Qmail-Scanner, (also known as scan4virus) is an addon that enables a Qmail Email server to scan all gatewayed Email for certain characteristics. It is typically used for its anti-virus protection functions, in which case it is used in conjunction with commercial virus scanners. but also enables a site to react to Email (at a server/site level) that contains specific strings in particular headers, or particular attachment filenames or types (e.g. *.VBS attachments). It also can be used as an archiving tool for auditing or backup purposes. Qmail-Scanner is integrated into the mail server at a lower level than some other Unix-based virus scanners, resulting in better performance. It is capable of scanning not only locally sent/received Email, but also Email that crosses the server in a relay capacity. It also has SpamAssassin support.
| Tags | Security Communications Email Filters |
|---|---|
| Licenses | GPL |
Recent releases


Release Notes: Some minor bugs were fixed. New features include DLP support and Team Cymru Malware Hash Registry support.


Release Notes: Many changes were made, including the ability to quarantine high-scoring spam along with viruses and policy blocks, a new format for the quarantine-events.txt policy file, and normalization of strings to make pattern matching more consistent.


Release Notes: In this version, zip files are no longer deleted after unpacking to allow AV a better go at the original zip. It now has the option of blocking password-protected zip files ("--block- password-protected"). As almost all viruses forge the mail envelope, it now defaults to not alerting anyone. However, if the "block" occurred due to a policy reason (instead of an AV), then they are still notified.


Release Notes: This release now runs under its own account. This gives better security and is much easier to audit. This version also features better accounting records, as well as more pro-active content-filtering, in an attempt to stop novel viruses/trojans.


Release Notes: This version fixes some issues with SpamAssassin tagging, adds support for the RAV scanner, and alters some error messages.
Recent comments
31 Oct 2002 21:06
Currently Qmail-scanner is up to 1.15
Currently qmail-scanner is up to 1.15,
This is a very nice project... Check it out.
22 Jul 2001 08:11
qmail-scanner patches, tricks & enhancements
Current version of qmail-scanner (qmail-scanner.sourcefo...)
(0.96) hangs when it found an encrypted .zip (the mail will never queued):
there's also a problem when an older uudecode command (found on many
Debian (www.debian.org/) distributions) is encountred during
the installation.
I also added some tips for installing qmail-scanner in a vpopmail enviroment
and published a very complete list of "dangerous" extensions
for Mircosuk operating systems.
If you are interested, check my home page (exe2bin.com/),
or go directly to the qmail-scanner
directory.
Greetings,
Dr.BiC
P.S. I informed the current qmail-scanner mantainer about my page.