色々日記（ざ・めも）

# apt-get install razor

Sorry, but the following packages have unmet dependencies:
  razor: Depends: libdigest-sha1-perl but it is not going to be installed
         Depends: libnet-dns-perl but it is not going to be installed
         Depends: libtime-hires-perl (> 1.20-3)
         Depends: libmailtools-perl but it is not going to be installed

# apt-get install libdigest-sha1-perl/testing

# apt-get install razor/testing

# razor-client
# razor-admin -d -create -home=/etc/razor

# apt-get install spamassassin/testing

# apt-get install libhtml-parser-perl/testing
# apt-get install libnet-dns-perl/testing

# /etc/init.d/spamassassin start

# ./configure --lang ja_JP.EUC --admin root --scanners clamdscan,verbose_spamassassin --notify recips,admin --domain dt8.jp --install

# contrib/test_installation.sh -doit

--spam--
   unix-power	tlec
1	22.9 	34.5 
2	26.8 	35.0 
3	20.8 	23.2 
4	13.8 	23.9 
5	10.6 	15.8 
6	13.7 	19.3 
7	28.1 	35.4 
8	22.7 	28.3 
9	 6.4 	 9.8 
10	 9.9 	17.0 
11	 5.6 	13.9 
12	19.9 	28.5 
13	15.4 	30.3 
14	12.4 	19.3 
15	24.3 	27.8 
16	 7.6 	11.9 
17	 7.8 	12.1 
18	20.4 	25.0 
19	15.8 	16.0 
20	 0.2 	10.4 

--ham--		
1	 6.4 	10.9 
2	 5.5 	 7.6 
3	 0.5 	 5.4 
4	12.9 	12.9 
5	 5.9 	 7.8 
6	-1.4	 2.2 
7	 6.3 	11.2 
8	-2.4	 2.8 
9	 6.3 	 9.2 
10	-0.4	 3.0 
11	 3.0 	19.1 

error: rule 'GB2312_CHARSETContent-Type' has invalid characters (not Alphanumeric + Underscore)
error: rule 'CONTENT_TYPE_PRESENTexists:Content-Type' has invalid characters (not Alphanumeric + Underscore)
error: rule 'X_MAILER_PRESENTexists:X-Mailer' has invalid characters (not Alphanumeric + Underscore)

81c81
< required_hits 8.0
---
> required_hits 15.0
128c128
< header GB2312_CHARSETContent-Type =~ /charset=['"]?GB2312['"]?/i
---
> header GB2312_CHARSET Content-Type =~ /charset=['"]?GB2312['"]?/i
180c180
< score X_MAILER          7.0
---
> score X_MAILER          3.0
451,453c451,453
< header CONTENT_TYPE_PRESENTexists:Content-Type
< describe CONTENT_TYPE_PRESENTexists:Content-Type
< score CONTENT_TYPE_PRESENT-0.1
---
> header CONTENT_TYPE_PRESENT exists:Content-Type
> describe CONTENT_TYPE_PRESENT exists:Content-Type
> score CONTENT_TYPE_PRESENT -0.1
1243,1245c1243,1245
< header X_MAILER_PRESENTexists:X-Mailer
< describe X_MAILER_PRESENTexists:X-Mailer
< score X_MAILER_PRESENT0.1
---
> header X_MAILER_PRESENT exists:X-Mailer
> describe X_MAILER_PRESENT exists:X-Mailer
> score X_MAILER_PRESENT 0.1
1261c1261
< score SJISNOTXMAILER 7.0
---
> score SJISNOTXMAILER 2.0
1323c1323
< score RAZOR2_CF_RANGE_51_100 2.5
---
> score RAZOR2_CF_RANGE_51_100 7.0
2787a2788,2790
> # urara add 05/04/16
> bayes_auto_learn_threshold_nonspam 0.5
> bayes_auto_learn_threshold_spam 30.0
>
> report_safe 0
> rewrite_header subject [SPAM(Score=_SCORE_)]

