Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-30 Thread Beeblebrox
Robert, thanks for that link. Very informative. I found it interesting that the descriptive words used in the thesis were very similar to words I used to describe my question. I'll be tinkering with it if nothing more than for academic purposes. Thanks again everyone for great input and incredib

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-28 Thread Robert Schetterer
Am 26.07.2017 um 11:21 schrieb Beeblebrox: > Hello. > How can I setup IMAP incoming email scanning via ClamAV on a LAN gateway. > Most devices on the LAN are mobiles. I would prefer to not store or configure > user email credentials on the gateway and have the auth mechanism work > directly from

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-28 Thread G.W. Haywood
Hello again, On Fri, 28 Jul 2017, Beeblebrox wrote: > ... I think you'd need some complexity just for example to be able to > use third-party databases... GW - Not sure I'm not fully grasping this point. I thought I could install the 3rd part tools and keep them up to date with cron jobs? Er

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-28 Thread Simon Hobson
Beeblebrox wrote: >> ... If clamd finds something (it does happen), what's the plan? >> The message is *already* in the user's mail box, and I'd say it should >> *not* be there in your scenario, because the user can pick up the bad >> mail simply by connecting other than through your gateway. >

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-27 Thread Beeblebrox
Hello, Great posts everyone, I have really learned a lot from your input and it's very much appreciated. > As I read it, he's looking at "random users accessing random servers" > - eg a user connecting his phone to the guest network and it then > accessing Gmail. Yes, this was exactly the concep

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-27 Thread Simon Hobson
Dave McMurtrie wrote: > The original poster doesn't mention which IMAP server he's using. As I read it, he's looking at "random users accessing random servers" - eg a user connecting his phone to the guest network and it then accessing Gmail. I really don't think it's possible to do what he wan

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-27 Thread Dave McMurtrie
On Thu, 27 Jul 2017, G.W. Haywood wrote: ...snipped... The message is *already* in the user's mail box, and I'd say it should *not* be there in your scenario, because the user can pick up the bad mail simply by connecting other than through your gateway. The original poster doesn't mention wh

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-27 Thread G.W. Haywood
Hello again, On Thu, 27 Jul 2017, Beeblebrox wrote: ... I need the gateway setup to be fire-up & forget. That's a tall order. Given that requirement you don't need to add any more complexity than you already have, and to make scanning by ClamAV worth doing in the first place I think you'd ne

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-27 Thread Beeblebrox
Perhaps you could advise what specifics re the configuration you would like for me to provide... Regards -- HardenedBSD_amd64_12-Current_RadeonKMS Please CC my email when responding, mail from list is not delivered. ___ clamav-users mailing list clama

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-26 Thread Beeblebrox
Thanks GW. > If the clients are using IMAPS, Yes IMAPS TLS. I could consider MIM as long as I do it right. > Can you be a bit more forthcoming about the situation? * Well, small LAN, known users, but visitors would be unknown users. * I'm setting it up but won't be administering it. I need the ga

Re: [clamav-users] Scanning IMAP traffic without user credential storage

2017-07-26 Thread G.W. Haywood
Hi there, On Wed, 26 Jul 2017, Beeblebrox wrote: How can I setup IMAP incoming email scanning via ClamAV on a LAN gateway. If the clients are using IMAPS, which they probably should be doing, and I guess they probably are, then you cannot do this without being a Man In The Middle. I guess yo

[clamav-users] Scanning IMAP traffic without user credential storage

2017-07-26 Thread Beeblebrox
Hello. How can I setup IMAP incoming email scanning via ClamAV on a LAN gateway. Most devices on the LAN are mobiles. I would prefer to not store or configure user email credentials on the gateway and have the auth mechanism work directly from device to main server (ex: gmail). Can the scanning