Re: qscanner and roundcube
Salvatore Toribio <[email protected]> Wed, 7 Dec 2016 17:15:34 +0100
| Newsgroups | gmane.mail.qmail.scanner |
|---|---|
| Message-ID | <a06240804d46de498071e@[10.10.82.254]> |
--===============6901910524317177673==
Content-Type: multipart/alternative;
boundary="============_-730995160==_ma============"
--============_-730995160==_ma============
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
Hi
Have you check the logs to verify if the message pass through qmail-scanner?
Do you know how Roundcube sends the messages, through sendmail,
qmail-inject...? You should need to set QMAILQUEUE variable for
qmail-scanner in the process that Roudcube uses to send emails to
ensure that they pass through qmail-scanner.
For example with Sqwebmail is done like this:
----------------------------
more /usr/sqwebmail/share/sqwebmail/sendit.sh
#!/bin/sh
#
# $1 will contain the return (or bounce) address for this mailboxid, as
# specified by auth.c
#
# $2 will contain the sqwebmail mailboxid of the sender (note that we're
# executing under whatever id auth.c sets for this mailboxid). Furthermore,
# $REMOTE_ADDR will contain the IP address where the client is coming from
# (the rest of the CGI vars are available too).
#
QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"
export QMAILQUEUE
# If you want to run spamassassin
#QS_SPAMASSASSIN="on"
#export QS_SPAMASSASSIN
QMAILUSER="$1"
export QMAILUSER
exec /var/qmail/bin/qmail-inject -hf "$1"
----------------------------
Kind regards
ST
At 23:03 +0000 5-12-2016, Petre wrote:
>Hi,
>
>I successfully use qmail and Qmail-Scanner, with clamav and spamassassin.
>I use courier-authlib, courier-imap and users are kept in ldap.
>I tried a few days ago roundcube as a webmail application and
>observed a strange behavior: I can send emails with viruses and spam
>in attachments. Squirrelmail and rainloop (and also other clients
>like thunderbird) behaves normally, meaning that dangereous
>attachments are successfully blocked by qmail-scanner.
>In logs I did't observe unusual things.
>
>Why the attachments are not blocked ?
>
>
>10x
>Pit
--============_-730995160==_ma============
Content-Type: text/html; charset="us-ascii"
<!doctype html public "-//W3C//DTD W3 HTML//EN">
<html><head><style type="text/css"><!--
blockquote, dl, ul, ol, li { padding-top: 0 ; padding-bottom: 0 }
--></style><title>Re: [Qmail-scanner-general] qscanner and
roundcube</title></head><body>
<div>Hi</div>
<div><br></div>
<div>Have you check the logs to verify if the message pass through
qmail-scanner?</div>
<div><br></div>
<div>Do you know how Roundcube sends the messages, through sendmail,
qmail-inject...? You should need to set QMAILQUEUE variable for
qmail-scanner in the process that Roudcube uses to send emails to
ensure that they pass through qmail-scanner.</div>
<div><br></div>
<div>For example with Sqwebmail is done like this:</div>
<div>----------------------------</div>
<div>more /usr/sqwebmail/share/sqwebmail/sendit.sh</div>
<div>#!/bin/sh<br>
#</div>
<div># $1 will contain the return (or bounce) address for this
mailboxid, as<br>
# specified by auth.c<br>
#<br>
# $2 will contain the sqwebmail mailboxid of the sender (note that
we're<br>
# executing under whatever id auth.c sets for this mailboxid).
Furthermore,<br>
# $REMOTE_ADDR will contain the IP address where the client is coming
from<br>
# (the rest of the CGI vars are available too).<br>
#<br>
<br>
QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl"<br>
export QMAILQUEUE<br>
<br>
# If you want to run spamassassin<br>
#QS_SPAMASSASSIN="on"<br>
#export QS_SPAMASSASSIN<br>
<br>
QMAILUSER="$1"<br>
export QMAILUSER<br>
<br>
exec /var/qmail/bin/qmail-inject -hf "$1"<br>
----------------------------</div>
<div><br></div>
<div>Kind regards</div>
<div><br></div>
<div>ST</div>
<div><br></div>
<div>At 23:03 +0000 5-12-2016, Petre wrote:</div>
<blockquote type="cite" cite>Hi,</blockquote>
<blockquote type="cite" cite><br></blockquote>
<blockquote type="cite" cite>I successfully use qmail and<b>
Qmail-Scanner</b>, with clamav and spamassassin.</blockquote>
<blockquote type="cite" cite>I use courier-authlib, courier-imap and
users are kept in ldap.</blockquote>
<blockquote type="cite" cite>I tried a few days ago roundcube as a
webmail application and observed a strange behavior: I can send emails
with viruses and spam in attachments. Squirrelmail and rainloop (and
also other clients like thunderbird) behaves normally, meaning that
dangereous attachments are successfully blocked by
qmail-scanner.</blockquote>
<blockquote type="cite" cite>In logs I did't observe unusual
things.<br>
</blockquote>
<blockquote type="cite" cite>Why the attachments are not blocked ?<br>
</blockquote>
<blockquote type="cite" cite><br></blockquote>
<blockquote type="cite" cite>10x</blockquote>
<blockquote type="cite" cite>Pit</blockquote>
</body>
</html>
--============_-730995160==_ma============--
--===============6901910524317177673==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi
--===============6901910524317177673==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Qmail-scanner-general mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
--===============6901910524317177673==--