chore: inital commit
This commit is contained in:
commit
4769cfbf35
GPG Key ID:
EABDA0FD5981BC97
339
LICENSE
Normal file
339
LICENSE
Normal file
@ -0,0 +1,339 @@
|
|||||||
|
GNU GENERAL PUBLIC LICENSE
|
||||||
|
Version 2, June 1991
|
||||||
|
|
||||||
|
Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
|
||||||
|
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
||||||
|
Everyone is permitted to copy and distribute verbatim copies
|
||||||
|
of this license document, but changing it is not allowed.
|
||||||
|
|
||||||
|
Preamble
|
||||||
|
|
||||||
|
The licenses for most software are designed to take away your
|
||||||
|
freedom to share and change it. By contrast, the GNU General Public
|
||||||
|
License is intended to guarantee your freedom to share and change free
|
||||||
|
software--to make sure the software is free for all its users. This
|
||||||
|
General Public License applies to most of the Free Software
|
||||||
|
Foundation's software and to any other program whose authors commit to
|
||||||
|
using it. (Some other Free Software Foundation software is covered by
|
||||||
|
the GNU Lesser General Public License instead.) You can apply it to
|
||||||
|
your programs, too.
|
||||||
|
|
||||||
|
When we speak of free software, we are referring to freedom, not
|
||||||
|
price. Our General Public Licenses are designed to make sure that you
|
||||||
|
have the freedom to distribute copies of free software (and charge for
|
||||||
|
this service if you wish), that you receive source code or can get it
|
||||||
|
if you want it, that you can change the software or use pieces of it
|
||||||
|
in new free programs; and that you know you can do these things.
|
||||||
|
|
||||||
|
To protect your rights, we need to make restrictions that forbid
|
||||||
|
anyone to deny you these rights or to ask you to surrender the rights.
|
||||||
|
These restrictions translate to certain responsibilities for you if you
|
||||||
|
distribute copies of the software, or if you modify it.
|
||||||
|
|
||||||
|
For example, if you distribute copies of such a program, whether
|
||||||
|
gratis or for a fee, you must give the recipients all the rights that
|
||||||
|
you have. You must make sure that they, too, receive or can get the
|
||||||
|
source code. And you must show them these terms so they know their
|
||||||
|
rights.
|
||||||
|
|
||||||
|
We protect your rights with two steps: (1) copyright the software, and
|
||||||
|
(2) offer you this license which gives you legal permission to copy,
|
||||||
|
distribute and/or modify the software.
|
||||||
|
|
||||||
|
Also, for each author's protection and ours, we want to make certain
|
||||||
|
that everyone understands that there is no warranty for this free
|
||||||
|
software. If the software is modified by someone else and passed on, we
|
||||||
|
want its recipients to know that what they have is not the original, so
|
||||||
|
that any problems introduced by others will not reflect on the original
|
||||||
|
authors' reputations.
|
||||||
|
|
||||||
|
Finally, any free program is threatened constantly by software
|
||||||
|
patents. We wish to avoid the danger that redistributors of a free
|
||||||
|
program will individually obtain patent licenses, in effect making the
|
||||||
|
program proprietary. To prevent this, we have made it clear that any
|
||||||
|
patent must be licensed for everyone's free use or not licensed at all.
|
||||||
|
|
||||||
|
The precise terms and conditions for copying, distribution and
|
||||||
|
modification follow.
|
||||||
|
|
||||||
|
GNU GENERAL PUBLIC LICENSE
|
||||||
|
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
|
||||||
|
|
||||||
|
0. This License applies to any program or other work which contains
|
||||||
|
a notice placed by the copyright holder saying it may be distributed
|
||||||
|
under the terms of this General Public License. The "Program", below,
|
||||||
|
refers to any such program or work, and a "work based on the Program"
|
||||||
|
means either the Program or any derivative work under copyright law:
|
||||||
|
that is to say, a work containing the Program or a portion of it,
|
||||||
|
either verbatim or with modifications and/or translated into another
|
||||||
|
language. (Hereinafter, translation is included without limitation in
|
||||||
|
the term "modification".) Each licensee is addressed as "you".
|
||||||
|
|
||||||
|
Activities other than copying, distribution and modification are not
|
||||||
|
covered by this License; they are outside its scope. The act of
|
||||||
|
running the Program is not restricted, and the output from the Program
|
||||||
|
is covered only if its contents constitute a work based on the
|
||||||
|
Program (independent of having been made by running the Program).
|
||||||
|
Whether that is true depends on what the Program does.
|
||||||
|
|
||||||
|
1. You may copy and distribute verbatim copies of the Program's
|
||||||
|
source code as you receive it, in any medium, provided that you
|
||||||
|
conspicuously and appropriately publish on each copy an appropriate
|
||||||
|
copyright notice and disclaimer of warranty; keep intact all the
|
||||||
|
notices that refer to this License and to the absence of any warranty;
|
||||||
|
and give any other recipients of the Program a copy of this License
|
||||||
|
along with the Program.
