BastionGuard/ROADMAP.md

2.1 KiB

Roadmap – BastionGuard

Phishing Scanner Module

Implementation of the Phishing Scanner module in BastionGuard using GTK4/gtkmm4.

This feature allows users to analyze a URL for potential phishing attacks by querying the BastionGuard Security Intelligence service.

Features

  • URL analysis using BastionGuard Security Intelligence
  • Integrated GTK4/gtkmm4 interface
  • Search tab for URL entry
  • Asynchronous analysis to avoid UI crashes
  • HTML analysis of remote analysis results
  • Structured results reports
  • Styled results panel
  • Multilingual support

BastionGuard – Outgoing Email Protection Architecture

This architecture allows BastionGuard to add an additional security layer to outgoing email traffic without modifying the behavior of email clients and without requiring integration with email providers.


Key Features

Local SMTP Proxy

  • Transparent SMTP interception for outgoing email
  • Compatible with common mail clients (Thunderbird, Evolution, KMail, Geary, etc.)
  • Runs as a lightweight systemd user service
  • No client plugins required

Multi-SMTP Relay Support

  • Multiple SMTP relay profiles
  • Profile selection based on sender email or domain
  • Support for multiple providers simultaneously
  • Suitable for personal, corporate, and mixed email environments

Antivirus Scanning

  • Integration with ClamAV (clamd)
  • Scans message body and attachments before sending
  • Uses socket streaming instead of spawning external processes
  • Blocks messages containing malware

Anti-Phishing Protection

  • Extracts and analyzes URLs in email content
  • Uses BastionGuard's AntiPhishingEngine
  • Detects suspicious or malicious domains before delivery

Automatic HTML Signature Injection

Optional automatic insertion of HTML email signatures.

Configurable fields:

  • Name
  • Job title
  • Company
  • Phone
  • Website
  • Logo

Transparent Client Integration

  • Works with any SMTP-compatible email client
  • Requires only changing the SMTP server to: