5.4 Scanning e-mails in-transit using sendmail/libmilter

This section applies to F-PROT Antivirus for UNIX Mail Server version only

The installation script install-f-prot.pl can automatically configure [sendmail|postfix|qmail] for in-transit scanning. This section describes how to do this manually.

In-transit mail scanning can be achieved using the fp-milter libmilter plugin in conjunction with the F-PROT Antivirus Mail Scanner. To achieve this functionality, two lines must be added to the sendmail.mc configuration file:

> define(`_FFR_MILTER', `true')
> INPUT_MAIL_FILTER(`fp-milter', `S=inet:12200@127.0.0.1, F=T, T=E:8m;C:5m;R:4m;S:2m')

Optionally, if selective scanning based on recipient is desired, the {FP_SCANONLY} sendmail macro can be defined and exported to the envrcpt routine by adding these three lines to sendmail.mc:

> define(`confMILTER_MACROS_ENVRCPT', `{rcpt_mailer}, {rcpt_host}, {rcpt_addr}, {FP_SCANONLY}')
> LOCAL_CONFIG
> D{FP_SCANONLY}@domain1\\.net$$:@domain2\\.net$$:@domain3\\.net$$

After editing your sendmail.mc file, recompile the sendmail.cf file using the Makefile included with sendmail (make sure you have the sendmail-cf package installed, or equivalent). Then restart sendmail.

scan-mail.pl must then be started with the -milter commandline option giving a path the sendmail.cf file as an argument, which will cause scan-mail.pl to start fp-milter, and start listening for scan-requests from fp-milter.

Scan-mail.pl uses fpscand to do the actual virus scans. Make sure fpscand is running before starting the Mail Scanner.

Back to Index

Copyright © 2007 FRISK Software International. All rights reserved