|
||||||
|
|
||||||
|
You may charge a fee for the physical act of transferring a copy, and
|
||||||
|
you may at your option offer warranty protection in exchange for a fee.
|
||||||
|
|
||||||
|
2. You may modify your copy or copies of the Program or any portion
|
||||||
|
of it, thus forming a work based on the Program, and copy and
|
||||||
|
distribute such modifications or work under the terms of Section 1
|
||||||
|
above, provided that you also meet all of these conditions:
|
||||||
|
|
||||||
|
a) You must cause the modified files to carry prominent notices
|
||||||
|
stating that you changed the files and the date of any change.
|
||||||
|
|
||||||
|
b) You must cause any work that you distribute or publish, that in
|
||||||
|
whole or in part contains or is derived from the Program or any
|
||||||
|
part thereof, to be licensed as a whole at no charge to all third
|
||||||
|
parties under the terms of this License.
|
||||||
|
|
||||||
|
c) If the modified program normally reads commands interactively
|
||||||
|
when run, you must cause it, when started running for such
|
||||||
|
interactive use in the most ordinary way, to print or display an
|
||||||
|
announcement including an appropriate copyright notice and a
|
||||||
|
notice that there is no warranty (or else, saying that you provide
|
||||||
|
a warranty) and that users may redistribute the program under
|
||||||
|
these conditions, and telling the user how to view a copy of this
|
||||||
|
License. (Exception: if the Program itself is interactive but
|
||||||
|
does not normally print such an announcement, your work based on
|
||||||
|
the Program is not required to print an announcement.)
|
||||||
|
|
||||||
|
These requirements apply to the modified work as a whole. If
|
||||||
|
identifiable sections of that work are not derived from the Program,
|
||||||
|
and can be reasonably considered independent and separate works in
|
||||||
|
themselves, then this License, and its terms, do not apply to those
|
||||||
|
sections when you distribute them as separate works. But when you
|
||||||
|
distribute the same sections as part of a whole which is a work based
|
||||||
|
on the Program, the distribution of the whole must be on the terms of
|
||||||
|
this License, whose permissions for other licensees extend to the
|
||||||
|
entire whole, and thus to each and every part regardless of who wrote it.
|
||||||
|
|
||||||
|
Thus, it is not the intent of this section to claim rights or contest
|
||||||
|
your rights to work written entirely by you; rather, the intent is to
|
||||||
|
exercise the right to control the distribution of derivative or
|
||||||
|
collective works based on the Program.
|
||||||
|
|
||||||
|
In addition, mere aggregation of another work not based on the Program
|
||||||
|
with the Program (or with a work based on the Program) on a volume of
|
||||||
|
a storage or distribution medium does not bring the other work under
|
||||||
|
the scope of this License.
|
||||||
|
|
||||||
|
3. You may copy and distribute the Program (or a work based on it,
|
||||||
|
under Section 2) in object code or executable form under the terms of
|
||||||
|
Sections 1 and 2 above provided that you also do one of the following:
|
||||||
|
|
||||||
|
a) Accompany it with the complete corresponding machine-readable
|
||||||
|
source code, which must be distributed under the terms of Sections
|
||||||
|
1 and 2 above on a medium customarily used for software interchange; or,
|
||||||
|
|
||||||
|
b) Accompany it with a written offer, valid for at least three
|
||||||
|
years, to give any third party, for a charge no more than your
|
||||||
|
cost of physically performing source distribution, a complete
|
||||||
|
machine-readable copy of the corresponding source code, to be
|
||||||
|
distributed under the terms of Sections 1 and 2 above on a medium
|
||||||
|
customarily used for software interchange; or,
|
||||||
|
|
||||||
|
c) Accompany it with the information you received as to the offer
|
||||||
|
to distribute corresponding source code. (This alternative is
|
||||||
|
allowed only for noncommercial distribution and only if you
|
||||||
|
received the program in object code or executable form with such
|
||||||
|
an offer, in accord with Subsection b above.)
|
||||||
|
|
||||||
|
The source code for a work means the preferred form of the work for
|
||||||
|
making modifications to it. For an executable work, complete source
|
||||||
|
code means all the source code for all modules it contains, plus any
|
||||||
|
associated interface definition files, plus the scripts used to
|
||||||
|
control compilation and installation of the executable. However, as a
|
||||||
|
special exception, the source code distributed need not include
|
||||||
|
anything that is normally distributed (in either source or binary
|
||||||
|
form) with the major components (compiler, kernel, and so on) of the
|
||||||
|
operating system on which the executable runs, unless that component
|
||||||
|
itself accompanies the executable.
|
||||||
|
|
||||||
|
If distribution of executable or object code is made by offering
|
||||||
|
access to copy from a designated place, then offering equivalent
|
||||||
|
access to copy the source code from the same place counts as
|
||||||
|
distribution of the source code, even though third parties are not
|
||||||
|
compelled to copy the source along with the object code.