--spam--
1	42.8 
2	39.8 
3	29.2 
4	29.8 
5	24.1 
6	25.2 
7	40.0 
8	35.9 
9	17.3 
10	23.1 
11	24.8 
12	37.0 
13	37.5 
14	26.8 
15	35.8 
16	20.6 
17	20.8 
18	34.0 
19	16.2 
20	25.0 

--ham--	
1	10.9 
2	 7.6 
3	 5.4 
4	10.0 
5	 7.8 
6	 2.2 
7	11.2 
8	 2.8 
9	 9.2 
10	 3.0 
11	14.1 

# /etc/init.d/spamassassin restart

$spamassassin <mail> | grep X-

error: rule 'GB2312_CHARSETContent-Type' has invalid characters (not Alphanumeric + Underscore)
error: rule 'CONTENT_TYPE_PRESENTexists:Content-Type' has invalid characters (not Alphanumeric + Underscore)
error: rule 'X_MAILER_PRESENTexists:X-Mailer' has invalid characters (not Alphanumeric + Underscore)

            org    jp 
2005年度   2000  3980 <--orgは新規登録費用(\1000)がかかる
2006年度   3000  7960
2007年度   4000 11940
2008年度   5000 16920 <--収入発生？       

# perl -MCPAN -e shell

Parameters for the 'make install' command?
Typical frequently used setting:

    UNINST=1         to always uninstall potentially conflicting files

Your choice:  [] UNINST=1

(1) <a HREF="ftp://ftp.dti.ad.jp/pub/lang/CPAN/">ftp://ftp.dti.ad.jp/pub/lang/CPAN/</a>
(2) <a HREF="ftp://ftp.jaist.ac.jp/pub/lang/perl/CPAN/">ftp://ftp.jaist.ac.jp/pub/lang/perl/CPAN/</a>
(3) <a HREF="ftp://ftp.kddilabs.jp/CPAN/">ftp://ftp.kddilabs.jp/CPAN/</a>
(4) <a HREF="ftp://ftp.ring.gr.jp/pub/lang/perl/CPAN/">ftp://ftp.ring.gr.jp/pub/lang/perl/CPAN/</a>
(5) <a HREF="ftp://ftp.u-aizu.ac.jp/pub/CPAN">ftp://ftp.u-aizu.ac.jp/pub/CPAN</a>
(6)     <a HREF="http://ftp.cpan.jp/" TARGET=_top>http://ftp.cpan.jp/</a>
Select as many URLs as you like (by number),
put them on one line, separated by blanks, e.g. '1 4 5' [] 2 4 5 6

19a20,21
> export FTP_PASSIVE=1
>

# perl -MCPAN -e '$ENV{FTP_PASSIVE} = 1; shell'

42c42
< #passive_ftp = off
---
> passive_ftp = on

3154c3154
< #FTP_PASSIVE:FALSE
---
> FTP_PASSIVE:TRUE

cpan> o conf ftp /usr/bin/pftp

# : ./not_there/__db_lock.share: そのようなファイルやディレクトリはありません
t/env..........FAILED test 10

# chmod 4711 /usr/bin/suidperl

# chmod 755 /usr/bin/suidperl

# contrib/test_installation.sh -doit

Sending eicar test virus - should be caught by perlscanner module...
qmail-inject: fatal: qq temporary problem (#4.3.0)
Bad error. qmail-inject died

/var/spool/qmailscan/tmp/debian111060900649323497: Access denied. ERROR

User clamav

User qscand

# /etc/init.d/clamav-daemon restart

Sat Mar 12 18:05:27 2005 -> ERROR: Socket file /var/run/clamav/clamd.ctl could n
ot be bound: Permission denied

# chgrp qscand /var/run/clamav
# chmod 775 /var/run/clamav

# /etc/init.d/clamav-daemon restart

# contrib/test_installation.sh -doit

QMAILQUEUE="/var/qmail/bin/qmail-queue"
export QMAILQUEUE

Mar 14 01:38:51 debian X-Qmail-Scanner-1.25: [debian11107319314933436] cannot
 open  /var/spool/qmailscan/quarantine-attachments.db - No such file or directory

