Fedora45 : Clamav , Mail Server

# dnf -y install clamav clamd clamav-update

# vi /etc/clamd.d/scan.conf

Line 14
# Default: disabled
LogFile /var/log/clamd.scan　←　Uncomment
 
Line 77
# Default: disabled
PidFile /run/clamd.scan/clamd.pid　←　Uncomment
 
Line 103 : Add
# Path to a local socket file the daemon will listen on.
# Default: disabled (must be specified by a user)
#LocalSocket /run/clamd.scan/clamd.sock
#LocalSocket /run/clamd.scan/clamd.sock
LocalSocket /var/run/clamd.scan/clamd.sock
 
Line 233
# Run as another user (clamd must be started by root for this option to work)
# Default: don't drop privileges
#User clamscan　←Uncomment (to run with root privileges)

# vi /etc/freshclam.conf

Line 78 : Comment out and add under it
#DatabaseMirror database.clamav.net
DatabaseMirror db.jp.clamav.net
 
Per line 154 : Add
#NotifyClamd /path/to/clamd.conf
NotifyClamd /etc/clamd.d/scan.conf

# freshclam
ClamAV update process started at Sun Nov  8 13:25:33 2026
daily database available for download (remote version: 28176)
Time:    0.3s, ETA:    0.0s [========================>]   22.36MiB/22.36MiB
Testing database: '/var/lib/clamav/tmp.db6f6abbcb/clamav-2903aab0c7e2e50b9dec8e4f415ba219.tmp-daily.cvd' ...
Database test passed.
daily.cvd updated (version: 28176, sigs: 355854, f-level: 90, builder: svc.clamav-publisher)
main database available for download (remote version: 63)
Time:    0.8s, ETA:    0.0s [========================>]   84.95MiB/84.95MiB
Testing database: '/var/lib/clamav/tmp.db6f6abbcb/clamav-12a8942cdf6d04913d0980902924c59c.tmp-main.cvd' ...
Database test passed.
main.cvd updated (version: 63, sigs: 3287027, f-level: 90, builder: tomjudge)
bytecode database available for download (remote version: 339)
Time:    0.1s, ETA:    0.0s [========================>]  275.10KiB/275.10KiB
Testing database: '/var/lib/clamav/tmp.db6f6abbcb/clamav-99d7e479bcaccacdbab5a727daab01c8.tmp-bytecode.cvd' ...
Database test passed.
bytecode.cvd updated (version: 339, sigs: 80, f-level: 90, builder: nrandolp)
WARNING: Clamd was NOT notified: Can't connect to clamd through /var/run/clamd.scan/clamd.sock: No such file or directory

# systemctl start clamd@scan
# systemctl enable clamd@scan
Created symlink /etc/systemd/system/multi-user.target.wants/clamd@scan.service → /usr/lib/systemd/system/clamd@.service.

Operation check
# systemctl status clamd@scan
● clamd@scan.service - clamd scanner (scan) daemon
     Loaded: loaded (/usr/lib/systemd/system/clamd@.service; enabled; preset: disabled)
    Drop-In: /usr/lib/systemd/system/service.d
             └─10-timeout-abort.conf
     Active: active (running) since Sun 2026-11-08 13:26:54 JST; 21s ago
 Invocation: fa8b09e4a74b443e8f2080266c0e5f4d
       Docs: man:clamd(8)
             man:clamd.conf(5)
             https://www.clamav.net/documents/
   Main PID: 4109 (clamd)
      Tasks: 2 (limit: 4564)
     Memory: 943.3M (peak: 956.4M)
        CPU: 7.148s
     CGroup: /system.slice/system-clamd.slice/clamd@scan.service
             └─4109 /usr/sbin/clamd -c /etc/clamd.d/scan.conf

