P3Scan for Email System Utilities Publisher's description
from Jack S. Lai
P3Scan is a full-transparent proxy-server for email clients.
This is a full-transparent proxy-server for email clients. It runs on a Linux box with iptables (for port re-direction).
It can be used to provide email scanning from the internet, to any internal network and is ideal for helping to protect your "Other OS" LAN from harm, especially when used in conjunction with a firewall and other Internet Proxy servers.
It is designed to enable scanning of incoming/outgoing email messages for Virus's, Worms, Trojans, Spam (read as "Un-solicited Bulk Email"), and harmfull attachments. Because viewing HTML mail can enable a "Spammer" to validate an email address (via Web bugs), it can also provide HTML stripping.
You have to set up a port redirection with iptables so that all connections from e.g. inside your office to any POP3/POP3S/SMTP server outside in the world will not leave your router, but come to a local port, on which P3Scan listens.
P3Scan receives from the Linux kernel the original destination (the email server outside in the world) and will connect to them.
All data we receive from the client will be sent to the server, and vice versa. With a little enhancement: we parse the necessary parts of the protocol and when an email is sent from the server, we store it into a file, invoke our scanning, and send it along if it is good, or in the event of POP3/POP3S we replace it with a virus notification and optionally delete the infected message. For infected SMTP messages, we reject the message.
It should be possible to use all scanners using the scannertype=basic.
Also, P3Scan provides scannertype=avpd for high-speed scanning using 'Kaspersky Anti-Virus for Linux', every C programmer can easily adept other scan-daemons (trophie, sophie, antivir, ...).
Neither the client nor the server has to be configured, none of them will take notice that there's a mail scanner (except the client when he gets a virus notification or if he looks into the header, and the server gets our ip as source).
System Requirements:В· pcre-devel
В· iptables (optional *)
В· clamav-devel - The clamav development package if your distribution does not normally install it, but only if you are testing the development version of p3scan and want to use the internal libclamav feature.
В· An Anti-Virus program
В· P3Scan is known to work with:
В· Kaspersky Anti-Virus for Linux (AVPD)
В· Trophie Anti-Virus Daemon
В· FRISK F-Prot Antivirus
В· Clam AntiVirus
В· F-Secure Anti-Virus
В· DSPAM Statistical Spam Protection (optional)
В· Mail::SpamAssassin (optional)
В· renattach (optional - used to delete/rename attachments)
Program Release Status: Major Update
Program Install Support: Install Only