53c53
<       ulimit -v 8192
---
>       ulimit -v 10240

# apt-get install/testing

$ ps -e | grep qmail-send

$ cd /proc/<proc_number>/environ
# cat environ | tr '\00' '\n' | grep MAILQUEUE

# free
             total       used       free     shared    buffers     cached
Mem:        124552     110944      13608          0       3608      20852
-/+ buffers/cache:      86484      38068
Swap:            0          0          0

# cat /proc/meminfo
MemTotal:       124552 kB
MemFree:         13584 kB
Buffers:          3636 kB
Cached:          20856 kB
SwapCached:          0 kB
Active:          45332 kB
Inactive:         4764 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:       124552 kB
LowFree:         13584 kB
SwapTotal:           0 kB
SwapFree:            0 kB
Dirty:               4 kB
Writeback:           0 kB
Mapped:          31944 kB
Slab:            50476 kB
Committed_AS:   115528 kB
PageTables:       1096 kB
VmallocTotal:   909276 kB
VmallocUsed:       724 kB
VmallocChunk:   908552 kB
# cat /proc/swaps
#

# cat /etc/fstab

# /etc/fstab: static file system information.
#
# <file system> <mount point>   <type>  <options>               <dump>  <pass>
/dev/hda1       /               ext2    errors=remount-ro       0       1
/dev/hda2       none            swap    sw                      0       0
proc            /proc           proc    defaults                0       0
/dev/fd0        /floppy         auto    user,noauto             0       0
/dev/cdrom      /cdrom          iso9660 ro,user,noauto          0       0

# fdisk /dev/hda

コマンド (m でヘルプ): p

ディスク /dev/hda: ヘッド 16, セクタ 63, シリンダ 77520
ユニット = シリンダ数 of 1008 * 512 バイト

 デバイス ブート   始点      終点  ブロック   ID  システム
/dev/hda1   *         1     73504  37045858+  83  Linux
領域 1 はシリンダ境界で終わっていません:
     物理=(1023, 254, 63) (1023, 15, 63) であるべきです
/dev/hda2         73504     75592   1052257+  83  Linux
領域 2 はシリンダ境界で終わっていません:
     物理=(1023, 254, 63) (1023, 15, 63) であるべきです
/dev/hda3         75592     77520    971932+  82  Linux スワップ
領域 3 はシリンダ境界で終わっていません:
     物理=(1023, 254, 63) (1023, 15, 63) であるべきです

# mount
/dev/hda1 on / type ext2 (rw,errors=remount-ro)
proc on /proc type proc (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
tmpfs on /dev/shm type tmpfs (rw)
sysfs on /sys type sysfs (rw)
usbfs on /proc/bus/usb type usbfs (rw)

# mkdir /mnt/hda2
# mount -r -t ext2 /dev/hda2 /mnt/hda2
# ls -alF /mnt/hda2/
合計 56
drwxr-xr-x    3 root     root         4096  4月 19  2003 ./
drwxr-xr-x    3 root     root         4096  3月 17 20:45 ../
drwxr-xr-x    2 root     root        49152  4月 19  2003 lost+found/

debian:/mnt/hda2/lost+found# ls -alF
合計 52
drwxr-xr-x    2 root     root        49152  4月 19  2003 ./
drwxr-xr-x    3 root     root         4096  4月 19  2003 ../

# free
             total       used       free     shared    buffers     cached
Mem:        124552     115604       8948          0       2668      40500
-/+ buffers/cache:      72436      52116
Swap:       971924          0     971924

$ which unzip
/usr/bin/unzip

$ perl -v

This is perl, v5.8.3 built for i386-linux-thread-multi

$ perl -mTime::HiRes

$ perl -mDB_File

$ perl -mSys::Syslog

# apt-get install perl-suid

$ which suidperl
/usr/bin/suidperl

# apt-get install maildrop

$ which reformime
/usr/bin/reformime

# apt-get install tnef

$ which tnef
/usr/bin/tnef

# cd /usr/src/qmail-src/
# wget    <a HREF="http://www.qmail.org/qmailqueue-patch" TARGET=_top>http://www.qmail.org/qmailqueue-patch</a>
# tar -xvzf qmail_1.03.orig.tar.gz
# cd qmail-1.03/
# patch -p1 <../qmail-date-localtime.patch
# patch -p1 <../qmailqueue-patch
# zcat ../qmail_1.03-36.diff.gz | patch -p1

