| View previous topic :: View next topic |
| Author |
Message |
twistedvoid Guest
|
Posted: Wed Aug 16, 2006 7:56 pm Post subject: Need suggestions on creating an e-mail proxy |
|
|
A number of anti-virus programs seem to create a proxy server on the machine they're installed on. Any e-mail program downloading e-mail recieves the e-mail after the anti-virus proxy scans it.
Anyone have any idea how you'd go about creating a program to intercept e-mail on a machine before the e-mail program gets it?
Thanks in advance. |
|
| Back to top |
|
 |
Eugene V. Goldberg Guest
|
Posted: Wed Aug 16, 2006 8:58 pm Post subject: Re: Need suggestions on creating an e-mail proxy |
|
|
hook WinSock API functions with madCodeHook and
filter the connections on port 110.
"twistedvoid" <postmaster (AT) twistedvoid (DOT) com> wrote in message
news:44e33206$1 (AT) newsgroups (DOT) borland.com... |
|
| Back to top |
|
 |
Remy Lebeau (TeamB) Guest
|
Posted: Wed Aug 16, 2006 9:59 pm Post subject: Re: Need suggestions on creating an e-mail proxy |
|
|
"twistedvoid" <postmaster (AT) twistedvoid (DOT) com> wrote in message
news:44e33206$1 (AT) newsgroups (DOT) borland.com...
| Quote: | A number of anti-virus programs seem to create a proxy server on
the machine they're installed on. Any e-mail program downloading
e-mail recieves the e-mail after the anti-virus proxy scans it.
|
There is no proxy installed. They are hooking the socket stack itself so
that they can intercept all connections at a low level.
| Quote: | Anyone have any idea how you'd go about creating a program to
intercept e-mail on a machine before the e-mail program gets it?
|
Write an NDIS driver, or use a third-party driver, such as WinPCap.
Gambit |
|
| Back to top |
|
 |
Francois PIETTE [ICS - Mi Guest
|
Posted: Wed Aug 16, 2006 11:24 pm Post subject: Re: Need suggestions on creating an e-mail proxy |
|
|
| Quote: | A number of anti-virus programs seem to create a proxy server on the
machine they're installed on. Any e-mail program downloading e-mail
recieves the e-mail after the anti-virus proxy scans it.
Anyone have any idea how you'd go about creating a program to intercept
e-mail on a machine before the e-mail program gets it?
|
Have a look at ICS website (http://www.overbyte.be), there are a number of
proxies available. Follow "user made" link on the left and search "proxy" on
the page. Maybe start your application with SocketSpy which is a simple
proxy for anything.
You get full source code. Of course it needs ICS you can download source
code from same website, other page.
Contribute to the SSL Effort. Visit http://www.overbyte.be/eng/ssl.html
--
francois.piette (AT) overbyte (DOT) be
The author for the freeware multi-tier middleware MidWare
The author of the freeware Internet Component Suite (ICS)
http://www.overbyte.be |
|
| Back to top |
|
 |
twistedvoid Guest
|
Posted: Fri Aug 18, 2006 9:22 pm Post subject: Re: Need suggestions on creating an e-mail proxy |
|
|
"Francois PIETTE [ICS - MidWare]" <francois.piette (AT) overbyte (DOT) be> wrote:
| Quote: | A number of anti-virus programs seem to create a proxy server on the
machine they're installed on. Any e-mail program downloading e-mail
recieves the e-mail after the anti-virus proxy scans it.
Anyone have any idea how you'd go about creating a program to intercept
e-mail on a machine before the e-mail program gets it?
Have a look at ICS website (http://www.overbyte.be), there are a number of
proxies available. Follow "user made" link on the left and search "proxy" on
the page. Maybe start your application with SocketSpy which is a simple
proxy for anything.
You get full source code. Of course it needs ICS you can download source
code from same website, other page.
Contribute to the SSL Effort. Visit http://www.overbyte.be/eng/ssl.html
--
francois.piette (AT) overbyte (DOT) be
The author for the freeware multi-tier middleware MidWare
The author of the freeware Internet Component Suite (ICS)
http://www.overbyte.be
Thanks for the suggestion Francois, I've been using ICS for years and would love to use it for this project. However, in my last project I had to switch to Indy because of the lack of SSL in e-mail and will need that in this project as well. |
I will look at those links though for ideas.
-Thanks |
|
| Back to top |
|
 |
twistedvoid Guest
|
Posted: Fri Aug 18, 2006 9:31 pm Post subject: Re: Need suggestions on creating an e-mail proxy |
|
|
"Remy Lebeau \(TeamB\)" <no.spam (AT) no (DOT) spam.com> wrote:
| Quote: |
"twistedvoid" <postmaster (AT) twistedvoid (DOT) com> wrote in message
news:44e33206$1 (AT) newsgroups (DOT) borland.com...
