clamsmtp 1.8: Add clamsmtp, an smtp proxy with virus scanning support

cia clamav (clamad-daemon). It has optional support transparent
proxying as well.

4 files changed, 71 insertions, 0 deletions

diff --git a/packages/clamsmtp/files/.mtn2git_empty b/packages/clamsmtp/files/.mtn2git_empty
new file mode 100644
index 0000000000..e69de29bb2
--- /dev/null
+++ b/packages/clamsmtp/files/.mtn2git_empty
diff --git a/packages/clamsmtp/files/clamsmtp.init b/packages/clamsmtp/files/clamsmtp.init
new file mode 100644
index 0000000000..7f30d1f724
--- /dev/null
+++ b/packages/clamsmtp/files/clamsmtp.init
@@ -0,0 +1,33 @@
+#!/bin/sh
+DAEMON=/usr/sbin/clamsmtpd
+CLAMSMTPD_CONFIG=/etc/clamsmtpd.conf
+PIDFILE=/var/run/clamav/clamsmtpd.pid
+NAME="clamsmtpd"
+DESC="ClamSMTPD"
+
+test -r /etc/default/$NAME && . /etc/default/$NAME
+test -x "$DAEMON" || exit 0
+test ! -r "$CLAMSMTPD_CONFIG" && exit 0
+        
+case "$1" in
+  start)
+    echo "Starting $DESC: "
+    start-stop-daemon --oknodo -S -x $DAEMON -- -p $PIDFILE -f $CLAMSMTPD_CONFIG
+    echo "$NAME."
+    ;;
+
+  stop)
+    echo "Stopping $DESC:"
+    start-stop-daemon -K -p $PIDFILE
+    ;;
+
+  restart)
+    $0 stop >/dev/null 2>&1
+    $0 start
+    ;;
+
+  *)
+    echo "Usage: $0 {start|stop|restart}"
+    exit 0
+    ;;
+esac
diff --git a/packages/clamsmtp/files/doc.configure.txt b/packages/clamsmtp/files/doc.configure.txt
new file mode 100644
index 0000000000..b06487f31a
--- /dev/null
+++ b/packages/clamsmtp/files/doc.configure.txt
@@ -0,0 +1,15 @@
+The following items needs to be considered when using clamsmtp:
+
+1. Scanning is done via clamd (clamav-daemon)
+
+   The clamd daemon must be running for scanning to take place.
+
+2. Transparent proxy
+
+   For transparent proxying you need an IP tables rule such as:
+
+     iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 25 -j REDIRECT --to-ports 10025
+
+   where eth0 is the incomming port, and 10025 is the port that clamsmtpd
+   is running on. Also remember to enable transparent proxy support in the
+   configuration file.
diff --git a/packages/clamsmtp/files/update-config.patch b/packages/clamsmtp/files/update-config.patch
new file mode 100644
index 0000000000..dd67c39e19
--- /dev/null
+++ b/packages/clamsmtp/files/update-config.patch
@@ -0,0 +1,23 @@
+Run as the clamav user.
+Use the sock that clamd actually creates.
+
+--- clamsmtp-1.8/doc/clamsmtpd.conf	2006/10/11 06:43:31	1.1
++++ clamsmtp-1.8/doc/clamsmtpd.conf	2006/10/11 06:44:04
+@@ -29,7 +29,7 @@
+ #Listen: 0.0.0.0:10025
+ 
+ # The address clamd is listening on
+-#ClamAddress: /var/run/clamav/clamd
++ClamAddress: /var/run/clamav/clamd.ctl
+ 
+ # A header to add to all scanned email
+ #Header: X-Virus-Scanned: ClamAV using ClamSMTP
+@@ -47,7 +47,7 @@
+ #TransparentProxy: off
+ 
+ # User to switch to
+-#User: clamav
++User: clamav
+ 
+ # Virus actions: There's an option to run a script every time a virus is found. 
+ # !IMPORTANT! This can open a hole in your server's security big enough to drive