|
||||||
|
|
||||||
|
4. You may not copy, modify, sublicense, or distribute the Program
|
||||||
|
except as expressly provided under this License. Any attempt
|
||||||
|
otherwise to copy, modify, sublicense or distribute the Program is
|
||||||
|
void, and will automatically terminate your rights under this License.
|
||||||
|
However, parties who have received copies, or rights, from you under
|
||||||
|
this License will not have their licenses terminated so long as such
|
||||||
|
parties remain in full compliance.
|
||||||
|
|
||||||
|
5. You are not required to accept this License, since you have not
|
||||||
|
signed it. However, nothing else grants you permission to modify or
|
||||||
|
distribute the Program or its derivative works. These actions are
|
||||||
|
prohibited by law if you do not accept this License. Therefore, by
|
||||||
|
modifying or distributing the Program (or any work based on the
|
||||||
|
Program), you indicate your acceptance of this License to do so, and
|
||||||
|
all its terms and conditions for copying, distributing or modifying
|
||||||
|
the Program or works based on it.
|
||||||
|
|
||||||
|
6. Each time you redistribute the Program (or any work based on the
|
||||||
|
Program), the recipient automatically receives a license from the
|
||||||
|
original licensor to copy, distribute or modify the Program subject to
|
||||||
|
these terms and conditions. You may not impose any further
|
||||||
|
restrictions on the recipients' exercise of the rights granted herein.
|
||||||
|
You are not responsible for enforcing compliance by third parties to
|
||||||
|
this License.
|
||||||
|
|
||||||
|
7. If, as a consequence of a court judgment or allegation of patent
|
||||||
|
infringement or for any other reason (not limited to patent issues),
|
||||||
|
conditions are imposed on you (whether by court order, agreement or
|
||||||
|
otherwise) that contradict the conditions of this License, they do not
|
||||||
|
excuse you from the conditions of this License. If you cannot
|
||||||
|
distribute so as to satisfy simultaneously your obligations under this
|
||||||
|
License and any other pertinent obligations, then as a consequence you
|
||||||
|
may not distribute the Program at all. For example, if a patent
|
||||||
|
license would not permit royalty-free redistribution of the Program by
|
||||||
|
all those who receive copies directly or indirectly through you, then
|
||||||
|
the only way you could satisfy both it and this License would be to
|
||||||
|
refrain entirely from distribution of the Program.
|
||||||
|
|
||||||
|
If any portion of this section is held invalid or unenforceable under
|
||||||
|
any particular circumstance, the balance of the section is intended to
|
||||||
|
apply and the section as a whole is intended to apply in other
|
||||||
|
circumstances.
|
||||||
|
|
||||||
|
It is not the purpose of this section to induce you to infringe any
|
||||||
|
patents or other property right claims or to contest validity of any
|
||||||
|
such claims; this section has the sole purpose of protecting the
|
||||||
|
integrity of the free software distribution system, which is
|
||||||
|
implemented by public license practices. Many people have made
|
||||||
|
generous contributions to the wide range of software distributed
|
||||||
|
through that system in reliance on consistent application of that
|
||||||
|
system; it is up to the author/donor to decide if he or she is willing
|
||||||
|
to distribute software through any other system and a licensee cannot
|
||||||
|
impose that choice.
|
||||||
|
|
||||||
|
This section is intended to make thoroughly clear what is believed to
|
||||||
|
be a consequence of the rest of this License.
|
||||||
|
|
||||||
|
8. If the distribution and/or use of the Program is restricted in
|
||||||
|
certain countries either by patents or by copyrighted interfaces, the
|
||||||
|
original copyright holder who places the Program under this License
|
||||||
|
may add an explicit geographical distribution limitation excluding
|
||||||
|
those countries, so that distribution is permitted only in or among
|
||||||
|
countries not thus excluded. In such case, this License incorporates
|
||||||
|
the limitation as if written in the body of this License.
|
||||||
|
|
||||||
|
9. The Free Software Foundation may publish revised and/or new versions
|
||||||
|
of the General Public License from time to time. Such new versions will
|
||||||
|
be similar in spirit to the present version, but may differ in detail to
|
||||||
|
address new problems or concerns.
|
||||||
|
|
||||||
|
Each version is given a distinguishing version number. If the Program
|
||||||
|
specifies a version number of this License which applies to it and "any
|
||||||
|
later version", you have the option of following the terms and conditions
|
||||||
|
either of that version or of any later version published by the Free
|
||||||
|
Software Foundation. If the Program does not specify a version number of
|
||||||
|
this License, you may choose any version ever published by the Free Software
|
||||||
|
Foundation.
|
||||||
|
|
||||||
|
10. If you wish to incorporate parts of the Program into other free
|
||||||
|
programs whose distribution conditions are different, write to the author
|
||||||
|
to ask for permission. For software which is copyrighted by the Free
|
||||||
|
Software Foundation, write to the Free Software Foundation; we sometimes
|
||||||
|
make exceptions for this. Our decision will be guided by the two goals
|
||||||
|
of preserving the free status of all derivatives of our free software and
|
||||||
|
of promoting the sharing and reuse of software generally.
