Qmail-Scanner
Qmail-Scanner, (also known as scan4virus) is an addon that enables a Qmail Email server to scan all gatewayed Email for certain characteristics. It is typically used for its anti-virus protection functions, in which case it is used in conjunction with commercial virus scanners. but also enables a site to react to Email (at a server/site level) that contains specific strings in particular headers, or particular attachment filenames or types (e.g. *.VBS attachments). It also can be used as an archiving tool for auditing or backup purposes. Qmail-Scanner is integrated into the mail server at a lower level than some other Unix-based virus scanners, resulting in better performance. It is capable of scanning not only locally sent/received Email, but also Email that crosses the server in a relay capacity. It also has SpamAssassin support.
| Tags | Security Communications Email Filters |
|---|---|
| Licenses | GPL |
Recent releases
- 03 Apr 2006 22:06
Changes: Many changes were made, including the ability to quarantine high-scoring spam along with viruses and policy blocks, a new format for the quarantine-events.txt policy file, and normalization of strings to make pattern matching more consistent.
- 16 Mar 2004 02:12
Changes: In this version, zip files are no longer deleted after unpacking to allow AV a better go at the original zip. It now has the option of blocking password-protected zip files ("--block- password-protected"). As almost all viruses forge the mail envelope, it now defaults to not alerting anyone. However, if the "block" occurred due to a policy reason (instead of an AV), then they are still notified.
- 06 Nov 2003 16:18
Changes: This release now runs under its own account. This gives better security and is much easier to audit. This version also features better accounting records, as well as more pro-active content-filtering, in an attempt to stop novel viruses/trojans.
- 13 Feb 2003 03:09
Changes: This version fixes some issues with SpamAssassin tagging, adds support for the RAV scanner, and alters some error messages.
- 16 May 2002 06:42
Changes: This release supports SpamAssassin 2, there are configure improvements, NULL has been added to the list of chars to treat as hostile, there is shrink compression support, the "Clear" message can now include "scoring", there is sub-sender-cache.pl support, and documentation improvements.
- All comments
Recent commentsCurrently Qmail-scanner is up to 1.15
Currently qmail-scanner is up to 1.15,
This is a very nice project... Check it out.
qmail-scanner patches, tricks & enhancements
Current version of qmail-scanner (http://qmail-scanner.sourceforge.net/)
(0.96) hangs when it found an encrypted .zip (the mail will never queued):
there's also a problem when an older uudecode command (found on many
Debian (http://www.debian.org/) distributions) is encountred during
the installation.
I also added some tips for installing qmail-scanner in a vpopmail enviroment
and published a very complete list of "dangerous" extensions
for Mircosuk operating systems.
If you are interested, check my home page (http://exe2bin.com/),
or go directly to the qmail-scanner
directory.
Greetings,
Dr.BiC
P.S. I informed the current qmail-scanner mantainer about my page.