[ILUG] Anti-virus filters and sendmail

[Lars Hecking]

Kenn Humborg writes:
> 
> I've thought about this for a while and no simple solution
> popped up...
> 
> I'd like to run _every_ message that goes through sendmail
> on a particular machine to be virus scanned.  Network Associates
> have a Linux version of their scanner that will do the anti-virus 
> part, but there are two remaining steps:
> 
> 1. A script to break apart a message's body and attachments 
>    and scan each part.
> 2. Sendmail rules/patches to send each message off for scanning.
> 
> I'm sure some Perl hacker here can do number 1 in their sleep.
> 
> But what's the best way to do number 2?  Does 8.9.x have
> provisions for running arbitrary programs over messages?
> 
> Could I direct all incoming messages to a custom mailer that would
> do the scan and submit the message back to sendmail (perhaps 
> using a different .cf file) and send it on it's merry way.  I'm afraid that
> this might lose envelope information.
> 
> Has anyone here done anything like this?
 
 http://aachalon.de/AMaViS/

 Mind you, it has some serious drawbacks, but I'm using it here with
 postfix, and it has already paid off (loads of WM97/xxx stuff caught).

 I'm using Sophos' virus scanner which has been recommended to me by
 other amavis users. Before that, I used McAfee's scanner, but it did
 not seem to catch everything (the Solaris version anyway).