后缀连接到clamav-milter套接字的权限问题

Question

我在FreeBSD 11.2上运行后缀-3.3.1_1，1和clamav-milter clamav-milter-0.100.1_1 .后缀和milter被设置为通过套接字进行通信。我不能让milter和postfix一起工作，我一定是忽略了一些东西。

在我的maillog中，我得到了以下消息：

xSep 21 11:33:57 mail2后缀/smtpd85759：警告:连接到Milter :/var/run/mail2/clmilter.sock:权限被拒绝

后缀以用户身份运行:组后缀:后缀。Clamav以clamav的形式运行:clamav。(当我将clamav作为后缀运行时，问题仍然存在。)用户后缀也是clamav组的成员。

套接字本身的权限是：

srwxrwxrwx 1 clamav clamav 0B 9月21日11:46:26 2018 /var/run/clamav/clmilter.sock

在clamav-milter.conf中，我运行默认值，将用户更改为后缀无效：

MilterSocket unix:/var/run/clamav/clmilter.sock

# MilterSocket unix:/var/spool/postfix/var/run/clamav/clmilter.sock
# MilterSocket inet:8890

# ClamdSocket unix:/var/run/clamav/clmilter.sock

#MilterSocket inet:7357

# Define the group ownership for the (unix) milter socket.
# Default: disabled (the primary group of the user running clamd)
#MilterSocketGroup postfix

# Sets the permissions on the (unix) milter socket to the specified mode.
# Default: disabled (obey umask)
#MilterSocketMode 660

# Remove stale socket after unclean shutdown.
#
# Default: yes
FixStaleSocket yes

# Run as another user (clamav-milter must be started by root for this option to work)
#
# Default: unset (don't drop privileges)
User postfix

在rc.conf中

clamav_milter_enable="YES"
clamav_milter_socket="/var/run/clamav/clmilter.sock"
clamav_milter_socket_user="postfix"
clamav_milter_socket_group="postfix"

在后缀的main.cf中，这也是相当标准的：

smtpd_milters = unix:/var/run/clamav/clmilter.sock inet:127.0.0.1:8891

Answer 1

我忘记了这个问题，但我已经让它工作了一段时间，所以现在我是如何配置它的。

后缀和Clamav的版本：

clamav-0.102.2,1后缀-3.5.1，1

在/usr/local/etc/后缀/main.cf中，端口7357上有clamav-milter通过inet：

smtpd_milters = inet:127.0.0.1:7357 inet:127.0.0.1:8891
milter_default_action = accept

in /usr/local/etc/clamav-milter.conf：

MilterSocket inet:7357
FixStaleSocket yes
PidFile /var/run/clamav/clamav-milter.pid
ClamdSocket unix:/var/run/clamav/clamd.sock

in /usr/local/etc/cl.conf：

PidFile /var/run/clamav/clamd.pid
LocalSocket /var/run/clamav/clamd.sock
User clamav

在/etc/rc.conf中：

clamav_freshclam_enable="YES"
clamav_clamd_enable="YES"
clamav_milter_enable="YES"
clamav_milter_socket="inet:7357"
clamav_milter_socket_mode=777

Answer 2

默认情况下，FreeBSD后缀将运行到/var/spool/postfix。更改您的smtpd_milters行，使该目录成为您的根目录。例如：

smtpd_milters = unix:/clamav/clamav-milter.ctl, ...