Nov 08 13:26:54 Lepard clamd[4109]: ELF support enabled.
Nov 08 13:26:54 Lepard clamd[4109]: Mail files support enabled.
Nov 08 13:26:54 Lepard clamd[4109]: OLE2 support enabled.
Nov 08 13:26:54 Lepard clamd[4109]: PDF support enabled.
Nov 08 13:26:54 Lepard clamd[4109]: SWF support enabled.
Nov 08 13:26:54 Lepard clamd[4109]: HTML support enabled.
Nov 08 13:26:54 Lepard clamd[4109]: XMLDOCS support enabled.
Nov 08 13:26:54 Lepard clamd[4109]: HWP3 support enabled.
Nov 08 13:26:54 Lepard clamd[4109]: OneNote support enabled.
Nov 08 13:26:54 Lepard clamd[4109]: Self checking every 600 seconds.

# cd /home
# wget https://secure.eicar.org/eicar.com.txt 
# clamscan --infected --remove --recursive /home
/home/eicar.com.txt: Eicar-Test-Signature FOUND
/home/eicar.com.txt: Removed.

----------- SCAN SUMMARY -----------
Known viruses: 3628258
Engine version: 1.4.6
Scanned directories: 5
Scanned files: 12
Infected files: 1
Data scanned: 0.01 MB
Data read: 0.00 MB (ratio 2.00:1)
Time: 10.415 sec (0 m 10 s)
Start Date: 2026:11:08 13:28:27
End Date:   2026:11:08 13:28:37

----------- SCAN SUMMARY -----------
Known viruses: 3628258
Engine version: 1.4.6
Scanned directories: 5
Scanned files: 12
Infected files: 1
Data scanned: 0.01 MB
Data read: 0.00 MB (ratio 2.00:1)
Time: 10.415 sec (0 m 10 s)
Start Date: 2026:11:08 13:28:27
End Date:   2026:11:08 13:28:37

# mkdir -p /var/www/system

# vi /var/www/system/clamscan.sh

Fill in the following
#!/bin/bash
PATH=/usr/bin:/bin
# excludeopt setup
excludelist=/var/www/system/clamscan.exclude
if [ -s $excludelist ]; then
for i in `cat $excludelist`
do
if [ $(echo "$i"|grep \/$) ]; then
i=`echo $i|sed -e 's/^\([^ ]*\)\/$/\1/p' -e d`
excludeopt="${excludeopt} --exclude-dir=$i"
else
excludeopt="${excludeopt} --exclude=$i"
fi
done
fi
# signature update
freshclam
# virus scan
clamscan --recursive --remove ${excludeopt} /

# chmod 700 /var/www/system/clamscan.sh

# echo "/sys/" >> /var/www/system/clamscan.exclude
# echo "/proc/" >> /var/www/system/clamscan.exclude

# crontab -e
0 1 * * * /var/www/system/clamscan.sh > /dev/null 2>&1

# /var/www/system/clamscan.sh

----------- SCAN SUMMARY -----------
Known viruses: 3628258
Engine version: 1.4.6
Scanned directories: 9382
Scanned files: 60228
Infected files: 0
Data scanned: 8193.93 MB
Data read: 3362.96 MB (ratio 2.44:1)
Time: 7674.794 sec (127 m 54 s)
Start Date: 2026:11:08 13:34:59
End Date:   2026:11:08 15:42:5

# dnf -y install postfix

# rpm -qa | grep postfix
postfix-3.11.7-1.fc45.x86_64

# systemctl enable postfix.service
Created symlink /etc/systemd/system/multi-user.target.wants/postfix.service → /usr/lib/systemd/system/postfix.service.

# cp -p /etc/postfix/main.cf `date '+/etc/postfix/main.cf.%Y%m%d'`
# cp -p /etc/postfix/master.cf `date '+/etc/postfix/master.cf.%Y%m%d'`

# vi /etc/postfix/main.cf

Add around line 100
#myhostname = virtual.domain.tld
myhostname = mail.[domain]
 
Add your domain name around line 107.
#mydomain = domain.tld
mydomain = [domain]
 
Per Line 122 : Uncomment
myorigin = $mydomain
 
Per Line 136 : Uncomment
inet_interfaces = all
 
Around line 139, commented out
#inet_interfaces = localhost
 
Comment out around line 187 and uncomment line 188.
#mydestination = $myhostname, localhost.$mydomain, localhost
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
 
Add around line 293
#mynetworks = 168.100.189.0/28, 127.0.0.0/8
#mynetworks = $config_directory/mynetworks
#mynetworks = hash:/etc/postfix/network_table
mynetworks = 192.168.11.0/24, 127.0.0.0/8　←192.168.11.0/24 should be adjusted to suit each individual environment.
 
