deleting emails directly

[hw]

Am 04.03.2015 um 11:13 schrieb Sven Schwedas:
> On 2015-03-04 11:04, hw wrote:
>> Hi,
>>
>> can I remove or delete emails from the imap directory directly (with rm)
>> without screwing things up?
>
> I think cyrreconstruct can be used in such cases, but it's certainly not
> the recommended way to delete mails.

Yes, that's not something I would want to do.

>> I'm running a virus scan over the spool directory and wonder how to get
>> those messages removed within which a virus has been found.  The easiest
>> way would be to let the virus scanner do this, and the virus scanner
>> doesn't use IMAP.
>
> Wouldn't it be safer to integrate the virus scanner in your MTA's
> processing pipeline, /before/ delivering it to clients that might
> automatically download the viruses before your file-based virus scanner
> has a chance to delete it?

Exim is set up with clamav and does scan all messages.  I don't know a 
way to prevent users from moving/copying messages from other IMAP 
accounts into their accounts here with their MUAs, though.

Is there a way to make cyrus scan all messages that are put into the 
spool directory via IMAP and to deny putting them there when they appear 
to contain a virus?