Bill Shupp wrote:
Tom Collins wrote:
And I highly recommend Qscanq, <http://budney.homeunix.net:8080/users/budney/software/qscanq/>, as a replacement for qmail-scanner. It's a C-based program that replaces qmail-queue and does virus scanning on inbound messages. If a message contains a virus, it's denied by qmail-smtpd. No bounces to forged senders, no virus warnings to annoy the recipient, no bounces for non-existent recipients, no spam scanning of viruses, no Perl overhead of qmail-scanner.
Tom, this is great, thanks for mentioning it. It doesn't appear to use TNEF for unpacking such encoded emails.. have you found this to be a detriment? Or have I missed something?
TNEF support is indeed built into ripmime, a required tool for qscanq.
Also, qmail-scanner has a nice mechanism for specifying your own quarantine-attachments via the tab delimited text file. This is great for blocking all attachments with specific suffixes, like .vbs or .scr. Is there any equivalent for qscanq?
There does not appear to be an equivalent mechanism.
I use it in conjunction with qmail-spamc (in SpamAssassin's qmail directory) to scan all incoming messages for viruses and spam without invoking Perl. At some point, I will probably replace qmail-spamc with Ken Jones' patch for vpopmail that adds SpamAssassin scanning to vdelivermail.
And I assume qmail-spamc will also reject mail at the smtpd level?
It does not. Although I suppose this would not be too hard to achieve if that were someone's desire.
Lastly, I could not quickly find Ken's patch. Do you have a link for it?
This is posted on sourceforge. Duh, should have looked there first. ;)
Regarding hooking these 2 together, I simply installed qscanq, but did NOT do 'install-wrap", which moves the qmail-queue binary to /var/qmail/bin/qscanq/qmail-queue. Instead, I use the QMAILQUEUE environment to call the qscanq program, and made /var/qmail/bin/qscanq/qmail-queue a sym-link to /var/qmail/bin/qmail-spamc. Works like a charm, and no more perl overhead. :)
Cheers,
Bill Shupp
