Simscan

Ramdisk

Use htop or other program to determine available memory for ramdisk (size=)

1. clamgid=$(test -z "$(cat /etc/passwd | grep ^clamav)" && id -g clamscan 2>/dev/null || id -g clamav 2>/dev/null) && echo $clamgid
2. qmailctl stop
3. mount -t tmpfs -o size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 myramdisk /var/qmail/simscan
4. ls -ld /var/qmail/simscan

  drwxr-x--- 2 clamscan root 6 Aug 17 13:28 /var/qmail/simscan

1. qmailctl start
2. df -h /var/qmail/simscan

  Filesystem      Size  Used Avail Use% Mounted on
  myramdisk       1.0G     0  1.0G   0% /var/qmail/simscan

1. cp /etc/fstab /etc/fstab.bak
2. echo "myramdisk /var/qmail/simscan tmpfs size=1024m,nodev,noexec,noatime,uid=$clamgid,gid=0,mode=0750 0 0" >> /etc/fstab

Make sure /etc/fstab file is okay before a reboot

1. cat /etc/fstab

Filtering

FEDORAREPO= Install Dspam, Rspam, SA userprefs

1. Begin Fedora Install CentOS 8 ***** ONLY *****

rel=`grep "release 8" /etc/*-release` if ! -z $rel then

rel=8
FEDORAREPO=--enablerepo=fedora
sites=( https://d2lzkl7pfhq30w.cloudfront.net/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/ 
http://mirror.math.princeton.edu/pub/fedora-archive/fedora/linux/releases/28/Everything/x86_64/os/ 
http://pubmirror1.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ 
https://pubmirror2.math.uh.edu/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ 
http://mirrors.kernel.org/fedora-buffet/archive/fedora/linux/releases/28/Everything/x86_64/os/ 
https://dl.fedoraproject.org/pub/archive/fedora/linux/releases/28/Everything/x86_64/os/ )
printf '%s\n%s\n%s\n%s\n%s\n%s\n' '[fedora]' 'name=Fedora 28' 'mirrorlist=file:///etc/yum.repos.d/fedoramirrors' \
       'enabled=0' 'gpgcheck=0' 'priority=100' > /etc/yum.repos.d/fedora28.repo
printf '%s\n%s\n%s\n%s\n%s\n%s\n' "${sites[0]}" "${sites[1]}" "${sites[2]}" "{$sites[3]}" "${sites[4]}" "${sites[5]}" \
       > /etc/yum.repos.d/fedoramirrors

else

  rel=7

fi

1. End Fedora Install CentOS 8 ***** ONLY *****

1. Begin DSpam DB Install, Skip if already installed

wget https://raw.githubusercontent.com/qmtoaster/dspam/master/dspamdb.sql if [ "$?" != "0" ]; then

  echo "Error downloading dspam db: ($?), exiting..."
  exit 1

fi MYSQLPW=

1. Get DB password for administrator and check validity.

if [ -z "$MYSQLPW" ]; then

  read -s -p "Enter MySQL/MariaDB admin password to create dspam database: " MYSQLPW

fi credfile=~/sql.cnf echo -e "[client]\nuser=root\npassword='$MYSQLPW'\nhost=localhost" > $credfile mysqladmin --defaults-extra-file=$credfile status > /dev/null 2>&1 if [ "$?" != "0" ]; then

  echo "Bad MySQL/MariaDB administrator password or MySQL/MariaDB is not running. Exiting..."
  exit 1

fi echo "" echo "Dropping Dspam database if it exists already..." mysql --defaults-extra-file=$credfile -e "use dspam" &> /dev/null [ "$?" = "0" ] && mysqldump --defaults-extra-file=$credfile dspam > dspam.sql \

              && mysql --defaults-extra-file=$credfile -e "drop database dspam" \
              && echo "dspam db saved to dspam.sql and dropped..."

