Mail Server : Postfix + Clamav + Amavisd

	Configure Virus-Scanning for EMails with Postfix + Clamav.
[1]	Install Clamav, refer to here.
[2]	Install Amavisd and Clamav Server.

# install from EPEL and CRB [root@mail ~]#  dnf --enablerepo=epel,crb -y install amavisd-new clamd perl-Digest-SHA1 perl-IO-stringy [root@mail ~]#  vi /etc/clamd.d/scan.conf # line 8 : comment out # Example # line 14 : uncomment LogFile /var/log/clamd.scan # line 77 : uncomment PidFile /var/run/clamd.scan/clamd.pid # line 81 : uncomment TemporaryDirectory /var/tmp # line 96 : uncomment LocalSocket /var/run/clamd.scan/clamd.sock [root@mail ~]#  touch /var/log/clamd.scan [root@mail ~]#  chown clamscan. /var/log/clamd.scan [root@mail ~]#  systemctl enable --now clamd@scan

[3]	If SELinux is enabled, add rules to start Clamav Server like follows.

[root@mail ~]#  restorecon -v /var/log/clamd.scan [root@mail ~]#  setsebool -P antivirus_can_scan_system on

[4]	Configure Amavisd.

[root@mail ~]#  vi /etc/amavisd/amavisd.conf # line 23 : change to the own domain name $mydomain = ' srv.world '; # line 158 : uncomment and change to the own hostname $myhostname = ' mail.srv.world '; [root@mail ~]#  systemctl enable --now amavisd

[5]	Configure Postfix.

[root@mail ~]#  vi /etc/postfix/main.cf # add follows to last line content_filter=smtp-amavis:[127.0.0.1]:10024 [root@mail ~]#  vi /etc/postfix/master.cf # add follows to last line smtp-amavis unix - - n - 2 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o disable_dns_lookups=yes 127.0.0.1:10025 inet n - n - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_client_restrictions= -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o mynetworks=127.0.0.0/8 -o strict_rfc821_envelopes=yes -o smtpd_error_sleep_time=0 -o smtpd_soft_error_limit=1001 -o smtpd_hard_error_limit=1000 -o receive_override_options=no_milters [root@mail ~]#  systemctl restart postfix

[6]	That' OK all. [X-Virus-Scanned: ***] lines are added in the header section of emails after this configuration and emails with known Virus will not sent to Clients like following email logs.