openSUSE Tumbleweed : Clamav , Mail Server

# zypper -n install clamav

# vi /etc/freshclam.conf

Line 88 : comment out and add below
#DatabaseMirror database.clamav.net
DatabaseMirror db.jp.clamav.net

# freshclam

ClamAV update process started at Tue Jun 23 15:13:28 2026
daily database available for download (remote version: 28039)
Time:    0.3s, ETA:    0.0s [========================>]   22.33MiB/22.33MiB
Time:    0.8s, ETA:    0.0s [========================>]    8.87KiB/8.87KiB
Testing database: '/var/lib/clamav/tmp.ee8d9d1540/daily.cvd' ...
Database test passed.
daily.cvd updated (version: 28039, sigs: 355472, f-level: 90, builder: svc.clamav-publisher)
main database available for download (remote version: 63)
Time:    0.8s, ETA:    0.0s [========================>]   84.95MiB/84.95MiB
Time:    0.3s, ETA:    0.0s [========================>]    8.87KiB/8.87KiB
Testing database: '/var/lib/clamav/tmp.ee8d9d1540/main.cvd' ...
Database test passed.
main.cvd updated (version: 63, sigs: 3287027, f-level: 90, builder: tomjudge)
bytecode database available for download (remote version: 339)
Time:    0.2s, ETA:    0.0s [========================>]  275.10KiB/275.10KiB
Time:    0.5s, ETA:    0.0s [========================>]    8.87KiB/8.87KiB
Testing database: '/var/lib/clamav/tmp.ee8d9d1540/bytecode.cvd' ...
Database test passed.
bytecode.cvd updated (version: 339, sigs: 80, f-level: 90, builder: nrandolp)
WARNING: Clamd was NOT notified: Can't connect to clamd through /run/clamav/clamd.sock: No such file or directory

# cd /home
# wget https://secure.eicar.org/eicar.com.txt
# clamscan --infected --remove --recursive /home
/home/eicar.com.txt: Eicar-Test-Signature FOUND
/home/eicar.com.txt: Removed.

----------- SCAN SUMMARY -----------
Known viruses: 3627878
Engine version: 1.5.2
Scanned directories: 10
Scanned files: 10
Infected files: 1
Data scanned: 23.96 KiB
Data read: 12.15 KiB (ratio 1.97:1)
Time: 10.014 sec (0 m 10 s)
Start Date: 2026:06:23 15:18:38
End Date:   2026:06:23 15:18:49

# mkdir -p /srv/www/system

# cd /srv/www/system

Create clamscan.sh in /srv/www/system with the following contents
# vi /srv/www/system/clamscan.sh

Describe the following
#!/bin/bash
PATH=/usr/bin:/bin
# excludeopt setup
excludelist=/srv/www/system/clamscan.exclude
if [ -s $excludelist ]; then
for i in `cat $excludelist`
do
if [ $(echo "$i"|grep \/$) ]; then
i=`echo $i|sed -e 's/^\([^ ]*\)\/$/\1/p' -e d`
excludeopt="${excludeopt} --exclude-dir=$i"
else
excludeopt="${excludeopt} --exclude=$i"
fi
done
fi
# signature update
freshclam
# virus scan
clamscan --recursive --remove ${excludeopt} /

# chmod 700 clamscan.sh

# echo "/sys/" >> /srv/www/system/clamscan.exclude
# echo "/proc/" >> /srv/www/system/clamscan.exclude
# echo "/.snapshots/" >> /srv/www/system/clamscan.exclude

# crontab -e
0 1 * * * /srv/www/system/clamscan.sh > /dev/null 2>&

# /srv/www/system/clamscan.sh

# zypper -n install postfix

# vi /etc/postfix/main.cf

Line 100：Hostname specification
myhostname = mail.[domain]

Line 107：Domain Name Specification
mydomain = [domain]

Line 122：Uncomment
myorigin = $mydomain

Line 136：Uncomment
inet_interfaces = all

Line 184： Uncomment
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain

Line 286：Unlock comments and add to your own network
mynetworks = 127.0.0.0/8, 192.168.11.0/24

Line 443：Unlock comments and switch to Maildir format
home_mailbox = Maildir/

# Add to the last line
# Limit mailbox size as needed (example below: 1 GB)
mailbox_size_limit = 1073741824
# Limit the size of sent and received emails as needed (example below: 10MB)
message_size_limit = 10485760
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $myhostname
smtpd_recipient_restrictions = permit_mynetworks, permit_auth_destination, permit_sasl_authenticated, reject

# systemctl start postfix
# systemctl enable postfix

# firewall-cmd --add-service=smtp --permanent
success
# firewall-cmd --reload
success

# zypper -n install dovecot

# vi /etc/dovecot/dovecot.conf

Per Line 25 : Additional (if not listening on IPv6)
listen = *

Per Line 46 : Comment
#  mail_inbox_path = ~/Maildir/.INBOX

# Add to the last line
service auth {
  unix_listener /var/spool/postfix/private/auth {
    mode = 0666
    user = postfix
    group = postfix
  }
}

# systemctl start dovecot
# systemctl enable dovecot
Created symlink /etc/systemd/system/multi-user.target.wants/dovecot.service → /usr/lib/systemd/system/dovecot.service.

