanesecurity ClamAV: Phishing, Spam & Malware Signatures]

	=Riferimenti=		=Riferimenti=
	*[http://www.iredmail.org/forum/post38275.html#p38275 Amavis does not parse exe in rar archive — iRedMail Support — iRedMail]		*[http://www.iredmail.org/forum/post38275.html#p38275 Amavis does not parse exe in rar archive — iRedMail Support — iRedMail]
			*[http://sanesecurity.com/support/signature-testing/ Signature Testing - Sanesecurity ClamAV: Phishing, Spam & Malware Signatures]

Gabriele.vivinetto at 12:19, 23 February 2017

2017-02-23T12:19:22Z

← Older revision		Revision as of 12:19, 23 February 2017
Line 318:		Line 318:
	* Testare un link malare con:		* Testare un link malare con:
	echo "http://www.ianfette.org/" \| swaks -f nome.cognome@domain.dom -s smtpserver -t recipient@otherdomain.dom -au nome.cognome --body -		echo "http://www.ianfette.org/" \| swaks -f nome.cognome@domain.dom -s smtpserver -t recipient@otherdomain.dom -au nome.cognome --body -
			*[http://sanesecurity.com/support/signature-testing/ Signature Testing - Sanesecurity ClamAV: Phishing, Spam & Malware Signatures]
	=Riferimenti=		=Riferimenti=
	*[http://www.iredmail.org/forum/post38275.html#p38275 Amavis does not parse exe in rar archive — iRedMail Support — iRedMail]		*[http://www.iredmail.org/forum/post38275.html#p38275 Amavis does not parse exe in rar archive — iRedMail Support — iRedMail]

Gabriele.vivinetto at 12:16, 23 February 2017

2017-02-23T12:16:27Z

← Older revision		Revision as of 12:16, 23 February 2017
Line 309:		Line 309:


	* ~~Testarlo~~ con		* Testare un virus con
	cd /tmp		cd /tmp
	wget http://www.eicar.org/download/eicarcom2.zip		wget http://www.eicar.org/download/eicarcom2.zip
Line 315:		Line 315:

	sudo tail -f /var/log/syslog		sudo tail -f /var/log/syslog

			* Testare un link malare con:
			echo "http://www.ianfette.org/" \| swaks -f nome.cognome@domain.dom -s smtpserver -t recipient@otherdomain.dom -au nome.cognome --body -

	=Riferimenti=		=Riferimenti=
	*[http://www.iredmail.org/forum/post38275.html#p38275 Amavis does not parse exe in rar archive — iRedMail Support — iRedMail]		*[http://www.iredmail.org/forum/post38275.html#p38275 Amavis does not parse exe in rar archive — iRedMail Support — iRedMail]

Gabriele.vivinetto: /* Configurazione Amavis */

2017-02-23T12:08:59Z

Configurazione Amavis

← Older revision		Revision as of 12:08, 23 February 2017
Line 78:		Line 78:
	$mailfrom_notify_spamadmin = "postmaster\@example.com";		$mailfrom_notify_spamadmin = "postmaster\@example.com";

	* Abilitare il rifiuto di ogni eseguibile anche ~~intrnamente~~ agli archivi zippati:		* Abilitare il rifiuto di ogni eseguibile anche internamente agli archivi zippati:
	sudoedit /etc/amavis/conf.d/20-debian_defaults		sudoedit /etc/amavis/conf.d/20-debian_defaults

Line 122:		Line 122:
	);		);
	#...		#...
			</pre>

			* Abilitare la scansione del body della mail per identificare i link malware con safebrowsing, decommentando la riga con MAIL:
			sudoedit /etc/amavis/conf.d/20-debian_defaults

			<pre>
			@keep_decoded_original_maps = (new_RE(
			qr'^MAIL$', # retain full original message for virus checking (can be slow)
	</pre>		</pre>

Gabriele.vivinetto: /* Configurazione Amavis */

2016-06-08T14:38:32Z

Configurazione Amavis

← Older revision		Revision as of 14:38, 8 June 2016
Line 46:		Line 46:
	==Configurazione Amavis==		==Configurazione Amavis==

