[clamav-users] Scanning IMAP traffic without user credential storage

[Robert Schetterer]

Am 26.07.2017 um 11:21 schrieb Beeblebrox:
> Hello.
> How can I setup IMAP incoming email scanning via ClamAV on a LAN gateway. Most devices on the LAN are mobiles. I would prefer to not store or configure user email credentials on the gateway and have the auth mechanism work directly from device to main server (ex: gmail).
> 
> Can the scanning be done in-fligth, or do I need to use an email proxy for this? The only thing I could think of is using a TLS proxy.
> 
> Other Preferences:
> * POP3 is not used (an IMAP-only solution is OK).
> * Support for TLS connection. Preference: query & close (not keep-alive).
> * Handoff to ClamAV, then process message based on scan result.
> * If proxy is required, Transparent, Lightweight, Non-Caching.
> * Platform: FreeBSD 11-Stable with Jailed ClamAV, clamd listening for incoming scan requests.
> 
> Thanks & Regards.
> 

reading this might help

http://www.fim.uni-linz.ac.at/diplomarbeiten/Diplomarbeit_Macskasi.pdf


Best Regards
MfG Robert Schetterer

-- 
[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64
Schleißheimer Straße 26/MG, 80333 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein