Re: ANNOUNCE - indimail-mta (qmail+ucsp-tcp+daemontools with all patches)
Manvendra Bhangui <[email protected]>
| Newsgroups | gmane.mail.qmail.general |
|---|---|
| Message-ID | <CAOqj+1O967romBd82agVc0hbf-jKS5KGk496Hmyr+wL05sbLYA@mail.gmail.com> |
On 11 April 2016 at 19:59, Shepherd Nhongo <[email protected]> wrote: > Thanks Manvendra. > > Does the QHPSI & AV filter the crypto sent via email ? I am looking into > this as a replacement of my old qmailrocks installations. Lately a customer > has had to deal with ransomware that filtered as a mail attachement. > > QHPSI is simply a method used by qmail-queue to pass the file descriptor of the open mess file to clamd. It can also pass the path to the message file (mess file) to any external virus scanner. So if clamd/clamav is installed, then I believe clamav does crypto filtering with sanesecurity signatures. But I have not used the sanesecurity signatures myself. http://lists.clamav.net/pipermail/clamav-users/2014-December/001103.html