Copfilter

    SourceForge.net Logo



  News  |  Description  |  Screenshots  |  Download  |  Warning  |  Support  |  About the Author  |  Old  |  What users say



 

News

2005 08 04 05:29
released copfilter-0.1.0beta9.tgz fixes a bug with proxsmtp when sending large attachments

2005 08 03 23:48
released copfilter-0.1.0beta8b.tgz to REALLY fix frox and other services using 100% CPU
should also fix p3scan exiting.. with errors like "File Error! Could not erase _virusdirectory_..."

2005 08 03 10:11
released copfilter-0.1.0beta8a.tgz to fix frox and other services using 100% CPU

2005 08 02 01:23
released copfilter-0.1.0beta8.tgz



Description - Copfilter 0.1.0 beta for IPcop

The main goal of Copfilter is to provide a free and easy to use solution to filter and scan traffic
from any unsecure network, like the internet, for viruses and spam. It has been designed
as a preconfigured and easy to install addon for the opensource firewall IPCop

Copfilter is a package of various opensource traffic filtering software and tools, customized and built to work
together. All included proxies filter traffic transparently, which means that no client reconfiguration is necessary.

It scans POP3 and SMTP emails for viruses and spam. Instead of a virus infected emails, a user will receive virus
notification messages containing details about originally sent emails, which can also be quarantined if desired.

Spam emails will be tagged as spam by inserting the following text into the subject field: *** SPAM ***
With this procedure any email client will be able to use its own message rules to
automatically delete or move these spam messages.

HTTP and FTP traffic will also be scanned for viruses. If a virus is found, access to that web page or file will be denied.
Network diagram:




                                  IPCop Firewall                  Workstation clients
      Internet servers            with Copfilter                  +----------+ 
        +-------+                +---------------+      LAN1      |          |
        |POP3   |    Internet    |RED       GREEN|----------------|          |
        |SMTP   |----------------|               |                +----------+
        |HTTP   |                |               |                
        |FTP    |                |               |      LAN2      +----------+ 
        |       |                |ORANGE    BLUE |----------------|          |                
        +-------+                +---------------+                |          | 
                                    |                             +----------+
                                    |                              Wireless Clients
                                    |     
                               +----------+
                               |          | DMZ Machines
                               |          | example: SMTP server for incoming emails
                               +----------+

Features:
  • Virus/Spam scanning of incoming and outgoing email
  • Virus/Spam scanning of incoming SMTP emails and forwarding them to your intermal mail server
  • Email sanitizing, removing dangerous html tags from email messages
  • Virus scanning of HTTP traffic, with no noticable delay
  • Virus scanning of FTP traffic, a small delay is noticable
  • Removes ads, banners, pop-ups and more from HTTP Traffic
  • All services work transparently, no re-configuration on any client is necessary
  • Is able to use a open source and/or commercial virus scanner (ClamAV and/or F-Prot) for POP3,SMTP,FTP
  • Service monitoring, if a service should fail, it will automatically be restarted (with email notification)
  • Automatic antivirus signature and antispam ruleset updating
  • Ease to use webgui
  • Free and opensource


Copfilter is a compilation of the following programs, all preconfigured and combined to work together smoothly
  • P3Scan
  • - a transparent pop3 proxy server
  • ProxSMTP
  • - a transparent smtp proxy server
  • frox
  • - a transparent ftp proxy server
  • HAVP
  • - a transparent http proxy server (HTTP Antivirus Proxy) with continuous, non-blocking
    downloads and smooth scanning of dynamic and password protected HTTP traffic
  • Privoxy
  • - a http proxy with advanced filtering capabilities for protecting privacy, managing cookies,
    controlling access, and removing ads, banners, pop-ups and other obnoxious Internet junk
  • Clam AntiVirus
  • - a GPL virus scanner with built-in support for Zip, Gzip, Bzip2 and automatic updating
  • F-Prot Antivirus
  • - for Linux Workstations (free for home users) this virus scanner is supported optionally only -> its not included !
  • F-Prot Antivirus
  • - for x86 Mail Servers (corporate use) this virus scanner is supported optionally only -> its not included !
  • SpamAssassin
  • - a mail filter to identify spam
  • Vipul's Razor
  • - a distributed, collaborative, spam detection and filtering network, used by spamassassin
  • DCC
  • - a cooperative, distributed system intended to detect "bulk" mail or mail sent to many people
  • renattach
  • - a stream filter that can identify and rename potentially dangerous e-mail attachments
  • RulesDuJour
  • - a bash script which automatically downloads new versions of SpamAssassin rulesets
  • monit
  • - Monitoring Utility - automatically restarts a failed service, includes a service manager


    Administrative Features:
    • virus infected email quarantining
    • email notifications for virus signature and antispam ruleset updates
    • informs a user that a virus infected email has been sent to him by email
    • sends a copy of these user notifications to an administrator
    • email rejection based on content (virus,spam)
    • AntiSpam white and blacklist administration through webgui
    • Automaticly adds recipient email address of outgoing email to the Uninstall, backup, restore and restore-to-default-configuration capability
    • Enhanced spam capabilities: Bayesian filtering (either local or retrieval from a remote IMAP server ->untested) rules_du_jour, sare razor, dcc, SURBL and DNS Blocklists

    Screenshots:
    Documentation: CHANGELOG - README

    Please read README before installing. Also uninstall any old version before updating.





