mailfront

Plugin: clamav


This plugin scans messages against a ClamAV server. If the message data is detected as having a virus, the message is rejected, and the error response contains the virus name as detected by ClamAV. This scanner only operates over TCP/IP sockets (either remotely or locally).

Note: This file causes mailfront to save messages to temporary files.

Configuration

$CLAMD_HOST
The hostname of the ClamAV scanner. If this name resolves to multiple IP addresses, all of them are tried in sequence (starting at a random point) until one scans the message.
$CLAMD_PORT
Use this port number for the command/response data. (defaults to 3310)
$CLAMD_TIMEOUT
The maximum amount of time to wait for a response from the ClamAD scanner, in milliseconds. (defaults to 5000)

Sender Action

None

Recipient Action

None

Data Action

None

Message Action

The message is scanned when all the data has been completely transmitted (to prevent timeout issues with the ClamAV server).