FreeBSD 14.3 RELEASE - postfix - セキュリティ対策 - インストール


 クラウディア


1. 概要
2. Clamav
3. Rspamd
4. redis
5. インストール時のメッセージ

1. 概要

 必要なパッケージをインストールします。  以下、すべて「root」ユーザ権限で。

2. Clamav


cd /usr/ports/security/clamav

make config
 下記が、デフォルトのオプションになります。

 デフォルトのままにしておきます。


make NO_DIALOG=yes

make install
 インストール時のメッセージを末尾に掲載しておきます。

3. Rspamd


cd /usr/ports/mail/rspamd

make config
 デフォルトの状態です。

 「Google perf-tools」というのが、やたら気になりますが、とりあえず、デフォルトのままにしておきます。


make NO_DIALOG=yes

make install
 インストール時のメッセージを末尾に掲載しておきます。

4. redis

 「Rspamd」が動作するのに必要なのです。

cd /usr/ports/databases/redis

make config
 デフォルトの状態です。

 デフォルトのままにしておきます。


make NO_DIALOG=yes

make install
 インストール時のメッセージを末尾に掲載しておきます。

5. インストール時のメッセージ

 各パッケージのインストール時のメッセージを掲載しておきます。  「Clamav」

===>  Installing for clamav-1.4.2_5,1
===>  Checking if clamav is already installed
===>   Registering installation for clamav-1.4.2_5,1
Installing clamav-1.4.2_5,1...
===> Creating groups
Creating group 'clamav' with gid '106'
Using existing group 'mail'
===> Creating users
Creating user 'clamav' with uid '106'
Adding user 'clamav' to group 'mail'
===> SECURITY REPORT:
      This port has installed the following files which may act as network
      servers and may therefore pose a remote security risk to the system.
/usr/local/sbin/clamd
/usr/local/lib/libclamav_rust.a(std-3a0e78699a7df230.std.7afbaec6631a8b5b-cgu.03.rcgu.o)
/usr/local/lib/libfreshclam.so.3.0.2
/usr/local/lib/libclamav_rust.a(std-3a0e78699a7df230.std.7afbaec6631a8b5b-cgu.12.rcgu.o)
/usr/local/lib/libclamav_rust.a(std-3a0e78699a7df230.std.7afbaec6631a8b5b-cgu.09.rcgu.o)
/usr/local/bin/sigtool
/usr/local/lib/libclamav_rust.a(std-3a0e78699a7df230.std.7afbaec6631a8b5b-cgu.14.rcgu.o)
/usr/local/bin/clambc
/usr/local/lib/libclamav.so.12.0.3

      If there are vulnerabilities in these programs there may be a security
      risk to the system. FreeBSD makes no guarantee about the security of
      ports included in the Ports Collection. Please type 'make deinstall'
      to deinstall the port if this is a concern.

      For more information, and contact details about the security
      status of this software, see the following webpage:
https://www.clamav.net/
 「Rspamd」

===>  Installing for rspamd-3.12.1_1
===>  Checking if rspamd is already installed
===>   Registering installation for rspamd-3.12.1_1
Installing rspamd-3.12.1_1...
===> Creating groups
Using existing group 'rspamd'
===> Creating users
Using existing user 'rspamd'
 - Add the following line to /etc/rc.conf to enable rspamd:

     rspamd_enable="YES"

 - Optionally you can adjust the user which runs Rspamd workers with the
   variables rspamd_worker_user and rspamd_worker_group (default rspamd:rspamd).

 - A symbolic link to /usr/local/etc/rspamd/rspamd.newsyslog.conf
   has been created in the /usr/local/etc/newsyslog.conf.d directory.
   You can edit /usr/local/etc/rspamd/rspamd.newsyslog.conf
   to change log file rotation configuration.

===> SECURITY REPORT:
      This port has installed the following files which may act as network
      servers and may therefore pose a remote security risk to the system.
/usr/local/lib/rspamd/librspamd-server.so

      If there are vulnerabilities in these programs there may be a security
      risk to the system. FreeBSD makes no guarantee about the security of
      ports included in the Ports Collection. Please type 'make deinstall'
      to deinstall the port if this is a concern.

      For more information, and contact details about the security
      status of this software, see the following webpage:
https://rspamd.com/
 「redis」

===>  Installing for redis-8.0.3
===>  Checking if redis is already installed
===>   Registering installation for redis-8.0.3
Installing redis-8.0.3...
===> Creating groups
Creating group 'redis' with gid '535'
===> Creating users
Creating user 'redis' with uid '535'
      To setup "redis" you need to edit the configuration file:
      /usr/local/etc/redis.conf

      To run redis from startup, add redis_enable="YES"
      in your /etc/rc.conf.

AbemaTV 無料体験