54016ddaf4
Something having to do with passing a file descriptor over spamd's Unix socket causes the ClamAV milter to fail. The milter says "ERROR: Unknown reply from clamd," and running strace on spamd reveals "No file descriptor received. ERROR." Some work by others can be found on the Internet that suggests using a TCP socket for the communication between the milter and spamd fixes this. Lucian Cristian confirmed this on OpenWrt. I am not sure why the Unix socket does not work. I suspect it is something related to musl, but I have not yet found evidence of this. This merge request adds the option to configure spamd to use a TCP socket, and it uses this as the default. The merge request also adds an init script for clamav-milter. Signed-off-by: W. Michael Petullo <mike@flyn.org>
37 lines
1.1 KiB
Text
37 lines
1.1 KiB
Text
config clamav 'clamav'
|
|
option clamd_config_file '/etc/clamav/clamd.conf'
|
|
option LogFile '/tmp/clamd.log'
|
|
option LogFileMaxSize '1M'
|
|
option LogTime 'no'
|
|
option LogVerbose 'no'
|
|
option ExtendedDetectionInfo 'no'
|
|
option OfficialDatabaseOnly 'no'
|
|
option StreamMinPort '1024'
|
|
option StreamMaxPort '2048'
|
|
option MaxThreads '10'
|
|
option ReadTimeout '30'
|
|
option CommandReadTimeout '5'
|
|
option MaxDirectoryRecursion '15'
|
|
option FollowDirectorySymlinks 'no'
|
|
option FollowFileSymlinks 'no'
|
|
option SelfCheck '600'
|
|
option DetectPUA 'yes'
|
|
option ScanPE 'yes'
|
|
option DisableCertCheck 'no'
|
|
option ScanELF 'yes'
|
|
option AlertBrokenExecutables 'no'
|
|
option ScanOLE2 'yes'
|
|
option ScanPDF 'yes'
|
|
option ScanSWF 'yes'
|
|
option ScanMail 'yes'
|
|
option ScanPartialMessages 'no'
|
|
option ScanArchive 'yes'
|
|
option AlertEncrypted 'yes'
|
|
option MaxFileSize '10M'
|
|
option TemporaryDirectory '/tmp'
|
|
# option LocalSocket '/var/run/clamav/clamd.sock'
|
|
option TCPAddr '127.0.0.1'
|
|
option TCPSocket '3310'
|
|
option User 'nobody'
|
|
option ExitOnOOM 'yes'
|
|
option DatabaseDirectory '/usr/share/clamav'
|