[clamav-users] Scanning IMAP traffic without user credential storage

[Beeblebrox]

Hello.
How can I setup IMAP incoming email scanning via ClamAV on a LAN gateway. Most devices on the LAN are mobiles. I would prefer to not store or configure user email credentials on the gateway and have the auth mechanism work directly from device to main server (ex: gmail).

Can the scanning be done in-fligth, or do I need to use an email proxy for this? The only thing I could think of is using a TLS proxy.

Other Preferences:
* POP3 is not used (an IMAP-only solution is OK).
* Support for TLS connection. Preference: query & close (not keep-alive).
* Handoff to ClamAV, then process message based on scan result.
* If proxy is required, Transparent, Lightweight, Non-Caching.
* Platform: FreeBSD 11-Stable with Jailed ClamAV, clamd listening for incoming scan requests.

Thanks & Regards.

-- 
Please CC my email when responding, mail from list is not delivered.