Per Line 447 : Uncomment
Configure the email storage format.
#home_mailbox = Mailbox
home_mailbox = Maildir/　
 
Per line 454 : Uncomment
#mail_spool_directory = /var/mail
mail_spool_directory = /var/spool/mail　
 
Per Line 602 : Add
#smtpd_banner = $myhostname ESMTP $mail_name
#smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)
smtpd_banner = $myhostname ESMTP unknown
 
Add the following content to the last line
# Limit sent and received email size to 10MB
message_size_limit = 10485760
# Limit mailbox size to 1 GB
mailbox_size_limit = 1073741824
# SMTP Authentication Settings
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $mydomain
smtpd_recipient_restrictions = permit_mynetworks, permit_auth_destination, permit_sasl_authenticated, reject

# firewall-cmd --add-service=smtp --permanent
success
# firewall-cmd --reload
success

# systemctl start postfix

# dnf -y install dovecot

# cp -p /etc/dovecot/dovecot.conf `date '+ /etc/dovecot/dovecot.conf.%Y%m%d'`

# vi /etc/dovecot/dovecot.conf

Change the protocols around line 22 as follows:
protocols {
   imap = yes
#  lmtp = yes
   pop3 = yes
}
 
Per Line 28 : Change
#mail_path = ~/mail
mail_path = ~/Maildir
 
Per Line 30 : Add
auth_allow_cleartext = yes
auth_mechanisms = plain login

Per Line 48 : Change
#ssl = required
ssl = no

Add to the last line
service auth {                                                                                                                                                           
  # Postfix smtp-auth                                                                                                                                                    
  unix_listener /var/spool/postfix/private/auth {                                                                                                                        
     mode = 0666                                                                                                                                                          
     user = postfix                                                                                                                                                       
     group = postfix                                                                                                                                                      
   }                                                                                                                                                                      
}
# IPv4 only
listen = *

# systemctl enable dovecot.service
Created symlink /etc/systemd/system/multi-user.target.wants/dovecot.service → /usr/lib/systemd/system/dovecot.service.

# systemctl start dovecot.service

# firewall-cmd --permanent --add-service=pop3
# firewall-cmd --permanent --add-service=imap
# firewall-cmd --reload

# mkdir -p /etc/skel/Maildir/{new,cur,tmp}
# chmod -R 700 /etc/skel/Maildir/
# echo "~/Maildir/"> /etc/skel/.forward
# chmod 600 /etc/skel/.forward

# mkdir -p /home/huong/Maildir/{new,cur,tmp}
# chown -R huong:huong /home/huong/Maildir/
# chmod 700 /home/huong/Maildir
# chmod 700 /home/huong/Maildir/{new,cur,tmp}

# dnf -y install s-nail 
# echo 'export MAIL=$HOME/Maildir' >> /etc/profile.d/mail.sh

# useradd linux
# passwd linux
Change the password for the user "linux".
New password:
Retype new password:
passwd: all authentication tokens updated successfully.