# firewall-cmd --add-service={pop3,imap} --permanent
success
# firewall-cmd --reload
success

# mkdir -p /etc/skel/Maildir/{new,cur,tmp}
# chmod -R 700 /etc/skel/Maildir/
# echo "~/Maildir/"> /etc/skel/.forward
# chmod 600 /etc/skel/.forward

# mkdir -p /home/huong/Maildir/{new,cur,tmp}
# chown -R huong:huong /home/huong/Maildir/
# chmod 700 /home/huong/Maildir
# chmod 700 /home/huong/Maildir/{new,cur,tmp}

# zypper -n install mailx

# echo 'export MAIL=$HOME/Maildir' >> /etc/profile.d/mail.sh

# firewall-cmd --add-port=587/tcp --permanent
# firewall-cmd --reload

# zypper install https://www.rpmfind.net/linux/opensuse/tumbleweed/repo/oss/x86_64/clamav-milter-1.5.2-2.2.x86_64.rpm
# systemctl start clamd
# systemctl enable clamd
Created symlink '/etc/systemd/system/multi-user.target.wants/clamd.service' → '/usr/lib/systemd/system/clamd.service'.

# vi /etc/clamav-milter.conf

Line 19 : Add
MilterSocketMode 660


Line 37 : Add as a comment below
#User vscan
User postfix

Per Line 167 : Add
OnInfected Blackhole

Per Line 189 : Add
AddHeader Yes

# systemctl start clamav-milter
 
# systemctl enable clamav-milter
Created symlink /etc/systemd/system/multi-user.target.wants/clamav-milter.service → /usr/lib/systemd/system/clamav-milter.service.

# vi /etc/postfix/main.cf

Add the following at the end
milter_default_action = tempfail
smtpd_milters = unix:/run/clamav/clamav-milter.sock
non_smtpd_milters = unix:/run/clamav/clamav-milter.sock

# groupadd clamilt
# usermod -G clamilt -a postfix

# systemctl restart postfix

# cd /srv/www/system/
# vi clamscan.exclude
/sys/
/proc/
/.snapshots　←　openSUSE is configured to take a large number of snapshots, so if you don't need them, set

# cd /srv/www/system/
# mv clamscan.sh clamscan.sh_bak
# vi clamscan.sh

#!/bin/bash

PATH=/usr/bin:/bin

MAILTO="<Any email address>"

# excludeopt setup
excludelist=/srv/www/system/clamscan.exclude
if [ -s $excludelist ]; then
for i in `cat $excludelist`
do
if [ $(echo "$i"|grep \/$) ]; then
i=`echo $i|sed -e 's/^\([^ ]*\)\/$/\1/p' -e d`
excludeopt="${excludeopt} --exclude-dir=^$i"
else
excludeopt="${excludeopt} --exclude=^$i"
fi
done
fi

# signature update
freshclam 2>&1 > /dev/null

# virus scan
CLAMSCANTMP=`mktemp`
#clamscan --recursive --remove ${excludeopt} / > $CLAMSCANTMP 2>&1
clamscan --recursive ${excludeopt} / > $CLAMSCANTMP 2>&1
[ ! -z "$(grep FOUND$ $CLAMSCANTMP)" ] && \

# report mail send
grep FOUND$ $CLAMSCANTMP | mail -s "Virus Found in `hostname`" $MAILTO
rm -f $CLAMSCANTMP

# chmod 700 clamscan.sh

# zypper -n install spamassassin spamass-milter

# systemctl start spamd

# vi /etc/mail/spamassassin/v310.pre

Delete # at the beginning of the line per line 24
loadplugin Mail::SpamAssassin::Plugin::DCC