    DOWNLOAD:     copfilter-0.1.0beta9.tgz
    !! Enable your IPCop Web Proxy !! and enable the "transparent" checkbox before installing copfilter


    Deactivate your virusscanner when downloading, the tgz file contains 4 "testvirus" files.
    This is a beta release, but it seems quite stable now, docu is only half way done, !
    Please install on a fresh and from scratch (without config restore) installed ipcop machine
    feedback would be great in the forum or via the mailing list




    Warning

    These packages are NOT official ipcop addons. They haven't been approved or reviewed by the ipcop development team.
    They come with NO warranty or guarantee, so use them at your own risk. Installation of these pacakages may result
    in a less secure or even a non-working IPCop machine, so test the packages first.

     



    Support


    Forums

  • Copfilter forum maintained by Jens Heinemann (english and german).
  • Ipcop support forum, mainly this section


    Links

  • mhaddons by Markus Hoffmann (copfilter updates and ipcop addons)
  • Sourceforge project website for copfilter
  • IPCop Firewall
  • Endian Firewall (ipcop based, but includes virus and spam filtering)

    Translations

  • Please see the Translation section of the copfilter forum for more details
  • German not available
  • French not available
  • Spanish not available
  • Italian not available

    Mailing Lists

  • made available at sourceforge
  • copfilter-announce: new versions and updates - subscribe/unsubscribe   SF Archives
  • copfilter-main: the copfilter mailing list - subscribe/unsubscribe   SF Archives   MARC Archives

    For those of you, which i informed manually about new updates, through my email update list,
    please subscribe to the copfilter-announce mailing list.



    Bug/Error reports, Questions, Suggestions

    Please report any bugs/errors you get, or any questions which arise when installing the package
    to the Copfilter forum or the copfilter-main mailing list at   copfilter-main at lists dot sourceforge dot net

    Author

    My name is Markus Madlener (austria), i work @ a company named NewLogic and you
    can send me mail @ this address: copfilter at gmx dot net
    (exampe "hello at test dot com" means hello@test.com)
    Please don't publish my email address online like in forums, boards, etc
    except in the form (copfilter at gmx dot net) presented above.
    This helps reduce my spam mail, thanks!





    old copfilter for IPcop 1.4.0, 1.4.1 and 1.4.2 only

  • copfilter 0.0.95.1 does not work on ipcop 1.4.4 and higher, a fix is available here

    Download:     copfilter-0.0.95.1.tgz   copfilter-0.0.95.1.tgz.md5 (md5 as text)


    INSTALL     BUGS    CHANGELOG    CREDITS    FAQ    FEATURES   LINKS   
    MANUAL    SCREENSHOT OF WEBGUI    TESTING    TODO   TRANSLATIONS





    what users say

    callmebruce Posted: 03.08.2005, 20:28    
          Glad I'm running copfilter. I clicked on a web e-mail today and it was 
          blocked as a phishing attempt. Way cool!
          
    TommaX Posted: 31.07.2005, 20:55
          Hi Markus
          I had the same problems w/copfilter as described by others in this thread. 
          I made the edit to the file as you requested - on two different machines 
          so far, about 18 hours ago - and all of the problems have vanished.....
          Copfilter is the best - fabulous piece of software!!
          Great work!!
    Jon Starr Posted
          .... The rest of it still works very nicely, I love privoxy and so do my users Smilie
    egbert Posted: 16.06.2005, 22:40
          Hallo Marcus,
          klappt jetzt, der Hinweis fuer "Zugriff verweigert" wird jetzt bei gesperrter Domain eingeblendet, Zugriff ist nicht moeglich.
          Super Arbeit und vielen Dank.
          Viele Gruesse
          ___________________
          IPCOP 1.4.6 auf AMD 1.4 GHz 768 MByte RAM COPFILTER 0.1.0Beta6 URL-Filter
    mark Posted: 15.06.2005, 15:15
          yes!
          advproxy -> urlfilter -> copfilter
          work well,  regards, mark
    Harlekin Posted: 13.06.2005, 14:31
          ahhh.... thanks!! now it works like a charm!!
    highlore Posted: 24.05.2005, 17:54
          ...
          Installed squidguard and copfilter again. Seems to work like a charm now. ..... 
          I am very satisfied with ipcop and ofcoz with all the (unofficial) addons available... especially copfilter.
          Keep up the good work Markus!!!
    dayne Posted: 22.04.2005, 02:35
          I love the new copfilter. ....
          I love all the new features. I am using IPCOP 1.4.5 ....
          Thank you for all your hard work guys this is an awesome mod to IPCOP! 
    mariohaner Posted
          sersn, funzt einwandfrei Ausrufezeichen, thx.
    Hount Posted: 12.02.2005, 10:12
          markus.hoffmann wrote:
          Und wieder ein zufriedener Nutzer mehr..........
          Zufrieden ?????  Zufrieden reicht nicht. Wuerde eher sachen begeistert :-D
          
  •  





      I'm testing some counters here: