3.前情提要：郵件伺服器Part-2：MailScanner+ClamAV+SpamAssassin
4.前情提要：郵件伺服器Part-3：MailScanner-mrtg
系統使用CentOS 5.1
郵件伺服器全系列：Postfix+Dovecot+SASL+Procmail+Postgrey+Mailscanner+Spamassassin+ClamAV+Mailscanner-mrtg+MailWatch+Openwebmail+MySPAM
郵件伺服器全系列：Postfix+Dovecot+SASL+Procmail+Postgrey+Mailscanner+Spamassassin+ClamAV+Mailscanner-mrtg+MailWatch+Openwebmail+MySPAM
Mailscanner-mrtg可偵測伺服器各項資源、效能並產生紀錄網頁
1.安裝SNMP
yum -y install net-snmp net-snmp-utils
2.SNMP的設定
vim /etc/snmp/snmpd.conf
com2sec local localhost public
com2sec mynetwork 192.168.0.0/24 public
group MyRWGroup v1 local
group MyROGroup v1 mynetwork
group MyRWGroup v2c local
view systemview included .1.3.6.1.2.1.1
view systemview included .1.3.6.1.2.1.25.1.1
view all included .1 80
access MyROGroup “” any noauth prefix all none none
access MyRWGroup “” any noauth prefix all all all
syslocation Unknown (edit /etc/snmp/snmpd.conf)
syscontact Root (configure /etc/snmp/snmp.local.conf)
pass .1.3.6.1.4.1.4413.4.1 /usr/bin/ucd5820stat
com2sec mynetwork 192.168.0.0/24 public
group MyRWGroup v1 local
group MyROGroup v1 mynetwork
group MyRWGroup v2c local
view systemview included .1.3.6.1.2.1.1
view systemview included .1.3.6.1.2.1.25.1.1
view all included .1 80
access MyROGroup “” any noauth prefix all none none
access MyRWGroup “” any noauth prefix all all all
syslocation Unknown (edit /etc/snmp/snmpd.conf)
syscontact Root (configure /etc/snmp/snmp.local.conf)
pass .1.3.6.1.4.1.4413.4.1 /usr/bin/ucd5820stat
3.啟動SNMP
/etc/rc.d/init.d/snmpd start
chkconfig snmpd on
chkconfig –list snmpd
chkconfig snmpd on
chkconfig –list snmpd
4.安裝MRTG
yum -y install mrtg
5.安裝Mailscanner-MRTG
下載http://sourceforge.net/project/showfiles.php?group_id=68848
rpm -ivh mailscanner-mrtg-0.10.00-1.noarch.rpm
6.修改Mailscanner-MRTG設定
vim /etc/MailScanner/mailscanner-mrtg.conf
修改下列參數:
MTA = postfix (設定使用的MTA)
Incoming Queue Dir = /var/spool/postfix/hold (收信佇列目錄)
Outgoing Queue Dir = /var/spool/postfix/incoming (寄信佇列目錄)
MailScanner Work Directory = /var/spool/MailScanner/incoming (MailScanner目錄)
Spool Directory = /var/spool/mailscanner-mrtg (MailScanner-mrtg目錄)
# MailScanner Work Directory及Spool Directory是使用df指令來取得磁碟空間，如果沒有獨立的分割區，可以直接改成/var
Use SNMP = yes (使用SNMP)
SNMP Community = public (SNMP設定)
#CPU負載、記憶體用量、網路流量需要使用SNMP
Incoming Queue Dir = /var/spool/postfix/hold (收信佇列目錄)
Outgoing Queue Dir = /var/spool/postfix/incoming (寄信佇列目錄)
MailScanner Work Directory = /var/spool/MailScanner/incoming (MailScanner目錄)
Spool Directory = /var/spool/mailscanner-mrtg (MailScanner-mrtg目錄)
# MailScanner Work Directory及Spool Directory是使用df指令來取得磁碟空間，如果沒有獨立的分割區，可以直接改成/var
Use SNMP = yes (使用SNMP)
SNMP Community = public (SNMP設定)
#CPU負載、記憶體用量、網路流量需要使用SNMP
vim /etc/mrtg/mailscanner-mrtg.cfg
Workdir: /var/www/html/mailscanner-mrtg (Mailscanner-MRTG網頁目錄)
IconDir: /mrtg/
WriteExpires: Yes
Interval: 5
Refresh: 300
Language: big5 (設定網頁使用的語系)
IconDir: /mrtg/
WriteExpires: Yes
Interval: 5
Refresh: 300
Language: big5 (設定網頁使用的語系)
7.產生index.html網頁
indexmaker –output=/var/www/html/mailscanner-mrtg/index.html /etc/mrtg/mailscanner-mrtg.cfg
8.測試參數檔
mrtg /etc/mrtg/mailscanner-mrtg.cfg
需重覆執行到沒有錯誤，如超過三次請檢查設定檔
9.完成後可以在以下看到流量:
備註：
◎如MRTG的圖示無法顯示，請修改httpd設定
vim /etc/httpd/conf.d/mrtg.conf
Allow from localhost改成Allow from all
◎如要記錄MailScanner處理速度(Processing Speed)，需修改MailScanner設定
vim /etc/MailScanner/MailScanner.conf
Log Speed = yes
MailWatch蒐集MailScanner郵件過濾的判定紀錄，可用於分析、管理規則的設定
1.安裝MYSQL及相關元件
yum install mysql mysql-server mod_auth_mysql perl-DBD-MySQL
2.安裝PHP及相關元件
yum install php php-gd php-pear php-mysql php-devel
3.設定啟動服務
chkconfig httpd on
chkconfig mysqld on
chkconfig mysqld on
4.啟動服務
service mysqld start
service httpd start
service httpd start
5.設定MYSQL密碼
/usr/bin/mysqladmin -u root password ‘xxxxxx’
6.設定PHP
vim /etc/php.ini
short_open_tag = On
safe_mode = Off
register_globals = Off
magic_quotes_gpc = On
magic_quotes_runtime = Off
session.auto_start = 0
safe_mode = Off
register_globals = Off
magic_quotes_gpc = On
magic_quotes_runtime = Off
session.auto_start = 0
7.安裝MailWatch
下載http://sourceforge.net/project/showfiles.php?group_id=87163
tar -zxvf mailwatch-1.0.4.tar.gz
8.建立資料庫
cd /usr/local/src/mailwatch-1.0.4/
mysql -p < create.sql
mysql -p < create.sql
產生mailscanner資料庫並建立資料表
9.修改MailWatch資料庫設定
vim MailWatch.pm
my($db_name) = ‘mailscanner’; (資料庫名稱)
my($db_host) = ‘localhost’; (資料庫位置)
my($db_user) = ‘root’; (使用者名稱)
my($db_pass) = ‘xxxxxx′; (使用者密碼)
my($db_host) = ‘localhost’; (資料庫位置)
my($db_user) = ‘root’; (使用者名稱)
my($db_pass) = ‘xxxxxx′; (使用者密碼)
10.複製設定檔
cp MailWatch.pm /usr/lib/MailScanner/MailScanner/CustomFunctions/
11.新增網頁使用者
mysql mailscanner -u root -p
Enter password: ******
mysql> INSERT INTO users VALUES (‘root’,md5(‘xxxxxx’),’root’,'A’,'0′,’0′,’0′,’0′,’0′);
11.設置網頁檔案
mv mailscanner /var/www/html/
12.修改網頁權限
cd /var/www/html/mailscanner
chown root:apache images
chmod ug+rwx images
chown root:apache images/cache
chmod ug+rwx images/cache
chown root:apache images
chmod ug+rwx images
chown root:apache images/cache
chmod ug+rwx images/cache
12.複製設定檔
cp conf.php.example conf.php
13.設定conf.php
vim conf.php
define(DB_TYPE, ‘mysql’);
define(DB_USER, ‘root’);
define(DB_PASS, ‘xxxxxx’);
define(DB_HOST, ‘localhost’);
define(DB_NAME, ‘mailscanner’);