# su - linux
$ mail linux@localhost
Subject: Test Mail
To: linux@localhost
test　mail
^D   ←　To exit the main text, press "Ctrl+D".
-------
(Preliminary) Envelope contains:
To: linux@localhost
Subject: Test Mail
Send this message [yes/no, empty: recompose]? y

$ mail
s-nail version v14.9.25.  Type `?' for help
/home/linux/Maildir: 1 message 1 new
▸N  1 linux@korodes.com     2026-11-08 16:16   17/516   "Test Mail                                                "
& 1
[-- Message  1 -- 17 lines, 516 bytes --]:
Date: Sun, 08 Nov 2026 16:16:05 +0900
To: linux@localhost
Subject: Test Mail
Message-Id: <20261108071605.385D78FA9AB@mail.korodes.com>
From: linux@korodes.com

test　mail

& q
Held 1 message in /home/linux/Maildir
You have mail in /home/linux/Maildir

# dnf -y install clamav-milter clamav-milter-systemd

# vi /etc/mail/clamav-milter.conf
Line 6
# Comment or remove the line below.
#Example　←　Add a # at the beginning of a line to comment it out.
 
Around lines 23-24: Addition
# Default: no default
#MilterSocket /run/clamav-milter/clamav-milter.socket
#MilterSocket inet:7357
MilterSocket /var/run/clamav-milter/clamav-milter.socket　←　Specify the UNIX socket name for clamav-milter
MilterSocketMode 660　←　Specify the access permissions for the UNIX socket of clamav-milter
 
Around line 98: Addition
# Default: no default
#ClamdSocket tcp:scanner.mydomain:7357
#ClamdSocket unix:/run/clamav/clamd.sock
ClamdSocket unix:/var/run/clamd.scan/clamd.sock　←　Specify the Clam AntiVirus UNIX socket name (matching the LocalSocket option in /etc/clamd.d/scan.conf)

Around line 171: Add
# Action to be performed on infected messages
# Default: Quarantine
#OnInfected Quarantine
OnInfected Blackhole　←　Virus infection emails discarded

Around line 193: Add
#AddHeader Replace
AddHeader Yes　←　Output a message in the email header indicating that a virus check has been performed.
 
Line 253: Remove comments and set the log output destination to email logs.
# Default: LOG_LOCAL6
LogFacility LOG_MAIL

# systemctl start clamav-milter
# systemctl enable clamav-milter

# vi /etc/postfix/main.cf
Add the following
milter_default_action = tempfail
smtpd_milters = unix:/var/run/clamav-milter/clamav-milter.socket
non_smtpd_milters = unix:/var/run/clamav-milter/clamav-milter.socket

# usermod -G clamilt -a postfix

# systemctl restart postfix

# dnf -y install spamassassin spamass-milter-postfix

# systemctl start spamassassin

# vi /etc/mail/spamassassin/v310.pre

Remove the # at the beginning of line 24.
loadplugin Mail::SpamAssassin::Plugin::DCC

# cd /var/www/system

# vi spamassassin-update.sh

Fill in the following
#!/bin/bash

cd /etc/mail/spamassassin
wget -q https://github.com/kittyfreak/spamassassin_user_prefs/archive/refs/heads/main.zip
[ $? -ne 0 ] && exit
unzip main.zip >/dev/null 2>&1
[ $? -ne 0 ] && exit
rm -f main.zip
mv spamassassin_user_prefs-main/user_prefs .
rm -rf spamassassin_user_prefs-main
diff user_prefs user_prefs.org > /dev/null 2>&1
if [ $? -ne 0 ]; then
cp user_prefs local.cf
echo "report_safe 0" >> local.cf
echo "rewrite_header Subject ***SPAM***" >> local.cf

if [ -f /etc/rc.d/init.d/spamassassin ]; then
/etc/rc.d/init.d/spamassassin restart > /dev/null
else
systemctl restart spamassassin > /dev/null
fi
fi
cp user_prefs user_prefs.org

