Publisher review:Qmail-Scanner is an add-on that enables a Qmail email server to scan gatewayed email for certain characteristics (i.e. a content scanner). Qmail-Scanner is an add-on that enables a Qmail email server to scan gatewayed email for certain characteristics (i.e. a content scanner).
It is typically used for its anti-virus and anti-spam protection functions, in which case it is used in conjunction with external scanners. It also enables a site (at a server/site level) to create "Policy blocks": i.e. react to email that contains specific strings in particular headers, or particular attachment filenames or types (e.g. *.VBS attachments).
Its archival features helps ISPs and corporations around the world with new or pending legislation, and regulatory requirements. It can archive all processed email into an archive maildir.
This is ideal for backup purposes for audit policy reasons. Unlike certain Windows-based server solutions, the mail envelope headers (the "rcpt to:" and "mail from:" headers) are kept intact - appended to the bottom of each message - confirming true sender and destination addresses.
Archiving also supports filtering to a subset of addresses (e.g. only archive "support@domain.name" emails instead of all). In addition, the extensive single-line summaries generated for each message by Qmail-Scanner may be enough for companies meet their obligations - instead of the more disk-intensive full archiving.
Qmail-Scanner is integrated into the mail server at a lower level than some other Unix-based virus scanners, resulting in more thorough coverage. It is capable of scanning not only locally sent/received email, but also email that crosses the server in a relay capacity. Qmail-Scanner also leverages the wealth of meta-information provided by Qmail (such as client IP address, and whether or not the client is allowed to relay).
Features:
- Supports almost all commercial (Unix) virus scanners as well as the ever-popular Open Source ClamAV scanner.
- Can call more than one virus scanner for each mail message
- Has its own internal scanner that can be used for Policy enforcement, or to quarantine viruses that your AV currently cannot detect
- The internal scanner can also be used to quarantine email based on attachment types, or email with certain email headers... Need to stop *.mp3 files or "Subject: ILOVEYOU" email getting onto and off your LAN.
- The internal scanner can trigger a "greylist" action instead of a quarantine. This is designed for emergency situations where your current AV and static Policy blocks are not appropriate. e.g. a new ZIP-based virus comes out with random filenames. Your AV cannot detect it, and you can't globally block ZIP files without hurting valid users. A "greylist" action will cause Qmail-Scanner to exit with a SMTP temporary failure instead of delivering the message. Valid emails will simply be requeued and can flow through later once your AV can detect the virus, and you decide to remove the greylist policy.
- Internal engine scans for poorly formatted messages that are known to be used by trojans/virii to infect clients.
Requirements: · Netqmail 1.05 (or qmail-1.03 with patches) · Create a separate account under which to run Qmail-Scanner: defaults to username and groupname "qscand". For extra security, create it with a normal home directory (e.g. "/home/qscand"), but with a "fake" shell (e.g. "/b · reformime from Maildrop 1.3.8+ · Perl 5.005_03+ · Perl module Time::HiRes · Perl module DB_File (most distributions come with it pre-installed, although the latest Perl doesn't) · Perl module Sys::Syslog (most distributions come with it pre-installed) · Perl module MIME::Base64 (most distributions come with it pre-installed) · Optional: Mark Simpson's TNEF unpacker. Can decode those annoying MS-TNEF MIME attachments that Microsoft mail servers just love to use. If you don't have this, there are several classes of email that Qmail-Scanner basically won't be able t · Optional: uudecode (part of sharutils on Redhat-style systems) · Optional: unzip
Qmail-Scanner 2.01 is a Perl script for Utilities scripts design by Jason Haar.
It runs on following operating system: Windows / Linux / Mac OS / BSD / Solaris.
Operating system:Windows / Linux / Mac OS / BSD / Solaris
Qmail-Scanner 2.01 script details 
