Note that an alternative to the following would be to install libcompress-zlib-perl
from
http://www.backports.org/instructions.html
cd /usr/local/src
If all goes well, the last thing you will see is: "Appending installation info to /usr/local/lib/perl/5.8.4/perllocal.pod" |
Make sure we are prepared for some of the new features:mkdir /var/lib/amavis/tmpmkdir /var/lib/amavis/dbmkdir /var/lib/amavis/varln -s /etc/amavis/amavisd.conf /etc/amavisd.confchown -R amavis:amavis /var/lib/amavischmod -R 750 /var/lib/amavis
|
In this section, we download source, make multiple backup copies of our 20030616-p10 files
and download a custom version of amavisd.conf (amavisd.conf-2.3.2) which is the configuration file we will work
with until we are ready to actually do the upgrade:
cd /usr/local/srcwget http://www.ijs.si/software/amavisd/amavisd-new-2.3.2.tar.gztar xzvf amavisd-new-2.3.2.tar.gzrm amavisd-new-2.3.2.tar.gzcp /usr/local/src/amavisd-new-2.3.2/amavisd /usr/sbin/amavisd-new-2.3.2cp /etc/amavis/amavisd.conf /etc/amavis/amavisd.conf-20030616cp /etc/amavis/amavisd.conf /etc/amavis/amavisd.conf-20030616-extra-backupcp /usr/sbin/amavisd-new /usr/sbin/amavisd-new-20030616cp /usr/sbin/amavisd-new /usr/sbin/amavisd-new-20030616-extra-backupcd /etc/amaviswget http://verchick.com/mecham/public_html/spam/amavisd.conf-2.3.2grep -vE "^$|^#" /etc/amavis/amavisd.conf > /etc/amavis/amavisd.conf-20030616-short
It's a good idea to make sure all of the external modules amavisd-new requires are up to date. You should exercise caution here because in order to solve dependencies, apt-get may upgrade Perl. This is at times a bad thing, but I personally have had no problem when it does. You may possibly need to reinstall any Perl modules you installed via CPAN if apt-get upgrades Perl. I strongly suggest you have a good backup of your hard drive before you continue. apt-get update
apt-get install file libarchive-tar-perl libarchive-zip-perl libcompress-zlib-perl
libconvert-tnef-perl libconvert-uulib-perl libberkeleydb-perl
libmailtools-perl libdb4.3-dev libmime-perl libnet-perl libnet-dns-perl libconvert-binhex-perl
libnet-server-perl libunix-syslog-perl arj nomarch unrar pax cabextract
|
$MYHOME
$mydomain
$myhostname
If you have not set $myhostname before, you should set it now. Example would be 'sfa.example.com'.
$daemon_user
$daemon_group
$pid_file
$lock_file
$enable_db (new setting)
$enable_global_cache (new setting)
Note: If you get errors when you first start your 2.3.2 program up, the first thing I
would do is disable those two new settings. However, if you leave these settings disabled
you will loose some new features of 2.x.x (like amavisd-nanny). It is also a known
problem that on a busy server, BerkeleyDB may run out of locker entries and as a result
amavisd-new will begin refusing mail, causing mail to back up in the Postfix deferred queue.
This problem appears to be solved by using libconvert-uulib-perl version 1.05.
$max_servers
$max_requests
@local_domains_maps = ( [ '.example.com', '.example2.com', '.example3.com' ] );
$relayhost_is_client (no need to bring this over)
$insert_received_line
$unix_socketname
$inet_socket_port
$inet_socket_bind
@inet_acl (use the new default for @inet_acl not the old one)
Uncomment @mynetworks (and the line below it) and change the IP addresses
in the second line to match "mynetworks" in your Postfix main.cf (postconf mynetworks)
$LOGFILE
$log_level
If you are running logcheck, you most likely will not want to be annoyed by every message amavisd-new blocks,
so edit this file using vi or the WinSCP editor:
vi /etc/logcheck/ignore.d.server/amavisd-new
At the bottom, you will find the text:
amavis\[[0-9]+\]: +(\([-0-9]+\) +)?(SPAM|Not-Delivered|Passed|BANNED|INFECTED)
Change this to:
amavis\[[0-9]+\]: +(\([-0-9]+\) +)?(Blocked|SPAM|Not-Delivered|Passed|BANNED|INFECTED)
There is a new $log_templ
read_l10n_templates
The Debian package maintainers created notification templates in
different languages in subdirectories in /etc/amavis. If you would like
to continue to use these templates, copy over the read_l10n_templates
parameter from your old config. If you choose not to use them, amavisd-new will
use the default (English) templates at the bottom the amavisd-new source code.
The external templates that are provided by Debian are based on version
20030616p10 so they are somewhat dated. If you would like to continue
to use external templates, but would like to update them to the versions
supplied with amavisd-new version 2.3.2, you can optionally
download the files from me. I provide instructions at the bottom of this page.
