Scan files from custom input sources
MetaDefender Sandbox (previously known as OPSWAT Filescan Sandbox) has the ability to automatically monitor and scan files (e.g. E-Mail files on disc) from configurable input sources (network share, file on disc). For example: you could setup broker to scan a “mail directory” and auto-forward any newly found E-Mail to one or multiple application servers.
Currently, this integration should be used in combination with the CEF Syslog Feedback as generated reports will not appear on the Sandbox Frontend.
Example: reading mail files from disc:
- Setup a postfix server on Ubuntu (https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-postfix-on-ubuntu-22-04). Make sure to use the “maildir” format, so that each E-Mail is stored in its own rfc822 file.
- Create an automatic BCC to your central “Scan Mailbox” (e.g. scan@yourdomain.com)
- Create an input source in broker, which points to the “Scan Mailbox” and hard deletes any processed files:
- Configure the "E-Mail Notification settings" section for automated notification
Was this page helpful?