RE: poll: filter message when ClamAV is down

At 13:17 -0600 21/06/2004, Dan Tappin wrote:

I am still hesitant. The issues you describe (the false positive viruses) make me want to wait.

Here is the script I'm using to monitor clamd and spamd on our server. It is a continuous loop that checks if there is at least 1 process of spamd or clamd. If there is no such process, then it will be relaunched with the standard Tenon command line parameters. The script waits 1 second between iterations and then starts again. (By the way, the script could also be adapted to check any other processes on your server which needs at least 1 process running...)

#!/bin/sh
processlist="/usr/local/clamav/sbin/clamd /usr/bin/spamd"
logfile="/var/log/checkprocess.log"
pause="1"

monitor=true
while $monitor
do
  for i in $processlist
  do
    proc=`ps -axwww | grep "$i" | grep -v "grep $i" | wc -l | tr -d " "`
    if [ $proc -lt "1" ] ; then
        case $i in
          "/usr/local/clamav/sbin/clamd" )
              echo "`date` Restarting Clamd" >> $logfile
              echo "`date` Restarting Clamd"
              /usr/local/clamav/sbin/clamd ;;
          "/usr/bin/spamd" )
              echo "`date` Restarting Spamd" >> $logfile
              echo "`date` Restarting Spamd"
              /usr/bin/spamd -u mta -d ;;
        esac
    fi
    proc=""
  done
  sleep $pause
done
# end

the firewall. This is not a bad idea given that I could keep the SA and clamav load on the gateway system which would then not be running any pop3 or imap connections.

You could then move the network modules you don't need out of /usr/local/post.office/network (such as finger, POP3, IMAP, Password-Server). I'm not running the finger module on our PO server. Or just restrict IMAP/POP3 connections to your local network.

How do you set this up in PO to forward all mail to another server???


Firstly, you need to point your MX record at the gateway machine.
Then you go into System Config -> MailRouting

Put the following into the SMTP Mail Routing Table:

orourke-eng.com:[192.168.0.1]

(192.168.0.1 would be the IP address of your Xserve behind the firewall, don't forget to include the square brackets)

Then you go into System Config -> Restrict Mail Relaying

Set Allow delivery to:
(x) No domain except those listed below

[?] Additional Domains: orourke-eng.com

This will tell Post.Office that it accepts messages sent to orourke-eng.com and will forward it to the correct server behind the firewall.

Hope this helps,

Joe.

-- -----------------+----------------+---------------------------------- Jochen Savelberg | Euregio.Net AG | domain registrations, co-location joe@xxxxxxxxxxx | Wirtzfeld 140 | hosting, marketing, entertainment Online Producer | 4760 Bullingen | consulting, training, development MIS/IT Director | Belgium | http://www.euregio.net -----------------+----------------+---------------------------------- Internet Services since 1995 - AFS-Returnee '93, Belgium to Australia --------- Tenon Intersystems' Post.Office Mailing List To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx with the body only containing: unsubscribe Find the searchable mailing list archives at: http://postoffice.computeroil.com/