Hi,
This is Venkat, an MCA student.
I'm a User of linux. I have to work for intrusion detection
system. I want to enforce my policies on mails that are passing
through server. It is linux one. We should make it to work on all
distributions of linux such that I can put my IDS in any system.
So first I think to make changes to procmail file writing wome
procmail script. But Later I realized that it is not good because
procmail is a MailDeliveryAgent not Transmission agent. So I should
look at MTA like sendmail, mail, postfix, exim. But I can't change all
them. Where there is possibility to introduce my enforcer such that it
enforces my policies and updates mail statistics. Moreover my policies
may change dynamically day by day on user specification. The updated
policy enforcer should called at any stage of mail transmission. My
problem is that where linux allows us to introduce enforcer.
Thanks in advance. Plz Help me in this regard.