Koozali.org: home of the SME Server
Obsolete Releases => SME 7.x Contribs => Topic started by: Knuddi on July 31, 2008, 04:21:53 PM
-
What I would like is a POP3/IMAP and even SMTP proxy that uses the already build in SpamAssassin and ClamAV for scanning. Also it should be transparent for the users on the LAN so I can catch spam/virus for those who have configured personal email account on external mail servers. Today all local (corporate) emails are scanned nicely by SME (SA and ClamAV) but I need this for external servers as well. I shouldn't require any changes to the clients - then they will just disable it anyways....
Hence it needs to catch all requests to external POP3/IMAP/SMTP servers and send the data through SA/Clam.
Does anyone know of such solution?
-
Knuddi
Far better that users configure their external pop accounts to forward all mail to an account on the sme server. That way sme filters for viruses and spam.
You should also configure sme (mail proxy) to stop users accessing external pop and imap accounts.
You can also force authenticated access to stop viruses acting as smtp servers on workstations, and stop relay access for unauthenticated users.
Set it up once and then forget. Users will be forced to follow your "rules".
See
http://wiki.contribs.org/SME_Server:Documentation:FAQ#How_do_I_enable_smtp_authentication_for_users_on_the_internal_network.
and
http://wiki.contribs.org/SME_Server:Documentation:FAQ#How_do_I_disable_SMTP_relay_for_unauthenticated_LAN_clients
-
thanks a lot for the suggestions - absolutely a posibility. I wanted to try not to involve the users - make a transparent system and have now found p3scan which together with iptables configuration can act as this proxy for POP. I am experimenting a little with it and it seems to be able to do some of what I wanted even though not perfect.
-
Hi Knuddi,
You've already got a solution, but just a thought for someone else who's looking for something similar: Untangle (http://www.untangle.com/).
On a virtual machine if one does not want to use another box.
HTH.