	* Impostare i propri domini LOCALI:		* Impostare i propri domini LOCALI (*[http://gogs.info/books/debian-mail/chunked/antispam.amavis.html Building a mail server on Debian 6.0 - 6.3. Amavisd-new]):

	sudoedit /etc/amavis/conf.d/05-domain_id		sudoedit /etc/amavis/conf.d/05-domain_id

	~~#chomp~~($mydomain ~~= `head -n 1 /etc/mailname`);~~		@local_domains_acl = ( ".$mydomain", "domain2.com", "domain3.org" );
	~~$mydomain =~~ "~~example~~.com";

	* Abilitare la scansione antivirus:		* Abilitare la scansione antivirus:
Line 75:		Line 74:
	sudoedit /etc/amavis/conf.d/50-user		sudoedit /etc/amavis/conf.d/50-user

	$mailfrom_notify_admin = "postmaster\@~~$mydomain~~";		$mailfrom_notify_admin = "postmaster\@example.com";
	$mailfrom_notify_recip = "postmaster\@~~$mydomain~~";		$mailfrom_notify_recip = "postmaster\@example.com";
	$mailfrom_notify_spamadmin = "postmaster\@~~$mydomain~~";		$mailfrom_notify_spamadmin = "postmaster\@example.com";

	* Abilitare il rifiuto di ogni eseguibile anche ~~itenrnamente~~ agli archivi zippati:		* Abilitare il rifiuto di ogni eseguibile anche intrnamente agli archivi zippati:
	sudoedit /etc/amavis/conf.d/20-debian_defaults		sudoedit /etc/amavis/conf.d/20-debian_defaults

Line 115:		Line 114:
	qr'.\.(mim\|b64\|bhx\|hqx\|xxe\|uu\|uue)$'i, # banned extension - WinZip vulnerab.		qr'.\.(mim\|b64\|bhx\|hqx\|xxe\|uu\|uue)$'i, # banned extension - WinZip vulnerab.
	qr'.\.(ace)$'i, # ace archives are not exapndable, forbid them		qr'.\.(ace)$'i, # ace archives are not exapndable, forbid them
			qr'.\.(jar)$'i, # jar archives forbidden

	qr'^\.(exe-ms)$', # banned file(1) types		qr'^\.(exe-ms)$', # banned file(1) types

Gabriele.vivinetto: /* Installazione decompressori */

2016-06-08T14:22:20Z

Installazione decompressori

← Older revision		Revision as of 14:22, 8 June 2016
Line 22:		Line 22:
	<pre>		<pre>
	sudo apt-get update		sudo apt-get update
	sudo apt-get install zoo unzip arj lzop bzip2 p7zip-full p7zip-rar rpm2cpio cabextract ripole lhasa zip unzip arc liblz4-tool unace-nonfree		sudo apt-get install zoo unzip arj lzop bzip2 p7zip-full p7zip-rar rpm2cpio cabextract ripole lhasa zip unzip arc liblz4-tool unace-nonfree lrzip xzdec
	lrzip
	xzdec
	</pre>		</pre>

Gabriele.vivinetto: /* Configurazione Amavis */

2016-03-11T18:08:27Z

Configurazione Amavis

← Older revision		Revision as of 18:08, 11 March 2016
Line 47:		Line 47:

	==Configurazione Amavis==		==Configurazione Amavis==

			* Impostare i propri domini LOCALI:

			sudoedit /etc/amavis/conf.d/05-domain_id

			#chomp($mydomain = `head -n 1 /etc/mailname`);
			$mydomain = "example.com";

	* Abilitare la scansione antivirus:		* Abilitare la scansione antivirus:

Gabriele.vivinetto: /* Configurazione Amavis */

2016-03-11T17:56:45Z

Configurazione Amavis

← Older revision		Revision as of 17:56, 11 March 2016
Line 238:		Line 238:

	sudo adduser clamav amavis		sudo adduser clamav amavis
			sudo adduser amavis clamav

	== Configurazione Postfix==		== Configurazione Postfix==