Bug 82017

SpamAssassin, touted as one of the best SPAM finders, is already included with
Red Hat Linux 8.0.  I have seen, through my use of SpamAssassin, that it
captures most virus-attached emails and flags them as SPAM.

We are currently adding spamassassin and that seems to work pretty good.
Chip, can you take over RFE handling on this and decide if more rpm packages
should be added into future products in addition to spamas.?

Thanks,

Florian La Roche

Just casting my vote on this RFE!

I'm also under the impression that virus scanning software is becoming
increasingly vital for Linux servers... As more and more Linux servers are
posing as file servers for the aparently more voulnerable windows clients and
that also makes it more vital to have a solution in place to secure the shared
files from viral infections. Of course this can be done at corporate level by
purchasing proprietary antivirus software for Linux, Red Hat would certainly
benefit from having an open source alternative shipped with it! :o)

I would also like to see some sort of anti-virus/anti-attachment integrated into
the distribution. We are currently using mimedefang and hope to tie it in with
spam-assassin and clam to help cut down our virus checking problems. Having
these in official RPMS would help us sell it to management better (heck it would
get us instant approval for RHE).

Seconded, I really would like to see an AV solution prepackaged in Fedora
Core/RHEL. clamav/mailscanner is what comes to mind in my case.

Just my vote for this RFE...

I absolutely agree that we need some antivirus/antiattachment stuff
included in the distro... clamav, clamdmail and/or amavis perhaps?!?

What's the status on this anyway? Any chance to see some of this any
time soon???

Please move this bug to devel (i'm not powerful enough to do so), so
that it will continue to be an outstanding RFE until somebody actually
takes the time to include it in the distro!!!

I completely agree to adding mailscanner and clamav (in addition to
the already packaged spamassassin) as official rpms.

This would make the setup and justification of Red Hat linux email
servers in hetergenious environments much easier.

    SpamAssassin can be easily integrated with sendmail. To do so with
postfix I changed in /etc/postfix/master.cf the following:
--- cut ---
#smtp   inet  n       -       n       -       -       smtpd
smtp    inet  n       -       n       -       -       smtpd
        -o content_filter=postfixsa:
postfixsa unix   -   n       n       -       -       pipe
        flags=Rq user=spamassassin:spamassassin
argv=/etc/postfix/filters/safilter -f ${sender} -- ${recipient}
--- cut ---
and added user and group spamassassin:spamassassin. Now spamassassin
works for the whole system and stores it's data in /home/spamassassin
(should be /var/something I think).
    It would be nice to have this at least as a note somewhere in the
spamassassin's docs. I don't know if this is the best way to do this,
but it seems to me that sendmail is much better supported than
postfix(which looks better to me). Antivirus software like clamav
would be great to have too...

There's also Amavis
http://www.amavis.org/
as alternative to mail scanner. I don't know which is better.

Both amavis and clamav are already packaged by other fedora
repositories, but they aren't integrated with postfix.
Would be great to have more integration, ideally only a on/off
parameter in a postfix/sendmail config file to enable server-side
spamassasin and clamav.

How about just making clamav available (based on the clamav contrib.
available from here http://crash.fce.vutbr.cz/crash-hat/1/clamav/ -
these are of much higher quality and much easier to use than what was
available on fedora.us last time i checked) Then simply include a
procmail based scanner for a start... trashscan, clamassassin or
something like that. 

    I use sagator (http://sagator.sf.net/) at one machine and it 
works well. The project seems quite alive and quite promising - there 
are versions for FC1 and FC2 in yum repository maintained by the 
author. It integrates well with postfix, clamav(clamlib/clamd) and 
spamassassin, runs in chrooted jail and has %trigger-s which does add 
needed packages to the chrooted jail like zoo when the package is 
installed. The program is written in Python and C. 

*** Bug 89827 has been marked as a duplicate of this bug. ***

    I use sagator with all my mail servers now. The only problem for
now is the lack of good documentation, but it does full postfix/mrtg
integration itself (+ rpm triggers). The new version (0.5.4 from
2004-11-29) is faster, adds /etc/yum.repos.d/sagator.repo (autoupdate)
and is available for FC1, FC2 and FC3. It can drop/quarantine mail
with attachments based on their file extension and mime type (I got
lot's of .wav executables these days). Works with bouth postfix and
sendmail (should work with any MTA).
    What about reassigning this bug to FC4/devel? I voute for sagator,
amavis/amavis-new and clamav for inclusion.

If there was to be some packaging of AV, Anti-Spam, etc into FC and
RHEL  (and there appears to be some movement in this direction with
SpamAssassin etc) it would be best to have it be a complete solution.
 Ie, something with an easy to use management interface.

Others have pointed out a number of different solutions.  I personally
have experience with sendmail, ClamAV, MailScanner and SpamAssassin. 
But from a total package perspective this might not be the best
combination.  A recent article in Linux Journal (or was it Linux
Magazine?) regarding Maia Mailguard
(http://www.renaissoft.com/projects/maia/) suggests that a
amavisd-new, ClamAV, sendmail, and Maia suite might provide a more
complete and user/admin friendly package.

Probably the best way of getting this sort of suite into a future FC
release would be to start creating (or aggregating/tweaking existing)
RPM packages.  Then deploy yum and apt repositories for this package
set.  After a reasonable period of user testing it could be proposed
for inclusion into Feodra Core or Fedora Extras.

Fedora Extras now contains great clamav packages along with optional
spamassassin helpers like pyzor, razor and dcc.  More anti-spam tools can be
added to Extras if you join the project and help in packaging.