summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--src/clamsmtpd.816
1 files changed, 15 insertions, 1 deletions
diff --git a/src/clamsmtpd.8 b/src/clamsmtpd.8
index 00ff1aa..c3d786d 100644
--- a/src/clamsmtpd.8
+++ b/src/clamsmtpd.8
@@ -131,7 +131,7 @@ is the number of seconds to wait while reading data from network connections.
[Default: 180 seconds]
.It serveraddr
The address of the SMTP server to send email to once it's been scanned. This
-option must be specified. See syntax of addreses below.
+option must be specified. See syntax of addreses below.
.El
.Sh LOGGING
.Nm
@@ -141,6 +141,16 @@ by default under the 'mail' facility. You can also output logs to the console
using the
.Fl d
option.
+.Sh LOOPBACK FEATURE
+In some cases it's advantagous to consolidate the virus scanning and filtering
+for several mail servers on one machine.
+.Nm
+allows this by providing a loopback feature to connect back to the IP that a
+SMTP connection comes from. If only a port is specified for the
+.Ar serveraddr
+(without IP) then
+.Nm
+passes the email to the incoming peer's IP address on the said port.
.Sh SECURITY
There's no reason to run this daemon as root. It is meant as a filter and should
listen on a high TCP port. It's probably a good idea to run it using the same
@@ -155,6 +165,10 @@ writes its temporary files to. In order to be secure, it should not be a world
writeable location. Specify the directory using the
.Fl t
option.
+.Pp
+.Nm
+should probably not be run on a publicly accessible IP address or without a
+firewall. This is especially true if the loopback feature is used (see above).
.Sh ADDRESSES
Addresses can be specified in multiple formats:
.Bl -bullet