A number of anti-virus programs seem to create a proxy server on
the machine they're installed on. Any e-mail program downloading
e-mail recieves the e-mail after the anti-virus proxy scans it.
There is no proxy installed. They are hooking the socket stack itself so
that they can intercept all connections at a low level.
Anyone have any idea how you'd go about creating a program to
intercept e-mail on a machine before the e-mail program gets it?
Write an NDIS driver, or use a third-party driver, such as WinPCap.
Gambit
|
Thanks Gambit. I'm probably over my head with this one but this does bring up another question. If I were to use this technique for my program as well, what kind of conflicts would I be dealing with on a machine that has one of these virus scanners installed? |
|
| Back to top |
|
 |
Francois PIETTE [ICS - Mi Guest
|
Posted: Fri Aug 18, 2006 11:51 pm Post subject: Re: Need suggestions on creating an e-mail proxy |
|
|
| Quote: | my last project I had to switch to Indy because of the lack of SSL
in e-mail and will need that in this project as well.
|
You missed ICS-SSL ?
Contribute to the SSL Effort. Visit http://www.overbyte.be/eng/ssl.html
--
francois.piette (AT) overbyte (DOT) be
The author for the freeware multi-tier middleware MidWare
The author of the freeware Internet Component Suite (ICS)
http://www.overbyte.be
"twistedvoid" <postmaster (AT) twistedvoid (DOT) com> a écrit dans le message de news:
44e5e95d$1 (AT) newsgroups (DOT) borland.com...
| Quote: |
"Francois PIETTE [ICS - MidWare]" <francois.piette (AT) overbyte (DOT) be> wrote:
A number of anti-virus programs seem to create a proxy server on the
machine they're installed on. Any e-mail program downloading e-mail
recieves the e-mail after the anti-virus proxy scans it.
Anyone have any idea how you'd go about creating a program to intercept
e-mail on a machine before the e-mail program gets it?
Have a look at ICS website (http://www.overbyte.be), there are a number of
proxies available. Follow "user made" link on the left and search "proxy"
on
the page. Maybe start your application with SocketSpy which is a simple
proxy for anything.
You get full source code. Of course it needs ICS you can download source
code from same website, other page.
Contribute to the SSL Effort. Visit http://www.overbyte.be/eng/ssl.html
--
francois.piette (AT) overbyte (DOT) be
The author for the freeware multi-tier middleware MidWare
The author of the freeware Internet Component Suite (ICS)
http://www.overbyte.be
Thanks for the suggestion Francois, I've been using ICS for years and
would love to use it for this project. However, in my last project I had
to switch to Indy because of the lack of SSL in e-mail and will need that
in this project as well.
I will look at those links though for ideas.
-Thanks
|
|
|
| Back to top |
|
 |
Gavin Guest
|
Posted: Thu Aug 31, 2006 4:19 pm Post subject: Re: Need suggestions on creating an e-mail proxy |
|
|
| Quote: | Write an NDIS driver, or use a third-party driver, such as WinPCap.
Gambit
Thanks Gambit. I'm probably over my head with this one but this does bring up another >question. If I were to use this technique for my program as well, what kind of conflicts >would I be dealing with on a machine that has one of these virus scanners installed?
|
I'm not sure how many anti virus's are at that low a level, firewalls
certainly are, not so sure about anti virus. Last time i looked WinPCap
was a protocol driver only and you couldn't change the packet data.
I created a component based on TIdMappedPort to create my email proxy
server. Problem with this is that you cant auto interecept email, you
need to setup the mail clients to point to the proxy.
Never looked at hooking the winsock api, might be something to look
into.
If you've never written a driver before, i wouldnt recommend going down
the driver route.
All depends on what your requirements are
Cheers
Gavin |
|
| Back to top |
|
 |
gavin Guest
|
Posted: Thu Aug 31, 2006 4:26 pm Post subject: Re: Need suggestions on creating an e-mail proxy |
|
|
| Quote: | Anyone have any idea how you'd go about creating a program to intercept
e-mail on a machine before the e-mail program gets it?
Write an NDIS driver, or use a third-party driver, such as WinPCap.
Gambit
Thanks Gambit. I'm probably over my head with this one but this does bring
up another question. If I were to use this technique for my program as well,
what kind of conflicts would I be dealing with on a machine that has one of
these virus scanners installed?
|
I'm not sure how many anti virus's are at that low a level, firewalls certainly
are, not so sure about anti virus. Last time i looked WinPCap was a protocol
driver only and you couldn't change the packet data.
I created a component based on TIdMappedPort to create my email proxy server.
Problem with this is that you cant auto interecept email, you need to setup the
mail clients to point to the proxy.
Never looked at hooking the winsock api, might be something to look into.
If you've never written a driver before, i wouldnt recommend going down the
driver route.
All depends on what your requirements are
Cheers
Gavin |
|
| Back to top |
|
 |
|