Reversed (or previously applied) patch detected!  Assume -R? [n]

# zcat ../qmail_1.03-36.diff.gz | grep MAILQUEUE
++    binqqargs[0] = env_get("QMAILQUEUE");
++                variable QMAILQUEUE. Also known as qmailqueue patch.
++QMAILQUEUE
++  if (env_get("QMAILQUEUE")) {
++    logstring(2,env_get("QMAILQUEUE"));
+    binqqargs[0] = env_get("QMAILQUEUE");

qmail (1.03-21) testing unstable; urgency=low

  * Added QMAIL-QUEUE patch

# groupadd qscand
# useradd -g qscand -s /bin/false qscand

$ tar -xvzf qmail-scanner-1.25.tgz
$ cd qmail-scanner-1.25
# ./configure

/usr/bin/reformime contains bugs. Please upgrade to a release
that post-dates Mar 22 2002 (e.g. 1.3.8)

# apt-show-versions -a -p maildrop
maildrop        1.3.7-2 install ok installed
maildrop        1.3.7-2 stable
maildrop        1.5.3-1.1       testing
maildrop        1.5.3-1.1       unstable
maildrop/stable uptodate 1.3.7-2

# apt-get install maildrop/testing
# ./configure

# ./configure --lang ja_JP.EUC --admin root --notify recips,admin --domain dt8.jp --install

• langは通知メールの言語、--adminと--domainは合わせて管理者メルアドだと思ってよい。--notifyは通知のポリシー決めで、recipsは受信者、adminは管理者へそれぞれ通知する。ウイルスメールの場合詐称があるので、送信元アドレスは当てにならずsenderは使いづらい。Stray Penguinにlsndr（ローカルの送信者）に通知するパッチがあるが、きちんと動くなら不用意にウイルスに感染した自ドメインのユーザへの自動通知が出来る？　今後の課題だろうか。adminの代わりにml宛先を除いたnmladmが使われることも多い。自分にはml宛先ウイルスを通知することによる不利益が今ひとつぴんと来ないので、当面adminで使う。その他の通知先は[参考サイト]を参照。

35a36,38
> QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
> export QMAILQUEUE
>

53c53
<       ulimit -v 8192
---
>       ulimit -v 10240

1876c1876
<   open(SM,"|$qmailinject -h -f ''")||&error_condition("cannot open $qmailinject for sending
 quarantine report - $!");
---
>   open(SM,"|/usb/bin/nkf -j|$qmailinject -h -f ''")||&error_condition("cannot open
 $qmailinject for sending quarantine report - $!");
2003c2003
<   open(SM,"|$qmailinject -h -f ''")||&error_condition("cannot open $qmailinject for sending
 quarantine report - $!");
---
>   open(SM,"|/usr/bin/nkf -j|$qmailinject -h -f ''")||&error_condition("cannot open
 $qmailinject for sending quarantine report - $!");

# /etc/init.d/qmail restart

# contrib/test_installation.sh -doit

# apt-get clamav/unstable

# ps -e | grep clam
19213 ?        00:00:00 freshclam
24801 ?        00:00:03 clamd

User clamav

User qscand

# /etc/init.d/clamav-daemon restart

# chgrp qscand /var/run/clamav
# chmod 775 /var/run/clamav

#!/bin/sh
if [ `ps -ef| grep /usr/bin/freshclam| grep -v grep| wc -l` != 1 ]; then
  message="freshclam stopped!"
  echo $message | mail -s "daemon Caution! : freshclam" urara@dt8.jp
fi

if [ `ps -ef| grep /usr/sbin/clamd| grep -v grep| wc -l` != 1 ]; then
  message="clamd stopped!"
  echo $message | mail -s "daemon Caution! : clamd" urara@dt8.jp
fi