efa-project.org

Code: Select all

#!/bin/bash

#Variable
released=/var/spool/released/ #temp folder
releasequeue=/var/spool/postfix/incoming/ #postfix input folder
quarantine=/var/spool/MailScanner/quarantine/ # quarantine folder
egrepfiles='filename=.*\.doc|filename=.*\.xls|filename=.*\.docx|filename=.*\.xlsx|filename=.*\.urg'
egrepparam='-liRn'
delay='+1' #delay for release in days
cleanreleased='+35' #hold the released temp file in days
log='/var/spool/quarantine_release.log'
avprog='/opt/eset/esets/sbin/esets_scan'
avparam='--no-quarantine --no-log-console'


echo "begin release.." > $log

#find all emails with
for i in $(find $quarantine -mtime $delay | egrep $egrepparam  $egrepfiles $quarantine); do
#      filenam dirname variable
        fname=$(basename $i)
        dname=$(dirname $i)

#check if in the path name is spam included if so do nothing
if [[ "$dname" == *"spam"* ]];then
        echo "spam not deliverd" $i >> $log
else #if no spam = blocked files check them again

        #check if file already released from quarantine
        if [ -e $released$fname ];then
                echo "already delivered" $i >> $log
        else
       #av scan
        $avprog $avparam $i

#Exit codes:
#         0    no threat found
#         1    threat found and cleaned
#         10   some files could not be scanned (may be threats)
#         50   threat found
#         100  error

                #check exit codes 
                #from av when 0 everthing is ok and we can deliver if not we found a virus or a error occured
                if [ $? -ne 0 ];then
                        echo "virus or error occured" $i >> $log
                else
                # no virus and no error
                        #copy file to outqueue postfix
                       cp $i $releasequeue
                        #change permission and owner
                       chown postfix:postfix $releasequeue$fname
                       chmod +x $releasequeue$fname
                        #make temp file for already delivered mails
                        touch $released$fname
                        echo "delivered" $i >> $log
                fi
        fi
fi
done

#list temp files (already delivered mails)
#find $released -type f -mtime $cleanreleased -exec ls -lah {} \;
#delete temp files (already delivered mails)
#find $released -type f -mtime $cleanreleased -exec rm {} \;