|
||||||
|
|
||||||
|
NO WARRANTY
|
||||||
|
|
||||||
|
11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
|
||||||
|
FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
|
||||||
|
OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
|
||||||
|
PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
|
||||||
|
OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||||
|
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
|
||||||
|
TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
|
||||||
|
PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
|
||||||
|
REPAIR OR CORRECTION.
|
||||||
|
|
||||||
|
12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
|
||||||
|
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
|
||||||
|
REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
|
||||||
|
INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
|
||||||
|
OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
|
||||||
|
TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
|
||||||
|
YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
|
||||||
|
PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
|
||||||
|
POSSIBILITY OF SUCH DAMAGES.
|
||||||
|
|
||||||
|
END OF TERMS AND CONDITIONS
|
||||||
|
|
||||||
|
How to Apply These Terms to Your New Programs
|
||||||
|
|
||||||
|
If you develop a new program, and you want it to be of the greatest
|
||||||
|
possible use to the public, the best way to achieve this is to make it
|
||||||
|
free software which everyone can redistribute and change under these terms.
|
||||||
|
|
||||||
|
To do so, attach the following notices to the program. It is safest
|
||||||
|
to attach them to the start of each source file to most effectively
|
||||||
|
convey the exclusion of warranty; and each file should have at least
|
||||||
|
the "copyright" line and a pointer to where the full notice is found.
|
||||||
|
|
||||||
|
<one line to give the program's name and a brief idea of what it does.>
|
||||||
|
Copyright (C) <year> <name of author>
|
||||||
|
|
||||||
|
This program is free software; you can redistribute it and/or modify
|
||||||
|
it under the terms of the GNU General Public License as published by
|
||||||
|
the Free Software Foundation; either version 2 of the License, or
|
||||||
|
(at your option) any later version.
|
||||||
|
|
||||||
|
This program is distributed in the hope that it will be useful,
|
||||||
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
GNU General Public License for more details.
|
||||||
|
|
||||||
|
You should have received a copy of the GNU General Public License along
|
||||||
|
with this program; if not, write to the Free Software Foundation, Inc.,
|
||||||
|
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
||||||
|
|
||||||
|
Also add information on how to contact you by electronic and paper mail.
|
||||||
|
|
||||||
|
If the program is interactive, make it output a short notice like this
|
||||||
|
when it starts in an interactive mode:
|
||||||
|
|
||||||
|
Gnomovision version 69, Copyright (C) year name of author
|
||||||
|
Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
|
||||||
|
This is free software, and you are welcome to redistribute it
|
||||||
|
under certain conditions; type `show c' for details.
|
||||||
|
|
||||||
|
The hypothetical commands `show w' and `show c' should show the appropriate
|
||||||
|
parts of the General Public License. Of course, the commands you use may
|
||||||
|
be called something other than `show w' and `show c'; they could even be
|
||||||
|
mouse-clicks or menu items--whatever suits your program.
|
||||||
|
|
||||||
|
You should also get your employer (if you work as a programmer) or your
|
||||||
|
school, if any, to sign a "copyright disclaimer" for the program, if
|
||||||
|
necessary. Here is a sample; alter the names:
|
||||||
|
|
||||||
|
Yoyodyne, Inc., hereby disclaims all copyright interest in the program
|
||||||
|
`Gnomovision' (which makes passes at compilers) written by James Hacker.
|
||||||
|
|
||||||
|
<signature of Ty Coon>, 1 April 1989
|
||||||
|
Ty Coon, President of Vice
|
||||||
|
|
||||||
|
This General Public License does not permit incorporating your program into
|
||||||
|
proprietary programs. If your program is a subroutine library, you may
|
||||||
|
consider it more useful to permit linking proprietary applications with the
|
||||||
|
library. If this is what you want to do, use the GNU Lesser General
|
||||||
|
Public License instead of this License.
|
||||||
17
README.md
Normal file
17
README.md
Normal file
@ -0,0 +1,17 @@
|
|||||||
|
# QPSMTPD - MailserverInterface
|
||||||
|
|
||||||
|
## DESCRIPTION
|
||||||
|
|
||||||
|
QPSMTPD plugins for interfacing with the FederationHQ MailserverInterface daemon.
|
||||||
|
|
||||||
|
## INSTALLATION
|
||||||
|
|
||||||
|
Copy the plugins to the QPSMTPD plugin directory.
|
||||||
|
|
||||||
|
## AUTHOR
|
||||||
|
|
||||||
|
- Dominik Meyer <dmeyer@federationhq.de>
|
||||||
|
|
||||||
|
## LICENSE
|
||||||
|
|
||||||
|
GPLv3
|
||||||
350
clamdscan
Normal file
350
clamdscan
Normal file
@ -0,0 +1,350 @@
|
|||||||
|
#!perl -w
|
||||||
|
|
||||||
|
=head1 NAME
|
||||||
|
|
||||||
|
clamdscan
|
||||||
|
|
||||||
|
=head1 DESCRIPTION
|
||||||
|
|
||||||
|
A qpsmtpd plugin for virus scanning using the ClamAV scan daemon, clamd.