# cd /srv/www/system/

# vi spamassassin-update.sh
Describe the following
#!/bin/bash

cd /etc/mail/spamassassin
wget -q https://github.com/kittyfreak/spamassassin_user_prefs/archive/refs/heads/main.zip
[ $? -ne 0 ] && exit
unzip main.zip >/dev/null 2>&1
[ $? -ne 0 ] && exit
rm -f main.zip
mv spamassassin_user_prefs-main/user_prefs .
rm -rf spamassassin_user_prefs-main
diff user_prefs user_prefs.org > /dev/null 2>&1
if [ $? -ne 0 ]; then
cp user_prefs local.cf
echo "report_safe 0" >> local.cf
echo "rewrite_header Subject ***SPAM***" >> local.cf
# SpamAssassin restart
if [ -f /usr/bin/spamassassin ]; then
/usr/bin/spamassassin restart > /dev/null
else
systemctl restart spamd > /dev/null
fi
fi
cp user_prefs user_prefs.org

# chmod 700 /srv/www/system/spamassassin-update.sh
# /srv/www/system/spamassassin-update.sh

# ls -l /etc/mail/spamassassin

total 1520
-rw-r--r-- 1 root root   1649 Jan 20  2025 init.pre
-rw-r--r-- 1 root root 500636 Jun 23 16:16 local.cf
-rw-r--r-- 1 root root 500588 Apr 30  2023 user_prefs
-rw-r--r-- 1 root root 500588 Jun 23 16:16 user_prefs.org
-rw-r--r-- 1 root root   2262 Jun 23 16:15 v310.pre
-rw-r--r-- 1 root root   1168 Jan 20  2025 v312.pre
-rw-r--r-- 1 root root   2416 Jan 20  2025 v320.pre
-rw-r--r-- 1 root root   1237 Jan 20  2025 v330.pre
-rw-r--r-- 1 root root   1020 Jan 20  2025 v340.pre
-rw-r--r-- 1 root root   1315 Jan 20  2025 v341.pre
-rw-r--r-- 1 root root   1519 Jan 20  2025 v342.pre
-rw-r--r-- 1 root root   1266 Jan 20  2025 v343.pre
-rw-r--r-- 1 root root   1482 Jan 20  2025 v400.pre
-rw-r--r-- 1 root root   1118 Jan 20  2025 v401.pre

# crontab -e
0 2 * * * /var/www/system/spamassassin-update.sh > /dev/null 2>&1

# systemctl start spamass-milter

# systemctl enable spamass-milter
Created symlink /etc/systemd/system/multi-user.target.wants/spamass-milter.service → /usr/lib/systemd/system/spamass-milter.service.

# vi /etc/postfix/main.cf

Add the following
milter_default_action = tempfail
smtpd_milters = unix:/var/run/clamav-milter/clamav-milter.socket,unix:/run/spamass-milter/socket  ※If clamav-milter is already defined
non_smtpd_milters = unix:/var/run/clamav-milter/clamav-milter.socket,unix:/run/spamass-milter/socket  ※If clamav-milter is already defined

# systemctl restart postfix

# vi /etc/procmailrc

Describe the following
SHELL=/bin/bash
PATH=/usr/bin:/bin
DROPPRIVS=yes
MAILDIR=$HOME/Maildir
DEFAULT=$MAILDIR/
LOGFILE=$HOME/.procmail.log # Log Output Destination
VERBOSE=ON # Detailed Log Output

# vi /etc/logrotate.d/procmail

Describe the following
/home/*/.procmail.log {
    missingok
    nocreate
    notifempty
}

# vi /etc/postfix/main.cf

Per line 473 : addition
#mailbox_command = /some/where/procmail
#mailbox_command = /some/where/procmail -a "$EXTENSION"
mailbox_command = /usr/bin/procmail　←　Addition (to be linked to Procmail)

# systemctl restart postfix

# vi spamfolder-create

Describe the following
#!/bin/bash

for user in `ls /home`
do
    id -u $user > /dev/null 2>&1
    if [ $? -eq 0 ] && [ ! -d /home/$user/Maildir/.Spam/new ]; then
        mkdir -p /home/$user/Maildir/.Spam/new
        mkdir -p /home/$user/Maildir/.Spam/cur
        mkdir -p /home/$user/Maildir/.Spam/tmp
        chmod -R 700 /home/$user/Maildir/.Spam
        chown -R $user. /home/$user/Maildir/.Spam
        echo $user
    fi
done

# bash spamfolder-create
huong

# mkdir -p /etc/skel/Maildir/.Spam/{new,cur,tmp}
# chmod -R 700 /etc/skel/Maildir/.Spam

# vi /etc/procmailrc

Add the following to the end
# Emails identified as spam by SpamAssassin are delivered to a spam-only mailbox
:0
*^X-Spam-Flag: YES
$HOME/Maildir/.Spam/