|
|
 |
|
This XMAIL filter written in C will allow you to
filter message's content with
command line antivirus software. It will keep track of the message if needed and log when rejected.
It is really fast, and don't use either Perl or VB scripting. It uses an external multipart
message decoder that you
can customize for your own, as well as antivirus software parameters.
C source is provided and available for Windows / Linux / Unix platforms. Modifications are
welcome if you don't remove
any copyright information.
Download the XAV.ZIP archive file [90 kb]
The Dolist Development Team has put together a set of
productivity tools as this one. If you're a Dolist/XMail power-user, go ahead
and try them out, but realize these are unsupported tools. Dolist Technical
Support is unable to answer questions about them. Please contact its author directly.
|
|
|
You already need to know how to use XMAIL ESMTP Server for a good comprehension of the process.
- Copy "xav.exe" and "xav.ini" files to the directory you want to
put the filter. To understand the installation, we will use c:\xav.
- Edit "xav.ini" to add your own definition if needed. One per line.
We use UUDeview http://www.fpx.de/fp/Software/UUDeview/
(included, free).
For decoding message as well as AVG 6.0 Server Edition
(not included).
Anyway, any command virus software can be used. You will find parameters in "xav.ini" for some other antivirus softwares.
XAVDebug will help you to debug and have verbose mode in xav.log file.
0 = means no debug, fastest.
1 = simple debug,
2 = full debug, temp directories aren't suppressed for installtion problem purpose only.
XAVMessage Add here you custom reject message. For no reason, the last character isn't used by XMail.
DecoderPath Full path to MIME decoder executable.
DecoderCommand Command line parameters to pass to MIME decoder executable.
DecoderRemoveUNC XMail passes file path sometimes with \\?\ UNC path. It will helps to remove it to access the file by MIME decoder.
AntivirusPath Full path to antivirus executable path.
AntivirusCommand Command line parameters to pass to antivirus executable.
AntivirusReturn Returned code by antivirus executable when it founds a virus.
- go to the filters directory, then add a new filter.
If you want to make this filter available for all domains, just create
a .tab file. Under Windows, to create such a file, type on the command line:
echo . > .tab
- Edit your .tab, filter.tab or 'yourdomain'.tab file and add the following
line in the .tab file.
"c:\xav\xav.exe"[TAB]"c:\xav"[TAB]"@@FILE"[TAB]"@@FROM"[TAB]"@@RCPT"[TAB]"Retcode"
Don't add a "\" to the second argument!
where "c:\xav\xav.exe" is the full path to executable name and
"c:\xav" the directory where to find xav.ini file.
- If you want to keep the message when rejected, create a directory
under "c:\xav" named "keep". It should be "c:\xav\keep".
Here will be copied rejected messages.
- A "xav.log" file will be created and report message rejected.
- Check out XMAIL documentation for "Retcode" values (4, 5 or 6).
| |
How to decode also zip file
For this you need to create a decode.cmd command file in the same folder, that will contains 2 lines like :
c:\tools\uudeview.exe -i -a -d -o -q %1
c:\tools\unzip -qq *.zip
c:\tools\ folder is just for example. Now edit the xav.ini file and add the following entries :
DecoderPath=c:\xav\decode.cmd
;DecoderCommand= // not used anymore
To unzip the files, we are using the unzip.exe provided freely by Greg Roelofs.
That's all ! :)
|
|
|
|
 |
 |
CUSTOM AV AND DECODER SOFTWARES |
 |
 |
 |
|
XAV has been tested with these softwares.
If you have parameters for AV and decoder softwares
not listed in xav.ini, please send it to us to update and make it available for others.
Antivirus softwares
MIME decoder softwares
ZIP decoder softwares
|
|
|
02.apr.2004 - D.Olivier - Fix AVG 6 parameter to work properly.
30.mar.2004 - D.Olivier - Remove DecoderReturn .ini entry, not used.
28.mar.2004 - D.Olivier - Make 8.3 temp directories.
09.mar.2004 - D.Olivier - Added log function.
10.mar.2004 - D.Olivier - Use UUDEview instead of munpack.
10.mar.2004 - D.Olivier - Add DecoderRemoveUNC= to xav.ini to delete \\?\ from message path.
16.oct.2003 - D.Olivier - Fixed problem with some temp directories.
Also added in .ini file entries to use MimeQP decoder and F-Prot.
11.sep.2003 - D.Olivier - Added custom reject message (XAVMessage entry).
22.aug.2003 - J.Laffitte - now, seems to run on major unix systems.
19.aug.2003 - J.Laffitte - Timestamp in log added. Debug mode enhanced to log every message analyzed.
08.aug.2003 - J.Laffitte - temporary files and its directories are deleted
in depth. Files in keep directory are named incrementaly if the filename
is already used.
05.aug.2003 - J.Laffitte - replace the mkdir, chdir and rmdir functions by
their equivalents in win32 api : CreateDirectory, SetCurrentDirectory and
RemoveDirectory.
01.aug.2003 - Denis Olivier - update for public release.
31.jul.2003 - Julien Laffitte (DOLIST.NET) - main and primary coding.
|
|
|  |