|
||||||
|
|
||||||
|
=head1 RESTRICTIONS
|
||||||
|
|
||||||
|
If connecting to clamd via TCP/IP host:port, then ignore this restriction.
|
||||||
|
|
||||||
|
The ClamAV scan daemon, clamd, must have at least execute access to the qpsmtpd
|
||||||
|
spool directory in order to sucessfully scan the messages. You can ensure this
|
||||||
|
by running clamd as the same user as qpsmtpd does, or by doing the following:
|
||||||
|
|
||||||
|
=over 4
|
||||||
|
|
||||||
|
=item * Change the group ownership of the spool directory to be a group
|
||||||
|
of which clamav is a member or add clamav to the same group as the qpsmtpd
|
||||||
|
user.
|
||||||
|
|
||||||
|
=item * Enable the "AllowSupplementaryGroups" option in clamd.conf.
|
||||||
|
|
||||||
|
=item * Add group-execute permissions to the qpsmtpd spool directory.
|
||||||
|
|
||||||
|
=item * Make sure that all directories above the spool directory (to the
|
||||||
|
root) are g+x so that the group has directory traversal rights; it is not
|
||||||
|
necessary for the group to have any read rights.
|
||||||
|
|
||||||
|
=back
|
||||||
|
|
||||||
|
It may be helpful to temporary grant the clamav user a shell and test to
|
||||||
|
make sure you can cd into the spool directory and read files located there.
|
||||||
|
Remember to remove the shell from the clamav user when you are done
|
||||||
|
testing.
|
||||||
|
|
||||||
|
=head1 INSTALL AND CONFIG
|
||||||
|
|
||||||
|
Place this plugin in the plugin/virus directory beneath the standard
|
||||||
|
qpsmtpd installation. If you installed clamd with the default path, you
|
||||||
|
can use this plugin with default options (nothing specified):
|
||||||
|
|
||||||
|
You must have the ClamAV::Client module installed to use the plugin.
|
||||||
|
|
||||||
|
=over 4
|
||||||
|
|
||||||
|
=item B<clamd_socket>
|
||||||
|
|
||||||
|
Full path to the clamd socket, if different from the ClamAV::Client defaults.
|
||||||
|
|
||||||
|
=item B<clamd_host>
|
||||||
|
|
||||||
|
IP address where clamd is listening.
|
||||||
|
|
||||||
|
Default: localhost
|
||||||
|
|
||||||
|
=item B<clamd_port>
|
||||||
|
|
||||||
|
The TCP port where the clamd service is running, typically 3310.
|
||||||
|
|
||||||
|
Default: disabled. When present, overrides clamd_socket.
|
||||||
|
|
||||||
|
=item B<deny_viruses>
|
||||||
|
|
||||||
|
Whether the scanner will automatically delete messages which have viruses.
|
||||||
|
Takes either 'yes' or 'no'. If set to 'no', adds a header with the virus name.
|
||||||
|
|
||||||
|
Default: yes
|
||||||
|
|
||||||
|
=item B<defer_on_error>
|
||||||
|
|
||||||
|
Whether to defer the mail (with a soft-failure error, which will incur a retry)
|
||||||
|
if an unrecoverable error occurs during the scan. The default is to accept
|
||||||
|
the mail under these conditions. This can permit viruses to be accepted when
|
||||||
|
the clamd daemon is malfunctioning or unreadable, but will not allow mail to
|
||||||
|
backlog or be lost if the condition persists.
|
||||||
|
|
||||||
|
=item B<max_size>
|
||||||
|
|
||||||
|
The maximum size, in kilobytes, of messages to scan.
|
||||||
|
|
||||||
|
Default: 1024 (1 MB)
|
||||||
|
|
||||||
|
=item B<scan_all>
|
||||||
|
|
||||||
|
Scan all messages, even if there are no attachments
|
||||||
|
|
||||||
|
=back
|
||||||
|
|
||||||
|
=head1 REQUIREMENTS
|
||||||
|
|
||||||
|
This module requires the ClamAV::Client module, found on CPAN here:
|
||||||
|
|
||||||
|
L<http://search.cpan.org/dist/ClamAV-Client/>
|
||||||
|
|
||||||
|
=head1 AUTHOR
|
||||||
|
|
||||||
|
Originally written for the Clamd module by John Peacock <jpeacock@cpan.org>;
|
||||||
|
adjusted for ClamAV::Client by Devin Carraway <qpsmtpd/@/devin.com>.
|
||||||
|
|
||||||
|
=head1 COPYRIGHT AND LICENSE
|
||||||
|
|
||||||
|
Copyright (c) 2005 John Peacock,
|
||||||
|
Copyright (c) 2007 Devin Carraway
|
||||||
|
Copyright (c) 2013 Matt Simerson
|
||||||
|
|
||||||
|
Based heavily on the clamav plugin
|
||||||
|
|
||||||
|
This plugin is licensed under the same terms as the qpsmtpd package itself.
