Simscan

The testing verison of Simscan (v1.4) provides support for dspam

RipMIME
In order to scan attachments, SimScan requires RipMIME to be installed:

There's a permissions issue with 1.4.0.9 than can be solved with a patch:

Then build and install ripMIME

SimScan installation
At the time of writing, the current version of SimScan was 1.4. Download and unpack the source code.

There's a couple patches by John Simpson to fix a few issues with SimScan. Download and apply them:

Create a user and group for SimScan to run as:

Create a "go" file to hold the configuration options (in case we need to recall them later). Then, put the following into that file:

• Spamassassin
  #!/bin/sh
./configure \
--enable-user=simscan \
--enable-clamav=y \
--enable-clamdscan=/usr/local/bin/clamdscan \
--enable-custom-smtp-reject=y \
--enable-attach=y \
--enable-received=y \
--enable-per-domain=y \
--enable-ripmime=/usr/local/bin/ripmime \
--enable-spam=y \
--enable-spamc=/usr/bin/spamc \
--enable-spam-hits=10
• dspam
  
  #!/bin/sh
./configure \
--enable-user=simscan \
--enable-clamav=y \
--enable-clamdscan=/usr/local/bin/clamdscan \
--enable-custom-smtp-reject=y \
--enable-attach=y \
--enable-received=y \
--enable-per-domain=y \
--enable-ripmime=/usr/local/bin/ripmime \
--enable-dspam=y \
--enable-dspam-user=y

Make "go" executable and then run it to configure SimScan:

If it compiles ok, make and install the programs:

In order for ClamAV to be able to work with the temp files in /var/qmail/simscan, we need to make some permission changes and add clamav to the simscan group:

The AllowSupplementaryGroups option in /usr/local/etc/clamd.conf must also be set and ClamAV restarted:

Attachment Blocking
Create a text file, /var/qmail/control/ssattach, that contains a list of the attachment types that you want to block. The following list is a good start but might need to be modified to suit your particular needs:

/var/qmail/control/simcontrol
By compiling with --enable-per-domain=y, we can fine-tune scanning on a domain or email address basis. Create the control file /var/qmail/control/simcontrol and put in it a default entry:

A couple other examples for a domain or an email address would look like:

Once you've created the file, create the necessary CDB file:

SMTP run script
Edit your SMTP service's run script (eg. /service/smtp-external/run) to enable Simscan by uncommenting the relevant lines:

update-simscan
In order to have the message headers indicate the correct version of ClamAVs database, simscan's version database needs to be updated when Freshclam updates the definitions. John Simpson has provide a nice program that does that.

Adjust /usr/local/etc/freshclam.conf to run update-simscan when it updates the definitions and allow supplementary group access:

Then restart FreshClam to load the change:

Other Patches
http://article.gmane.org/gmane.mail.qmail.simscan/3585