1. Create dspam with correct permissions

echo "Creating Dspam database..." mysqladmin --defaults-extra-file=$credfile reload mysqladmin --defaults-extra-file=$credfile refresh mysqladmin --defaults-extra-file=$credfile create dspam mysqladmin --defaults-extra-file=$credfile reload mysqladmin --defaults-extra-file=$credfile refresh echo "Adding dspam users and privileges..." mysql --defaults-extra-file=$credfile -e "CREATE USER dspam@localhost IDENTIFIED BY 'p4ssw3rd'" mysql --defaults-extra-file=$credfile -e "GRANT ALL PRIVILEGES ON dspam.* TO dspam@localhost" mysqladmin --defaults-extra-file=$credfile reload mysqladmin --defaults-extra-file=$credfile refresh echo "Done with dspam database..." mysql --defaults-extra-file=$credfile dspam < dspamdb.sql mysqladmin --defaults-extra-file=$credfile reload mysqladmin --defaults-extra-file=$credfile refresh

1. End DSpam DB install

1. Rspam Installation:

wget https://rspamd.com/rpm-stable/centos-$rel/rspamd.repo -O /etc/yum.repos.d/rspamd.repo

dnf $FEDORAREPO --enablerepo=qmt-devel install dspam dspam-libs dspam-client dspam-mysql dspam-web rspamd systemctl enable --now dspam systemctl status dspam systemctl enable --now rspamd systemctl status rspamd

1. Update Simscan

dnf --enablerepo=qmt-devel update simscan

1. Up qmail limits

sed -i 's/softlimit -m.*\\/softlimit -m 256000000 \\/' /var/qmail/supervise/smtp/run qmailctl stop qmailctl start

1. SA user prefs

1. Create SA DB and load table into MySQL

cat >> ./sadb.sql << EOF CREATE TABLE userpref (

 username varchar(100) NOT NULL default ,
 preference varchar(30) NOT NULL default ,
 value varchar(100) NOT NULL default ,
 prefid int(11) NOT NULL auto_increment,
 PRIMARY KEY  (prefid),
 KEY username (username)

) ENGINE=InnoDB; EOF mysqladmin --defaults-extra-file=$credfile create spamassassin mysql --defaults-extra-file=$credfile -e "CREATE USER spamassassin@localhost IDENTIFIED BY 'p4ssw3rd'" mysql --defaults-extra-file=$credfile -e "GRANT ALL PRIVILEGES ON spamassassin.* TO spamassassin@localhost" mysqladmin --defaults-extra-file=$credfile reload mysqladmin --defaults-extra-file=$credfile refresh mysql --defaults-extra-file=$credfile spamassassin < sadb.sql

1. Read SA SQL DB

cat >> /etc/mail/spamassassin/sql.cf << EOF user_scores_dsn DBI:mysql:spamassassin:localhost:3306 user_scores_sql_password p4ssw3rd user_scores_sql_username spamassassin user_scores_sql_custom_query SELECT preference, value FROM _TABLE_ WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username = CONCAT('%',_DOMAIN_) ORDER BY username ASC EOF echo "include sql.cf" >> /etc/mail/spamassassin/local.cf

1. Add Per User Settings in SA SQL DB (Yours may differ)

echo "INSERT INTO userpref (username,preference,value) VALUES ('\$GLOBAL','required_hits','5.0');" | mysql -u root -p spamassassin echo "INSERT INTO userpref (username,preference,value) VALUES ('user@dom.com','required_hits','7.0');" | mysql -u root -p spamassassin echo "INSERT INTO userpref (username,preference,value) VALUES ('globalspam','required_hits','5.0');" | mysql -u root -p spamassassin echo "select * from userpref" | mysql -u root -p spamassassin

1. Tell SA Daemon To Use SQL DB

sed -i 's/SPAMDOPTIONS=".*"/SPAMDOPTIONS="--create-prefs -m10 -q -x -u clamscan"/' /etc/sysconfig/spamassassin

1. Bayesian Filtering

mkdir /etc/mail/spamassassin/.spamassassin chown -R clamscan:clamscan /etc/mail/spamassassin/.spamassassin cat >> /etc/mail/spamassassin/bayes.cf << EOF use_bayes 1 use_bayes_rules 1 bayes_auto_learn 1 bayes_path /etc/mail/spamassassin/.spamassassin/bayes bayes_auto_learn_threshold_spam 6.0 bayes_file_mode 0775 EOF echo "include bayes.cf" >> /etc/mail/spamassassin/local.cf systemctl restart spamassassin

1. Tell simscan, append to simcontrol, reload cdb

dspam=yes,rspam=yes,regex optional: dspamuser=globalspam (Otherwise the first envelope 'rcpt to' address is used) optional: spamuser=globalspam (Add to userprefs table) optional: remove spam_hits=* (Otherwise userprefs will not be used) qmailctl cdb

1. This is my configuration:

clam=yes,spam=yes,rspam=yes,dspam=yes,spam_passthru=yes,attach=.exe:.pif:.scr