|
||||||
|
Please see the LICENSE file included with qpsmtpd for details.
|
||||||
|
|
||||||
|
=cut
|
||||||
|
|
||||||
|
use strict;
|
||||||
|
use warnings;
|
||||||
|
|
||||||
|
#use ClamAV::Client; # eval'ed in $self->register
|
||||||
|
use Socket qw(:DEFAULT :crlf);
|
||||||
|
|
||||||
|
use Qpsmtpd::Constants;
|
||||||
|
|
||||||
|
sub register {
|
||||||
|
my $self = shift;
|
||||||
|
my $qp = shift;
|
||||||
|
|
||||||
|
$self->log(LOGERROR, "Bad parameters for the clamdscan plugin") if @_ % 2;
|
||||||
|
$self->{'_args'} = {@_};
|
||||||
|
|
||||||
|
eval 'use Net::ClamAV::Client'; ## no critic (Stringy)
|
||||||
|
if ($@) {
|
||||||
|
$self->log(LOGERROR, "unable to load Net::ClamAV::Client");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
# Set sensible defaults
|
||||||
|
$self->{_args}{max_size} ||= 1024;
|
||||||
|
if ( ! defined $self->{_args}{deny_viruses} ) {
|
||||||
|
$self->{_args}{deny_viruses} = 'yes';
|
||||||
|
}
|
||||||
|
if ( ! defined $self->{_args}{scan_all} ) {
|
||||||
|
$self->{_args}{scan_all} = 1;
|
||||||
|
}
|
||||||
|
for my $setting (qw( deny_viruses defer_on_error scan_all )) {
|
||||||
|
next unless $self->{'_args'}{$setting};
|
||||||
|
if (lc $self->{'_args'}{$setting} eq 'no') {
|
||||||
|
$self->{'_args'}{$setting} = 0;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
$self->register_hook('data_post', 'data_post_handler');
|
||||||
|
}
|
||||||
|
|
||||||
|
sub data_post_handler {
|
||||||
|
my ($self, $transaction) = @_;
|
||||||
|
|
||||||
|
|
||||||
|
if ($self->connection->notes('naughty')) {
|
||||||
|
$self->log(LOGINFO, "skip, naughty");
|
||||||
|
return DECLINED;
|
||||||
|
}
|
||||||
|
return DECLINED if ! $self->should_scan($transaction);
|
||||||
|
|
||||||
|
my $clamd = $self->get_clamd()
|
||||||
|
or return $self->err_and_return("Cannot instantiate ClamAV::Client");
|
||||||
|
|
||||||
|
unless ($clamd->ping() ) {
|
||||||
|
return $self->err_and_return("Cannot ping clamd server: $@");
|
||||||
|
}
|
||||||
|
|
||||||
|
my ($version) = split(/\//, $clamd->version);
|
||||||
|
$version ||= 'ClamAV';
|
||||||
|
|
||||||
|
my ($path, $found);
|
||||||
|
if ( $self->{_args}{clamd_port} ) {
|
||||||
|
my $message = $self->assemble_message($transaction);
|
||||||
|
$found = eval { $clamd->scanScalar(\$message) }; # pass scalar ref
|
||||||
|
# $found = eval { $clamd->scan_stream() }; # pass IO handle
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
my $filename = $self->get_filename($transaction) or return DECLINED;
|
||||||
|
$self->set_permission($filename) or return DECLINED;
|
||||||
|
($path, $found) = eval { $clamd->scan_path($filename) };
|
||||||
|
};
|
||||||
|
|
||||||
|
if ($@) {
|
||||||
|
return $self->err_and_return("Error scanning mail: $@");
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($found) {
|
||||||
|
$self->log(LOGNOTICE, "fail, found virus $found");
|
||||||
|
|
||||||
|
$self->is_naughty(1); # see plugins/naughty
|
||||||
|
$self->adjust_karma(-1);
|
||||||
|
|
||||||
|
if ($self->{_args}{deny_viruses}) {
|
||||||
|
return DENY, "Virus found: $found";
|
||||||
|
}
|
||||||
|
|
||||||
|
$transaction->header->add('X-Virus-Found', 'Yes', 0);
|
||||||
|
$transaction->header->add('X-Virus-Details', $found, 0);
|
||||||
|
return DECLINED;
|
||||||
|
}
|
||||||
|
|
||||||
|
$self->log(LOGINFO, "pass, clean");
|
||||||
|
$transaction->header->add('X-Virus-Found', 'No', 0);
|
||||||
|
$transaction->header->add('X-Virus-Checked',
|
||||||
|
"by $version on " . $self->qp->config('me'), 0);
|
||||||
|
return DECLINED;
|
||||||
|
}
|
||||||
|
|
||||||
|
sub assemble_message {
|
||||||
|
my ($self, $transaction) = @_;
|
||||||
|
$transaction->body_resetpos;
|
||||||
|
my $message = $transaction->header->as_string . "\n\n";
|
||||||
|
while (my $line = $transaction->body_getline) { $message .= $line; }
|
||||||
|