define(DB_USER, ‘root’);
define(DB_PASS, ‘xxxxxx’);
define(DB_HOST, ‘localhost’);
define(DB_NAME, ‘mailscanner’);
14.設定MailScanner
vim /etc/MailScanner/MailScanner.conf
Quarantine User = root
Quarantine Group = apache (this should be the same group as your web server)
Quarantine Permissions = 0660
Quarantine Whole Message = yes
Quarantine Whole Message As Queue Files = no
Detailed Spam Report = yes
Include Scores In SpamAssassin Report = yes
Always Looked Up Last = &MailWatchLogging
Quarantine Group = apache (this should be the same group as your web server)
Quarantine Permissions = 0660
Quarantine Whole Message = yes
Quarantine Whole Message As Queue Files = no
Detailed Spam Report = yes
Include Scores In SpamAssassin Report = yes
Always Looked Up Last = &MailWatchLogging
15.設定黑白名單
vim /usr/local/src/mailwatch-1.0.4/SQLBlackWhiteList.pm
my($db_name) = ‘mailscanner’;
my($db_host) = ‘localhost’;
my($db_user) = ‘root’;
my($db_pass) = ‘!Q@W#E$R’;
my($db_host) = ‘localhost’;
my($db_user) = ‘root’;
my($db_pass) = ‘!Q@W#E$R’;
cp /usr/local/src/mailwatch-1.0.4/SQLBlackWhiteList.pm /usr/lib/MailScanner/MailScanner/CustomFunctions/
vim /etc/MailScanner/MailScanner.conf
Is Definitely Not Spam = &SQLWhitelist
Is Definitely Spam = &SQLBlacklist
Is Definitely Spam = &SQLBlacklist
16. 修改SpamAssassin設定
vim /etc/MailScanner/spam.assassin.prefs.conf
加入
bayes_path /etc/MailScanner/bayes/bayes
bayes_file_mode 0660
bayes_file_mode 0660
17.建立新的bayes目錄
mkdir /etc/MailScanner/bayes
chown root:apache /etc/MailScanner/bayes
chmod g+rws /etc/MailScanner/bayes
chown root:apache /etc/MailScanner/bayes
chmod g+rws /etc/MailScanner/bayes
18.複製已經存在的bayes資料庫
cp /root/.spamassassin/bayes_* /etc/MailScanner/bayes
chown root:apache /etc/MailScanner/bayes/bayes_*
chmod g+rw /etc/MailScanner/bayes/bayes_*
chown root:apache /etc/MailScanner/bayes/bayes_*
chmod g+rw /etc/MailScanner/bayes/bayes_*
19.測試SpamAssassin
spamassassin -D -p /etc/MailScanner/spam.assassin.prefs.conf –lint
20.重新啟動MailScanner
service MailScanner restart
備註：
◎網頁中文化
說明 http://csc.ocean-pioneer.com/modules/news/article.php?storyid=17
檔案 http://csc.ocean-pioneer.com/docum/mailscanner.tar.gz
下載後覆蓋即可，中文測試時有些設定功能會失效，可能是版本不同造成的。
檔案 http://csc.ocean-pioneer.com/docum/mailscanner.tar.gz
下載後覆蓋即可，中文測試時有些設定功能會失效，可能是版本不同造成的。
◎改網頁編碼
若顯示Big5中文會出現亂碼，可以在/etc/httpd/conf.d下建立設定檔案
vim /etc/httpd/conf.d/mailwatch.conf
Alias /mailscanner /var/www/html/mailscanner
<Location /mailscanner>
Order allow,deny
allow from all
AddDefaultCharset Big5
</Location>
<Location /mailscanner>
Order allow,deny
allow from all
AddDefaultCharset Big5
</Location>
本文来自:唉呦~MIS先生
看完了要说点啥么？