[Dovecot] Virusscanning

[Andreas Schulze]

Am 13.04.2010 20:37 schrieb Noel Butler:
> So, you want  postfix to accept the virus, send it to dovecot's deliver
> which then calls a virus scanner and finds it infected and deletes it,
> that makes absolutely no sense
ACK.

but imagine:

MTA delivers a mail where the virusscanner finds nothing. Mail gets delivered.
Some time later there is a scannerupdate. Now the scanner would find a malicious content.

So I may instantly scan the complete mailstore each time a new pattern arrives
or scan only each accessed mail with the latest pattern. This seems smarter to me.

For this scenario I would like to see a concept for datainspection/datamodification in dovecot.
What about when dovecot would act as a milter client?
Sounds strange but the problems are the same, why not use existing solutions ?

-- 
Andreas Schulze
Internetdienste | P532

DATEV eG
90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196
E-Mail info @datev.de | Internet www.datev.de
Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70
Vorstand
Prof. Dieter Kempf (Vorsitzender)
Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender)
Dipl.-Kfm. Michael Leistenschneider
Jörg Rabe v. Pappenheim
Dipl.-Vw. Eckhard Schwarzer
Vorsitzender des Aufsichtsrates: Reinhard Verholen