$message = join(CRLF, split /\n/, $message);
|
||||||
|
return $message . CRLF;
|
||||||
|
}
|
||||||
|
|
||||||
|
sub err_and_return {
|
||||||
|
my $self = shift;
|
||||||
|
my $message = shift;
|
||||||
|
if ($message) {
|
||||||
|
$self->log(LOGERROR, $message);
|
||||||
|
}
|
||||||
|
return DENYSOFT, "Unable to scan for viruses"
|
||||||
|
if $self->{_args}{defer_on_error};
|
||||||
|
return DECLINED, "skip";
|
||||||
|
}
|
||||||
|
|
||||||
|
sub get_filename {
|
||||||
|
my $self = shift;
|
||||||
|
my $transaction = shift || $self->qp->transaction;
|
||||||
|
|
||||||
|
my $filename = $transaction->body_filename;
|
||||||
|
|
||||||
|
if (!$filename) {
|
||||||
|
$self->log(LOGWARN, "Cannot process due to lack of filename");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!-f $filename) {
|
||||||
|
if ($transaction->data_size) {
|
||||||
|
$self->log(LOGERROR, "spool file missing! Attempting to respool");
|
||||||
|
$transaction->body_spool;
|
||||||
|
$filename = $transaction->body_filename;
|
||||||
|
};
|
||||||
|
if (!-f $filename) {
|
||||||
|
$self->log(LOGERROR, "skip: failed spool to $filename! Giving up");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
my $size = (stat($filename))[7];
|
||||||
|
$self->log(LOGDEBUG, "Spooled $size bytes to $filename");
|
||||||
|
}
|
||||||
|
|
||||||
|
return $filename;
|
||||||
|
}
|
||||||
|
|
||||||
|
sub set_permission {
|
||||||
|
my ($self, $filename) = @_;
|
||||||
|
|
||||||
|
# the spool directory must be readable and executable by the scanner;
|
||||||
|
# this generally means either group or world exec; if
|
||||||
|
# neither of these is set, issue a warning but try to proceed anyway
|
||||||
|
my $dir_mode = (stat($self->spool_dir()))[2];
|
||||||
|
$self->log(LOGDEBUG, "spool dir mode: $dir_mode");
|
||||||
|
|
||||||
|
if ($dir_mode & oct('0010') || $dir_mode & oct('0001')) {
|
||||||
|
|
||||||
|
# match the spool file mode with the mode of the directory -- add
|
||||||
|
# the read bit for group, world, or both, depending on what the
|
||||||
|
# spool dir had, and strip all other bits, especially the sticky bit
|
||||||
|
my $fmode =
|
||||||
|
($dir_mode & oct('0044')) | ($dir_mode & oct('0010') ? oct('0040') : 0) |
|
||||||
|
($dir_mode & oct('0001') ? oct('0004') : 0);
|
||||||
|
|
||||||
|
unless (chmod $fmode, $filename) {
|
||||||
|
$self->log(LOGERROR, "chmod: $filename: $!");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
$self->log(LOGWARN,
|
||||||
|
"spool directory permissions do not permit scanner access");
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
sub get_clamd {
|
||||||
|
my $self = shift;
|
||||||
|
|
||||||
|
my $port = $self->{'_args'}{'clamd_port'};
|
||||||
|
my $host = $self->{'_args'}{'clamd_host'} || 'localhost';
|
||||||
|
|
||||||
|
if ($port && $port =~ /^(\d+)/) {
|
||||||
|
return new Net::ClamAV::Client({url => "$host:$1"});
|
||||||
|
}
|
||||||
|
|
||||||
|
my $socket = $self->{'_args'}{'clamd_socket'};
|
||||||
|
if ($socket) {
|
||||||
|
if ($socket =~ /([\w\/.]+)/) {
|
||||||
|
return new ClamAV::Client(socket_name => $1);
|
||||||
|
}
|
||||||
|
$self->log(LOGERROR, "invalid characters in socket name");
|
||||||
|
}
|
||||||
|
|
||||||
|
return new Net::ClamAV::Client;
|
||||||
|
}
|
||||||
|
|
||||||
|
sub is_too_big {
|
||||||
|
my $self = shift;
|
||||||
|
my $transaction = shift || $self->qp->transaction;
|
||||||
|
|
||||||
|
my $size = $transaction->data_size;
|
||||||
|
if ($size > $self->{_args}{max_size} * 1024) {
|
||||||
|
$self->log(LOGINFO, "skip, too big ($size)");
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
$self->log(LOGDEBUG, "data_size, $size");
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
sub is_multipart {
|
||||||
|
my $self = shift;
|
||||||
|
my $transaction = shift || $self->qp->transaction;
|
||||||
|
|
||||||
|
return 0 if !$transaction->header;
|
||||||
|
|
