clamav + postfix

в сабжевой связке замечен косяк при пересылке писем с доками word
в логах clamav

Wed Aug 10 16:01:55 2016 -> fd[11]: Win.Exploit.CVE_2016_3316-1(37b7ca2261b536a9dafedf08954ddba8:344870) FOUND
Wed Aug 10 16:13:47 2016 -> fd[11]: Win.Exploit.CVE_2016_3316-1(1037b03d52448b35e8d3ace6eeda34ce:344866) FOUND
Wed Aug 10 16:16:50 2016 -> fd[11]: Win.Exploit.CVE_2016_3316-1(33a199d5f3f1f93f2573ed7b8769e8fa:344633) FOUND
Wed Aug 10 16:17:47 2016 -> fd[11]: Win.Exploit.CVE_2016_3316-1(565c447469f623c60fe1f44099528e84:344882) FOUND


Читать дальше →

ispmanager vs exim

ставим exim и подключаем spamassassin
exim валится с ошибкой.

 cat ./panic.log
2012-10-20 22:13:18 Exim configuration error in line 195 of /etc/exim/exim.conf:
  error in ACL: syntax error or unrecognized name after "set" in ACL modifier "set acl_m_spam_score_int = $spam_score_int"


открываем…

и меняем acl_m_spam_score_int на acl_m4

в итоге получается так.

.ifdef SA_ENABLE
        warn
            !authenticated = *
            hosts = !+relay_from_hosts
            condition = ${if < {$message_size}{100K}}
            spam       = SA_SPAMD_USER:true/defer_ok
            add_header = X-Spam_score: $spam_score\n\
                    X-Spam_score_int: $spam_score_int\n\
                    X-Spam_bar: $spam_bar\n\
                    X-Spam_report: $spam_report
            set acl_m4 = $spam_score_int
            logwrite = From $sender_address to $recipients X-Spam_score: $acl_m4.

        deny
            condition = ${if !eq{$acl_m4}{} {yes}{no}}
            condition = ${if >{$acl_m4}{SA_SCORE_REJECT} {yes}{no}}
            message = Content analisis tool detect spam (from $sender_address to $recipients). Contact SA_ABUSE_ADDR.
.endif

                accept