/usr/share/doc/amavisd-new/README.Debian is in amavisd-new 1:2.7.1-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 | amavisd-new for Debian
===========================================================
* It is a very good idea to read NEWS.Debian often, or to use
apt-listchanges.
* The LDAP schema for amavisd-new is installed in
/etc/ldap/schema/amavis.schema.
Configuration layout
--------------------
Configuration is split into two directories, and processed in the order below:
Read-only configuration: /usr/share/amavis/conf.d/
10-debian_scripts: Stuff you'd better not override
20-package: Packaging decisions, override at will
Read-write conffiles: /etc/amavis/conf.d/
01-debian: Rarely modified settings
05-domain_id: mydomain autodetection, local_domains config
05-node_id: myhostname autodetection
15-av_scanners: AV scanner interface configuration
15-content_filter_mode: Use this to re-enable spamassassin/av checks
20-debian_defaults: Commonly modified settings
50-user: Place your overrides here, if you want
If the package detects legacy config files, it renames them adding a
".disabled" extension, and the amavisd-new initscript will refuse to start the
service until these files with a ".disabled" extension are removed or renamed.
The legacy config files are /etc/amavis.conf and /etc/amavis/amavis.conf.
Sendmail Milter
---------------
Please see README.milter for Debian specific instructions on getting milter
support running with amavisd-new-milter. We recommend you use the
dual-sendmail setup described in README.sendmail-dual, though. DO notice that
there are *two* different sockets when using milter.
Permissions
-----------
In order to make amavisd-new default installation safer the permissions on some
directories have been thightend - namely these are:
/var/lib/amavis
/var/lib/amavis/db
/var/lib/amavis/tmp
/var/lib/amavis/virusmails
Be aware that this can cause problems with other software which may need access
to some of these directories to do their work, for example web-based quarantine
management tools. To make them work you will need to change the ownership of
the directory /var/lib/amavis/virusmails to amavis.www-data and also adjust its
permissions to 0770 so that the webserver is able to access and modify the
quarantined mails (you can achieve this with the "dpkg-statoverride" command
using the optional flags "--force" and "--update"). Other programs which may
also face such issues are unprivileged command-line tools and daemonized virus
scanners (for specific solutions concerning them see below).
Antivirus and spam-checking
---------------------------
amavisd-new does not depend on any antivirus, so antivirus checking is not
enabled by default. It also does not depend on spamassassin, so spam checking
is not enabled by default. They are turned off in
/usr/share/amavis/conf.d/20-package. To enable them, edit
/etc/amavis/conf.d/15-content_filter_mode.
If you use clamav-daemon, make sure that it is configured to init supplementary
groups when it drops priviledges, and that you add the clamav user to the
amavis group: add AllowSupplementaryGroups to /etc/clamav/clamd.conf if it is
not there yet, and run "adduser clamav amavis" as root. The preferred method
for using other virus scanners which run as a different unprivileged user is to
change their primary group to amavis (you can change this with "usermod -g").
If you use spamassassin with the Bayes database system, you should make sure
that the spamassassin configuration option "bayes_auto_expire 0" is set in
spamassassin configure files. This disables the automatic expiration of tokens
which causes problems for amavisd-new when activated. The amavisd-new package
includes cron jobs that take care of syncing and expiring the token database
frequently.
Debugging
---------
To debug amavis, run:
/etc/init.d/amavis debug
or
/etc/init.d/amavis debug-sa
-- Your amavisd-new maintainers (and contributors)
|