||||||
|
# Ignore non-multipart emails
|
||||||
|
my $content_type = $transaction->header->get('Content-Type') or return 0;
|
||||||
|
$content_type =~ s/\s/ /g;
|
||||||
|
if ($content_type !~ m!\bmultipart/.*\bboundary="?([^"]+)!i) {
|
||||||
|
$self->log(LOGNOTICE, "skip, not multipart");
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
sub should_scan {
|
||||||
|
my $self = shift;
|
||||||
|
my $tran = shift;
|
||||||
|
return 0 if $self->is_too_big($tran);
|
||||||
|
return 1 if $self->{_args}{scan_all};
|
||||||
|
return 0 if ! $self->is_multipart($tran);
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
94
federationhq_rcpt
Normal file
94
federationhq_rcpt
Normal file
@ -0,0 +1,94 @@
|
|||||||
|
use strict;
|
||||||
|
use warnings;
|
||||||
|
|
||||||
|
use Qpsmtpd::Constants;
|
||||||
|
use Qpsmtpd::DSN;
|
||||||
|
|
||||||
|
use DBI;
|
||||||
|
|
||||||
|
sub register {
|
||||||
|
my ($self, $qp) = (shift, shift);
|
||||||
|
|
||||||
|
# some default values
|
||||||
|
$self->{database} = $qp->config("fedhq_mysql_database") || "mail";
|
||||||
|
$self->{host} = $qp->config("fedhq_mysql_host") || "localhost";
|
||||||
|
$self->{port} = $qp->config("fedhq_mysql_port") || "3306";
|
||||||
|
$self->{user} = $qp->config("fedhq_mysql_user") || "qpsmtpd";
|
||||||
|
$self->{pass} = $qp->config("fedhq_mysql_password");
|
||||||
|
|
||||||
|
$self->createDSN();
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
sub createStatements
|
||||||
|
{
|
||||||
|
my $self = shift;
|
||||||
|
|
||||||
|
$self->{rcpt_sth} = $self->{dbh}->prepare("select username from email_address where alias=? and domain=?");
|
||||||
|
|
||||||
|
$self->{fetch_all_sth} = $self->{dbh}->prepare("select username from email_address where domain=? and isFetchAll=1");
|
||||||
|
}
|
||||||
|
|
||||||
|
sub connect
|
||||||
|
{
|
||||||
|
my $self = shift;
|
||||||
|
|
||||||
|
$self->{dbh} = DBI->connect($self->{dsn}, $self->{user}, $self->{pass}, { RaiseError => 0}) ||
|
||||||
|
$self->log(LOGERROR, "error connecting to DB " . $DBI::errstr);
|
||||||
|
|
||||||
|
if ($self->{dbh}->err())
|
||||||
|
{
|
||||||
|
$self->log(LOGERROR, "error connecting to DB: " . $self->{dbh}->errstr());
|
||||||
|
$self->{dbh}=undef;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
sub createDSN
|
||||||
|
{
|
||||||
|
my $self = shift;
|
||||||
|
my $dsn = "DBI:MariaDB:database=" . $self->{database} . ";host=" . $self->{host} . ";port=" . $self->{port};
|
||||||
|
$self->{dsn} = $dsn;
|
||||||
|
|
||||||
|
# try to parse the dsn to ensure it is valid
|
||||||
|
my @data = DBI->parse_dsn($self->{dsn});
|
||||||
|
|
||||||
|
if (@data == 0)
|
||||||
|
{
|
||||||
|
$self->log(LOGERROR, "DSN " . $self->{dsn} . " not valid");
|
||||||
|
$self->{dsn}="";
|
||||||
|
}
|
||||||
|
|
||||||
|
$self->log(LOGDEBUG, "created DSN " . $self->{dsn});
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
sub hook_rcpt {
|
||||||
|
my ($self, $transaction, $recipient) = @_;
|
||||||
|
|
||||||
|
$self->log(LOGNOTICE, "Recipient: " . $recipient->user . "@" . $recipient->host);
|
||||||
|
|
||||||
|
return DECLINED unless $recipient->host && $recipient->user;
|
||||||
|
|
||||||
|
$self->connect();
|
||||||
|
$self->createStatements();
|
||||||
|
|
||||||
|
my $result = $self->{rcpt_sth}->execute($recipient->user, $recipient->host);
|
||||||
|
|
||||||
|
if ($self->{rcpt_sth}->rows > 0)
|
||||||
|
{
|
||||||
|
$self->log(LOGDEBUG, " found recipient in database");
|
||||||
|
return OK;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$result = $self->{fetch_all_sth}->execute($recipient->host);
|
||||||
|
if ($self->{fetch_all_sth}->rows > 0)
|
||||||
|
{
|
||||||
|
$self->log(LOGDEBUG, " found fetchall for doamin in database");
|
||||||
|
return OK;
|
||||||
|
}
|
||||||
|
|
||||||
|
return DECLINED;
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue
Block a user