# chmod 700 /var/www/system/spamassassin-update.sh
# /var/www/system/spamassassin-update.sh

# ls -l /etc/mail/spamassassin
total 1644
drwxr-xr-x 2 root root     40 Nov  9 13:35 channel.d
-rw-r--r-- 1 root root   1649 Jul 17 09:00 init.pre
-rw-r--r-- 1 root root 500636 Nov  9 13:37 local.cf
drwx------ 2 root root      6 Jul 17 09:00 sa-update-keys
-rw-r--r-- 1 root root     62 Jul 17 09:00 spamassassin-default.rc
-rwxr-xr-x 1 root root     39 Jul 17 09:00 spamassassin-helper.sh
-rw-r--r-- 1 root root     55 Jul 17 09:00 spamassassin-spamc.rc
-rw-r--r-- 1 root root 500588 Apr 30  2023 user_prefs
-rw-r--r-- 1 root root 500588 Nov  9 13:37 user_prefs.org
-rw-r--r-- 1 root root   2262 Nov  9 13:36 v310.pre
-rw-r--r-- 1 root root   1168 Jul 17 09:00 v312.pre
-rw-r--r-- 1 root root   2416 Jul 17 09:00 v320.pre
-rw-r--r-- 1 root root   1237 Jul 17 09:00 v330.pre
-rw-r--r-- 1 root root   1020 Jul 17 09:00 v340.pre
-rw-r--r-- 1 root root   1315 Jul 17 09:00 v341.pre
-rw-r--r-- 1 root root   1519 Jul 17 09:00 v342.pre
-rw-r--r-- 1 root root   1266 Jul 17 09:00 v343.pre
-rw-r--r-- 1 root root   1482 Jul 17 09:00 v400.pre
-rw-r--r-- 1 root root   1118 Jul 17 09:00 v401.pre
-rw-r--r-- 1 root root   1145 Jul 17 09:00 v402.pre

# crontab -e
0 2 * * * /var/www/system/spamassassin-update.sh > /dev/null 2>&1

# systemctl start spamass-milter

# systemctl enable spamass-milter
Created symlink /etc/systemd/system/multi-user.target.wants/spamass-milter.service → /usr/lib/systemd/system/spamass-milter.service.

# vi /etc/postfix/main.cf

Add the following
milter_default_action = tempfail
smtpd_milters = unix:/var/run/clamav-milter/clamav-milter.socket,unix:/run/spamass-milter/postfix/sock  ※If clamav-milter is already defined
non_smtpd_milters = unix:/var/run/clamav-milter/clamav-milter.socket,unix:/run/spamass-milter/postfix/sock  ※If clamav-milter is already defined

# systemctl restart postfix

# vi /etc/procmailrc
SHELL=/bin/bash
PATH=/usr/bin:/bin
DROPPRIVS=yes
MAILDIR=$HOME/Maildir
DEFAULT=$MAILDIR/
# Log output destination
LOGFILE=$HOME/.procmail.log
# Detailed Log Output
VERBOSE=ON

# vi /etc/logrotate.d/procmail
In the following
/home/*/.procmail.log {
    missingok
    nocreate
    notifempty
}

# vi /etc/postfix/main.cf

Per Line 478 : add
#mailbox_command = /some/where/procmail
#mailbox_command = /some/where/procmail -a "$EXTENSION"
mailbox_command = /usr/bin/procmail　←　Add (make it work with Procmail)

# systemctl restart postfix

# vi spamfolder-create

Fill in the following
#!/bin/bash

for user in `ls /home`
do
    id -u $user > /dev/null 2>&1
    if [ $? -eq 0 ] && [ ! -d /home/$user/Maildir/.Spam/new ]; then
        mkdir -p /home/$user/Maildir/.Spam/new
        mkdir -p /home/$user/Maildir/.Spam/cur
        mkdir -p /home/$user/Maildir/.Spam/tmp
        chmod -R 700 /home/$user/Maildir/.Spam
        chown -R $user:$user /home/$user/Maildir/.Spam
        echo $user
    fi
done

# bash spamfolder-create
huong
linux
smbuser

# mkdir -p /etc/skel/Maildir/.Spam/{new,cur,tmp}
# chmod -R 700 /etc/skel/Maildir/.Spam

# vi /etc/procmailrc
Add the following to the end
# Emails identified as spam by SpamAssassin are delivered to a spam-only mailbox
:0
*^X-Spam-Flag: YES
$HOME/Maildir/.Spam/