From: Mustafa Akgul (akgul@Bilkent.EDU.TR)
Date: Thu 04 Jul 2002 - 20:05:35 EEST
Date: Sun, 30 Jun 2002 06:03:21 +0200
From: Mark Martinec <Mark.Martinec@ijs.si>
Subject: RELEASED amavisd-new-20020630
To: amavis-user@lists.sourceforge.net
June 30, 2002
amavisd-new-20020630 release notes
Since it seems like several people are adapting amavisd-new
in details to their requirements, and certain improvement requests
have much in common, I'm making available the 20020630 release,
shortly before leaving on vacation. Since this means my support
will be absent for the comming few weeks, and this release is
perhaps by few days premature, please consider it primarily a
development and new features release.
It is available at the usual location at:
http://www.ijs.si/software/amavisd/
(or ask Google about 'amavisd-new')
Having said that, it is still a fully functional and tested version,
and it is running in production at a couple of sites now. Also it is
my version of choice in view of dependability, having it running
at our site while I'm away. If you get into trouble, you can still go
back to amavisd-new-20020517 with which it is fully upwards compatible.
The main changes and features since amavisd-new-20020517 are:
- the code is thoroughly rearranged, interfaces cleaned, separated
into namespaces (packages), several sections generalized (e.g. lookups,
appending/editing header lines). The AV scanner and unpacking sections
are still mostly the same and compatible with amavisd, so whatever
improvements and new AV scanner support becomes available for amavisd,
applies almost without a change to amavisd-new;
- SMTP on the input side (used with Postfix and Exim) now talks ESMTP
(rfc2821) and not just SMTP (rfc821), including some SMTP extensions:
command pipelining (rfc2920), message size declarations (rfc1870), and
8bit-MIME transport (rfc1652). The main reason for this was the change
in recent Postfix varsions which can now do MIME transformations to support
7bit transports (implied by SMTP). To keep the transparent 8bit path and
avoid message transformation by MTA, amavisd-new needs to declare it does
present an 8bit-clean path. A side benefit is a little speedup in passing
chunks of mailing list addresses due to pipelining support;
- split certain previous amavisd.conf settings (variables)
into several variables or lookup tables:
* sender address for notifications:
$mailfrom -> $mailfrom_notify_admin, $mailfrom_notify_sender,
$mailfrom_notify_recip, $mailfrom_notify_spamadmin,
$mailfrom_to_quarantine
(which may also be empty to specify null reverse path <>,
which is most useful for sender notifications);
* administrator address for notifications:
$mailto -> %virus_admin, %spam_admin (per-sender lookups)
* %bypass_checks -> %bypass_virus_checks, %bypass_spam_checks
- supports SQL database lookups via Perl module DBI (for several
popular database types). Some examples are provided, if you need
other SQL lookups just modify the code by analogy. SQL lookups
are most useful for per-user settings of bypass_virus_checks,
bypass_spam_checks, spam thresholds etc. when the user base is large
and subgroups can not be identified through their (sub)domains.
Another use is for a dynamically changing settings without having
to restart amavisd-new;
- can optionally insert 'Received:' header if acting as a mail relay
(not with milter), does loop detection as required by rfc2821 section 6.2;
- notification messages now contain 'Date:' and 'Message-id:' headers;
- quarantined viruses contain X-AMaViS-Alert header line with names
of detected viruses;
- quarantined spam contains X-Spam-Status and X-Spam-Level header lines;
- optionally send spam admin notifications, which include the full
SpamAssassin spam report and message header;
- when started as root changes UID and GID to $daemon_user, $daemon_group;
- to facilitate startup scripts and debugging, supports few simple
command line parameters:
amavisd ... standard run: changes uid/gid and daemonizes
amavisd start ... same thing
amavisd debug ... starts with full debug level, stays attached
amavisd reload ... finds amavisd master process and sends it a HUP
amavisd stop ... finds amavisd master process and sends it a TERM
- some more (minor) configurable options:
$daemonize, $pid_file,
$replace_existing_extension, $localpart_is_case_sensitive
- no longer calls Convert::UUlib for uuencoded, xxencoded, and binhex
attachments. The first two are handled by MIME::Parser, the remaining
are likely to be handled by anti-virus scanners, especially when some
virus uses would use such encoding. The use of Convert::UUlib is dropped
because it was causing recent problems with garbling virus so that it
could no longer be recognized by AV scanners, and because the underlying
library does not seem very dependable. See the thread 'Amavisd passing
through VBS/VBSWG.gen@MM' from the beginning of June 2002 in amavis-user
mailing list archives;
- quarantine files now include internal amavis id in the file name,
instead of the process number; previous naming scheme could stumble
across a name contention on a busy system;
- only a recommendation: logging to syslog is now preferred to direc
logging to a file. It delegates file locking issues to syslog daemon,
where they are more effectively and reliably handled.
NOTE for Linux users: make sure you prefix the file name in syslogd.conf
with '-' tag to disable sync after every write; this is most necessary
for heavy logging files such as from MTA and amavisd-new;
- changed examples according to rfc2606 and recent complaints on the
postfix-users list.
CAVEATS:
- header rewriting is only available in SMTP-in/SMTP-out setup,
i.e. with Postfix and Exim, but not with sendmail milter;
- the SQL lookups are a very recent addition and not so well tested
as the rest of the program. Also since SQL lookups are supposed
to introduce per-user settings (e.g. spam thresholds), the code
still does not accomodate it, and spam thresholds of the first
recipient in a message affect the whole mesage;
- as Razor2 is still pretty much unstable, I left the spam_scan()
routine much as it was in the May version. Contributions welcome;
- as I ran out of my time for this release, I didn't prepare a
separate version without SpamAssassin and Razor 1.20 support,
so you will need to strip it out if you do not need it.
Similar for the required DBI Perl module. I'm very sorry for this;
- the time stamp used in the 'Date:' header in notifications,
and in an optional 'Received:' header, does not contain true time zone
offset, but -0000 instead (standard meaning for unknown). I did not want
to include a fat Perl package for handling time zones. For now just edit
the subroutine rfc2822_timestamp() if you want to change that;
- amavisd.conf settings $daemon_user and $daemon_group are not
automatically set by ./configure options. Please set them manually.
I would like to thank many people on the amavis-user list, on the
postfix-users list, and in private converations, who contributed
valuable ideas and improvements, and offered much appreciated
encouragements.
Mark
-- !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !! Mark Martinec (system manager) tel +386 1 4773-575 !! !! J. Stefan Institute, Jamova 39 fax +386 1 2519-385 !! !! SI-1000 Ljubljana, Slovenia mark.martinec@ijs.si !! !!!!!!!!!!!!!!!!!!!!!!!!!! http://www.ijs.si/people/mark/ !!!! - To unsubscribe, send mail to majordomo@postfix.org with content (not subject): unsubscribe postfix-users----------------------------------------------------------------------- Liste üyeliğiniz ile ilgili her türlü işlem için http://liste.linux.org.tr adresindeki web arayüzünü kullanabilirsiniz. Listeden çıkmak için: 'linux-request@linux.org.tr' adresine, "Konu" kısmında "unsubscribe" yazan bir e-posta gönderiniz. -----------------------------------------------------------------------