On Friday 29 August 2003 01:02 am, Franky wrote: > > as I can see this, scrubber does the mime-decoding and lets clamav do > the unpacking (unzip, untar, ...), right? > Hmmm ... seems interesting, I'm using amavisd-new right now but I don't > really like a perl program on a mail server (performance reasons). Maybe > this is the answer ... too bad it uses local sendmail to reinject > messages (smtp implementation should be easy enough I think). Spam > integration is great! > And another small feature I like about amavids-new: mail to notify > recipients/senders about virusses (while being able to disable this for > specific virusses). Maybe for the future? > But still ... a great product! > > Franky
Yes, the daemon engine is basically a fully threaded shell that accepts plugins to do the heavy lifting (there is a Design page briefly describing this). The core engine uses the GMime library - same one that Gnome's Evolution uses - to break apart the messages and feed them to the filter threads. The filter threads use the loaded plugins, in the case the ClamAV plugin, which checks each MIME part for base64, binary, or uuencoded content types. A part with one of these types is fed directly into libclamav's scanning. If clam finds something, a new text/plain mime part is added to the message identifying the virus found. It can also remove the MIME part with the virus payload, or additionally a new feature i put in last night can delete the message entirely. The only thing it doesnt do is bounce messages. It would be easy enough to add, but for my use the bouncing for viruses, spam, and friends tends to just clog up the outgoing queue with undeliverables anyway. As to your point about sendmail reinjection, that is correct for the Postfix client. I'm looking at rewriting it to use postfix -> client -> daemon -> client -> postfix via smtp soon. Even with this the postfix client and scrubber server combo can tackle a few million messages per day w/o much effort. http://projects.gasperino.org/ -- Franco ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
