Qmail-Scanner

Qmail-Scanner is an add-on that enables a Qmail email server to scan gatewayed email for certain characteristics (i.e. a Content Scanner). It is typically used for its anti-virus and anti-spam protection functions, in which case it is used in conjunction with external scanners. It also enables a site (at a server/site level) to Create "Policy blocks": i.e. react to email that contains specific strings in particular headers, or particular attachment filenames or types (e.g. *.VBS attachments). Features * Supports almost all commercial (Unix) virus scanners as well as the ever-popular Open Source ClamAV scanner. * Can call more than one virus scanner for each mail message * Has its own internal scanner that can be used for Policy enforcement, or to quarantine viruses that your AV currently cannot Detect * The internal scanner can also be used to quarantine email based on attachment types, or email with certain email headers... Need to stop *.mp3 files or "Subject: ILOVEYOU" email getting onto and off your LAN - can do! :-) * The internal scanner can trigger a "greylist" action instead of a quarantine. This is designed for emergency situations where your current AV and static Policy blocks are not appropriate. e.g. a new ZIP-based virus comes out with random filenames. Your AV cannot detect it, and you can`t globally block ZIP files without hurting valid users. A "greylist" action will cause Qmail-Scanner to Exit with a SMTP temporary failure instead of delivering the message. Valid emails will simply be requeued and can flow through later once your AV can detect the virus, and you decide to remove the greylist policy. * Internal engine scans for poorly formatted messages that are known to be used by trojans/virii to infect clients. As such, this is independent of any virus scanner, and can successfully operate against future virii/trojans. Such messages are quarantined immediately.