$final_virus_destiny
$final_banned_destiny
$final_spam_destiny
$final_bad_header_destiny
Rather that use the old $viruses_that_fake_sender_re, use the new @viruses_that_fake_sender_maps provided.
$virus_admin (and possibly $spam_admin) Add a new line below this, something like:
$banned_admin = "postmaster@\$mydomain";
$mailfrom_notify_admin
$mailfrom_notify_recip
$mailfrom_notify_spamadmin
$hdrfrom_notify_sender
$QUARANTINEDIR
$virus_quarantine_to
$banned_quarantine_to (new setting)
$bad_header_quarantine_to (new setting)
These new parameters must be configured. I suggest creating a new mailbox to send messages
containing banned attachments to, "banned\@$mydomain", and treat them in a similar manner
to spam messages. You can use the same mailbox for bad headers.
Set your 'banned' email client's SMTP server to your final destination server (your Exchange server)
so when you forward mail out of this mailbox, it will not pass through the spamfilter again.
$spam_quarantine_to
$X_HEADER_TAG
$X_HEADER_LINE
$defang_virus (new setting)
$defang_banned (new setting)
These will wrap up the message into an attachment and give the recipient a warning
about opening the attachment. It does not make the attachment safe to open. I personally do not defang, because I quarantine
these messages and personally review them. Messages that end up in a quarantine do not get defanged.
Use the new @keep_decoded_original_maps instead of the old $keep_decoded_original_re
$banned_filename_re has changed quite a bit. Add or remove items to meet your needs.
Now is a good time to review what it is you ban. @bypass_virus_checks_maps = (1);
if you wish to disable virus scanning.
$recipient_delimiter
$replace_existing_extension
$blacklist_sender_re and $whitelist_sender have been replaced with @score_sender_maps.
This
new method uses "soft" white or black listing by modifying the SpamAssassin score by the
numbers shown in the example. I suggest increasing the -3.0 negative scores (to something like
-10.0) to insure mail from these senders is received. If you have customized this
section, move your senders from the old $whitelist_sender section and add then here.
Place them below 'nobody@cert.org' => -3.0, and assign them scores as
you see fit. Negative scores will "soft" whitelist them, and positive scores can
be used to "soft" blacklist senders.
$MAXLEVELS
$MAXFILES
$MIN_EXPANSION_QUOTA
$MAX_EXPANSION_QUOTA
$MIN_EXPANSION_FACTOR
$MAX_EXPANSION_FACTOR
$path
$file
$gzip
$bzip2
$lzop
$uncompress
$unfreeze
$arc
$unarj
$unrar
$zoo
$lha
$cpio
$sa_timeout
$sa_local_tests_only
$sa_tag_level_deflt
$sa_tag2_level_deflt
$sa_kill_level_deflt
$sa_dsn_cutoff_level
$sa_quarantine_cutoff_level
This is a new setting that allows you delete high scoring spam that is destined to be quarantined.
If you previously used my
amavisd-new hack for deleting high scoring spam, this setting can be used
instead.
You may wish to uncomment "#$first_infected_stops_scan = 1;"
OK, save your file, then let's give it a try:amavisd-new stopcp /usr/sbin/amavisd-new-2.3.2 /usr/sbin/amavisd-newcp /etc/amavis/amavisd.conf-2.3.2 /etc/amavis/amavisd.confamavisd-new debug |
amavisd-new start
If things don't go well, you will want to revert to 20030616-p10 until your problems are solved:amavisd-new stopcp /usr/sbin/amavisd-new-20030616 /usr/sbin/amavisd-newcp /etc/amavis/amavisd.conf-20030616 /etc/amavis/amavisd.confamavisd-new start |
If all goes well, make a backup copy of our new configuration file:cp /etc/amavis/amavisd.conf /etc/amavis/amavisd.conf-2.3.2-backup |
apt-get upgrade or apt-get install amavisd-new
will clobber our new installation, either don't do either of these, or revert
back to 20030616-p10 during the upgrade, or use the instructions below to prevent
amavisd-new from upgrading. Either way, just make sure you keep backup
copies of each version of amavisd.conf and amavisd-new.
To prevent the old version of amavisd-new from installing over our new one,
place the package on hold:echo "amavisd-new hold" | dpkg --set-selections |
echo "amavisd-new install" | dpkg --set-selections|
Optional: If you would like to enable the external template files so you may customize them in the future (English only): vi /etc/amavis/amavisd.conf
and create or uncomment the line (careful, there may a another similar line): # read_l10n_templates('en_US', '/etc/amavis');
Then replace the outdated files with more recent ones, begin by making a backup copy of the old ones: cp -r /etc/amavis/en_US /etc/amavis/backup-en_US
Then remove the old files and install new files that I have created:
cd /etc/amavis/en_US
|