Re: Scan all trafic mail

Pardo Juan Fernando wrote:
> Hi,
> I use Qmail with qmail-scanner and clamav.
> Can i scan all mail traffic (incoming, outgoing, local and remote), and not only
> incoming mails from Internet?
>
> My TCP rules are:
> 192.168.0.:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
> 127.:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
> :allow,QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
>
>   
From the above, I'd say you already are?

The above says that *any* SMTP connection made to that box will go
through Qmail-Scanner, and therefore will have clamdscan run over it.

Note that I say "SMTP connection". Local processes on the server itself
(e.g. cronjobs and Web server if you have one) don't use SMTP to "talk"
to Qmail, and therefore aren't covered. All this is mentioned in the
documentation...

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642