BCC: all sent an recieved mails.

[molok]

Hi, We suspect that an user is sending illicit material for another company. How can we automatically BCC: All sent and recieved e-mail from this user to the administrator mailbox?

 

[jzhu]

Molok,

I don't think we'd really have any control for outbound emails from users because they could do it from anywhere. But for inbound messages, on the mail server, you can create a .forward file under the user's home dir and enter the following in the file.
username, root

It should automatically forward a copy of whatever the user sends out to the root mailbox as long as the user and the root are on the same box, though you could replace the user root with root@domain.com it it's on another box.

Hope this help, anyone is welcome to correct me if I made a mistake.

Joe

 

[molok]

Joe,

A friend told me that we could use the inflex (we use pdaniels Inflex here) rules to forward this e-mails. Do you know something about it?

 

[jzhu]

Molok,

It's basically a content filter which is based on test conditions to block or allow email messages in/out. It should work as long as the user is sending stuff out inside your company's firewall.
Here's the link.

http://www.pldaniels.com/inflex/about.html

Joe