Re: I want to use ClamAV on one computer to scan mail received by Postfix on another computer

Matus UHLAR - fantomas via clamav-users <[email protected]> Sat, 27 Sep 2025 14:41:50 +0200
Newsgroups gmane.comp.security.virus.clamav.user
Message-ID <[email protected]>
On 26.09.25 14:45, Paul Kosinski via clamav-users wrote:
> You said, "I believe configuring milter is much easier and safer than 
> playing with external programs like you described."
>
> Maybe, but the ability to combine separate external programs to accomplish 
> a task is not "playing"; rather it is part of the point of flexible 
> systems like GNU/Linux.
>
> If Postfix and its Milter have builtin all the power of Procmail (with its 
> Regex based rules), Formail, and Perl (with its CPAN modules), then that 
> power is well hidden in the many, many pages of Postfix docs.

It's funny when you first praise possibility to combine separate programs 
but immediately after that you want to do everything with one program.

> Thus, I have added my own Perl scripts, and, of course, lots of Procmail 
> Regexes to accomplish exactly what I want in email post-processing without 
> having to try to find some Postfix option that might be adequate.

Of course you can do (nearly) everything by yourself, but in most cases people 
will wonder why not use existing options...

Postfix and multiple milters (clamav-milter, amavisd-milter, milter-regex) 
support much of what you describe.  However, this discussion belongs to 
postfix and not clamav mailing list.

> For example, using Procmail, I can deliver a blind copy of an inbound mail 
> with a particular "To:" AND "From:" to another local user (e.g., an 
> archive) at the last moment before the LDA is invoked.  (IIRC, Milter only 
> operates "before queue".)

> On the other hand, using just Postfix options to strip "Received:" headers 
> from outbound mail (to avoid revealing LAN details) while preserving them 
> on inbound mail (to reveal spam and malware sources) was unexpectedly 
> tricky.
>
> Finally, our Postfix configuration has long used significantly modified 
> main.cf and master.cf, not to mention transport(.db) and a frequently 
> updated valias(.db).  Furthermore, setting up the main.cf was certainly 
> not what I would call "easy", as the number of its options it has puts the 
> number of ClamAV options to shame.


>On Tue, 23 Sep 2025 09:29:25 +0200
>Matus UHLAR - fantomas via clamav-users <[email protected]> wrote:
>
>> On 22.09.25 16:19, Paul Kosinski via clamav-users wrote:
>> >I don't know if Postfix even had builtin Milter support when I first set up my email.
>>
>> correct, milter support was added to posftix in 2006 according to changelog.
>>
>> > But in any case, today's Milter features (and specs) are much more
>> > complicated than I really need (since it's an email system for a couple of
>> > tiny domains).
>>
>> I believe configuring milter is much easier and safer than playing with
>> external programs like you described.
>_______________________________________________
-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Despite the cost of living, have you noticed how popular it remains?
_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat