PaulDuffield (User)
Posts: 35
|
| Monitoring email 2006/02/02 16:50 |
|
|
Is there anyway to set up monitoring of all email into and out of the domain for management purposes? If not could it be included in some way?
One of my clients monitors all email in and out of the company with staff knowledge of course.
The in part is not so much of a problem by setting up forwarding or lists etc However, the out mail part is a little more tricky.
At present they download into vPOP3 and that has monitoring facilities but it would be better if this could be set up on the external mail server.
It is hard to do this in Exchange too and only third party programs go some what to enabling the feature.
Email monitoring outbound is becoming not only an important management tool but also in many cases a legal requirement or for legal protection. A simple "monitor outbound" facility for a domain would make this a very attractive product for that feature alone I reckon.
Any thoughts?
|
|
|
|
The administrator has disabled public write access. |
ADobkin (User)
Posts: 183
|
| Re: Monitoring email 2006/02/03 09:29 |
|
|
This is a function of your mail server (MTA), not Virtualmin. My suggestion is that you look into[A HRef="http://www.MailScanner.info/">MailScanner. It is free, it has an option to archive all incoming and outgoing mail, and it can work as an external SMTP gateway, so it ties in nicely with almost any other mail server.
Beware that it may be illegal to do this, depending on your cirucumstances and where you are located.
|
|
|
|
The administrator has disabled public write access. |
ADobkin (User)
Posts: 183
|
| Re: Monitoring email 2006/02/03 10:25 |
|
|
And if you don't like MailScanner for some reason, here is another product called[A HRef="http://www.modulo.ro/content/view/55/1/">Synonym, the email message archiver. Apparently it is also free, but it is written as a Sendmail Milter, so obviously it requires Sendmail to run. However, it appears that it hasn't been updated in a while (since 10/26/2004), so MailScanner would still be my primary recommendation, which has excellent developer and community support.
|
|
|
|
The administrator has disabled public write access. |
PaulDuffield (User)
Posts: 35
|
| Re: Monitoring email 2006/02/05 06:24 |
|
|
Hi Alan,
Thanks for the information on that. I will check out the sites shortly.
All the staff in this particular company are aware that email is montiored, it's an integral part of the companies management process. So no privacy issues.
|
|
|
|
The administrator has disabled public write access. |
Joe (Admin)
Posts: 4213
|
| Re: Monitoring email 2006/02/05 15:39 |
|
|
Hey Paul,
It is easy to use Procmail for this, and you won't have to install/use anything outside of the standard Virtualmin Professional install. It just takes one additional rule in your /etc/procmailrc file. I believe it would be something like this:
:0 c ! archive@domain.tld
Which will forward a copy (that's the "c" in the first line) to the mailbox archive@domain.tld. Note this is untested, but I think it will work. Let me know if it doesn't and I'll actually figure out the right rule and test it out here.
|
|
|
|
The administrator has disabled public write access. |
Joe (Admin)
Posts: 4213
|
| Re: Monitoring email 2006/02/05 15:40 |
|
|
BTW-The rule needs to come before any other delivery rules.
|
|
|
|
The administrator has disabled public write access. |
Joe (Admin)
Posts: 4213
|
| Re: Monitoring email 2006/02/05 16:42 |
|
|
Oops, I missed the outgoing part. That one will probably best be done with a sender_bcc_maps file for Postfix, though I'm not sure if one can use a catchall in that map file. I'm looking into it...
|
|
|
|
The administrator has disabled public write access. |
Joe (Admin)
Posts: 4213
|
| Re: Monitoring email 2006/02/05 16:57 |
|
|
Ok, even easier than sender_bcc_maps and procmail is the always_bcc directive.
always_bcc = admin@domain.tld
This will send a bcc (blind carbon copy) of all mail to admin@domain.tld. It should catch incoming and outgoing.
|
|
|
|
The administrator has disabled public write access. |
PaulDuffield (User)
Posts: 35
|
| Re: Monitoring email 2006/02/05 18:09 |
|
|
Thanks Joe,
I will give that a go tommorrow and update everyone on here too for reference.
Cheers for now,
Paul
|
|
|
|
The administrator has disabled public write access. |
Joe (Admin)
Posts: 4213
|
| Re: Monitoring email 2006/02/05 18:51 |
|
|
And just to be absolutely complete in covering this topic, I'll add that you can edit the always_bcc option in Webmin's Postfix module. Browse to the General Options page, and the option is labeled "Address that receives bcc of each message". You'll never have to look at the configuration file in a text editor, if you really don't want to. ;-)
|
|
|
|
The administrator has disabled public write access. |
|