search

YunoHost / issues

General issue tracker for the YunoHost project
72 stars 8 forks source link

[rspamd + clamav] add antivirus in the core! #1459

Closed pedro-nonfree closed 10 months ago

pedro-nonfree commented 5 years ago

I'm surprised that there is no antivirus by default in yunohost !

I think it is very easy to configure when you follow this FANTASTIC guide

I will put here steps after a fresh yunohost installation:

sudo apt install clamav clamav-daemon

add file /etc/rspamd/override.d/antivirus.conf with content:

clamav {
  attachments_only = false;
  symbol = "CLAM_VIRUS";
  type = "clamav";
  action = "reject";
  servers = "/var/run/clamav/clamd.ctl";
}

reload rspamd

service rspamd reload

(I tested and it worked!)

decentral1se commented 5 years ago

I'm for this. We'd also need to document how to manage it.

HyperCriSiS commented 5 years ago

I would prefer Yunohost switching to this mailserver solution which has everything needed: https://github.com/hardware/mailserver

HugoPoi commented 4 years ago

I don't know what to do, but there is now https://mailcow.email/ as the same approach as https://github.com/hardware/mailserver but lot of complexity to put this in the Yunohost project.

pedro-nonfree commented 4 years ago

these days for me is no longer clear to add the antivirus I suggested above (clamav) in the yunohost core (at least, not activated by default), here's why: adding clamav service takes much more RAM (and I failed regulating it) which could let to out of memory episodes for a small VPS of 2 GB of RAM with services such as email server, roundcube (webmail) and nextcloud

tootbrute commented 3 years ago

Don't think antivirus is necessary. Most people will use Nextcloud, and can install an antivirus app in that. Most people are most likely going to get a virus through their personal files, not on the main system.

Neustradamus commented 3 years ago

Antivirus is needed to the mailserver...

zeroheure commented 2 years ago

Antivirus can be useful for spam detection, too.

Regarding mailserver, Caddy and Maddy could be a solution in the future. Caddy is an https application server, and Maddy an integrated MTA/MDA (imap only) using Caddy. Both written in Go and easy to setup (and supporting rspamd). But there is no hurry, Postfix is a well tested and very secure mail server.

alexAubin commented 10 months ago

Considering we're removing rspamd from default install (though we'll have a setting to easily add it from the webadmin), we're not gonna integrate an antivirus in the default core. Could be added to the app wishlist though I guess.