anti-virus solution for Post.Office (new script)

[Joe Savelberg <joe@xxxxxxxxxxx>]

Hi all,

I've changed my Virex and attachement blocker scripts and they are 
now contained into a single file. This should give you some speed 
improvements and additional features. It's been running fine on our 
production mail server for quite some time (the initial version had 
been running since August 2003).

Here are the 3 main features:

- runs the Virex command line scanner through a cron job
- uses grep to check for suspicious attachment names and move them to 
a quarantine folder
- rewrites subject lines to "[Careful: Attachment]" for attachments 
you allow but which still look suspicious


Here are the additional features:

- maintains its own log file so you see what's going on
- allows you to enable/disable various scanning options
- allows you to exclude certain mailboxes from scanning
- moves messages with suspicious attachments to a quarantine folder
- it's possible to use munpack to extract attachments before scanning them
- you can limit the maximum file size of messages to be scanned 
(large messages rarely contain a virus)
- only scans new messages that arrived since the last execution (the 
initial run will scan your whole mailbox directory and therefore 
takes some time)
- automatically checks for the mailbox directory location (allowing 
for custom Post.Office installations)
- runs through a cron job every minute and makes sure that long 
running scans don't interfere with each other (only one scan at a 
time)
- uses a separate file with common virus attachments that might not 
be removed by Virex
- rewrites the message subject when a suspicious suffix is found but 
you still want to allow those attachments (currently .exe, .com, 
..dll, .shs, .zip)

And best of all, there is an online configurator/wizard for the 
script which allows you to set your preferred configuration without 
having to wade through code of my shell script.

I've put more than 100 hours of testing and development into the 
script and it has been running flawlessly on our server. However I'd 
recommend that you test it on a development/backup server first.

If you'd like to test this virex script, please go to the following 
address where you'll find all the information and the online wizard:

http://www.euregio.net/joe/postoffice/

Hope it's useful for some of you,

Joe.


PS: Tenon, when will we get a real anti-virus plugin for Post.Office...?

--
-----------------+----------------+----------------------------------
Jochen Savelberg | Euregio.Net AG | domain registrations, co-location
joe@xxxxxxxxxxx  | Wirtzfeld 140  | hosting, marketing, entertainment
Online Producer  | 4760 Bullingen | consulting, training, development
MIS/IT Director  | Belgium        |      http://www.euregio.net
-----------------+----------------+----------------------------------
Internet Services since 1995 - AFS-Returnee '93, Belgium to Australia
---------
Tenon Intersystems' Post.Office Mailing List
To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
with the body only containing: unsubscribe
Find the searchable mailing list archives at:
http://postoffice.computeroil.com/