HiI have a different problem where we would like to disallow autoforwarding to an external domains. Most companies I work with have very sensible data that should never leave the premises (especially not for Hotmail or Gmail…)
Ideally, I would like something as follow:
-Agent that would warn user that AutoForwarding rule to an address with “@” is not allowed and cancel the creation of such rule.
-A warning automatically sent to the administrators (or security manager) when user attempts to create such a rule.
-An agent that would scan all existent databases to find out who has an autoforward to an @ and delete it after reporting it to admin or security. This agent should be able to find the infamous “ghost” rules if possible.
Autoforward should be allowed ONLY to users listed in the address book (ie, to domain users only)
Does anyone know how we can proceed with that? Is there an agent that already exist?
I contacted IBM support and they have added it to the wish list but our needs are somewhat immediate.
Subject: Disable AutoForward to External addresses?
What you’re talking about is definitely doable. I wrote that kind of agent for a client a few years back. It scanned everyone’s mail file once a days and looked at every rule. If the rule was a type that wasn’t allowed, the rule was deleted (they didn’t want user or Sys Admin notification).
If you want to be notified immediately when they try to create such a rule, you’d have to modify the mail template itself, which I try to not do at all costs. Depending on the number of users, a scanning agent could run at a much faster interval.
Subject: Disable AutoForward to External addresses?
Currently the config doc lets you disable the “send copy to” action for client mail rules. Not exactly what you want because it doesn’t discriminate between inside and outside recipients, but perhaps better to disallow all than to allow all in your case considering the data involved.To find existing rules that violate your policy I would write an agent that looks at the Action and ActionList fields.
To disallow new rules that forward to outside, you’re probably looking at some changes to the mailrules form and the scriptlib it uses.
Subject: RE: Disable AutoForward to External addresses?
You can also create an “Event Handler” in our events4.nsf with “Event must have this text in the message” : “autoforwarded” and create your desired action here.Hth