[Nottingham] P3Scan

[Chris Booth]

Hello David,


> -----Original Message-----
> From: Nottingham [mailto:nottingham-bounces at mailman.lug.org.uk] On
> Behalf Of david at gbenet.com
> Sent: 14 November 2015 00:53
> To: Notts GNU/Linux Users Group
> Subject: Re: [Nottingham] P3Scan
> 
> On 13/11/15 13:16, Chris Booth wrote:
> > Hello David,
> 
> >>
> >>
> > [Chris Booth >>>] If you don't want to use p3scan how about using
> > Exim?  https://help.ubuntu.com/community/EximClamAV
> >
> > Happy Friday 13th :)
> >
> > Cheers,
> >
> > Chris Booth
> >
> 
> Hello Chris,
> 
> I never thought of using Exim4 - have just downloaded - also I can not
> download the dummy virus files - oh well............. a question: am using
> Thunderbird - how does Exim4 capture my out and incoming mail?
> 
> David
> 
> 
[Chris Booth >>>] 
Exim4 is an MTA for transporting mail from server to server, but it provides a lot of control over how you process the emails. You would still need a POP/IMAP daemon, such as Courier to actually deal with remote pop/imap email clients. 

As it happens, todays Internet Storm Center diary at https://www.dshield.org/  features this script:  https://github.com/xme/mime2vt  to unpack MIME attachments and check them against virustotal.com  which sound more like what you are trying to do.

Other ideas, tell your friends to send to a web mail service that includes malware scanning (and 2-factor authentication) e.g. <cough> gmail </cough>, then you/they can download the email from there using Thunderbird, or, for a "belt-and-braces" approach to malware scanning download to your laptop using e.g. procmail, plus the above script.

[Chris Booth >>>] 
Cheers,

Chris Booth




This message and any attachment are intended solely for the addressee
and may contain confidential information. If you have received this
message in error, please send it back to me, and immediately delete it. 

Please do not use, copy or disclose the information contained in this
message or in any attachment.  Any views or opinions expressed by the
author of this email do not necessarily reflect the views of the
University of Nottingham.

This message has been checked for viruses but the contents of an
attachment may still contain software viruses which could damage your
computer system, you are advised to perform your own checks. Email
communications with the University of Nottingham may be monitored as
permitted by UK legislation.