I have a server journal rule to capture all mail “When All documents Journal this Message”, this works well, but does not capture everything.
When a user has a mail file rule that does this “When All Document send Full Copy to email@domain.com” these messages are not captured in the journal.
Not sure if there is a work around, seems to be at the router level forwarding the message and bypassing the server rule to capture the traffic in the journal.
David
Subject: Does it bypass both messages?
Does the router journal any of the messages? I could possibly understand if the forwarded message isn’t journaled, since it is the same message, but the original incoming message should definately be journaled.
/Peter
Subject: Re: Does it bypass both messages?
Yes the original is placed in the journal, but not the rule based forwarded copy - there’s no indication that a message was sent to another user or to what address, except for the forward icon in the user mail file. When you manually forward a message from a mail file it is added to the journal.
What led me on to this was a user sending all incoming mail to a gmail account and when pressed about this they had no real explanation. The concern was that this could be used by our competitors and we had no trace of it occurring.
I have a mail marshal smtp server that all mail goes through, I can set up a journal on this instead and that will capture everything.
David.
Subject: mail rule forwarding?
I would disable the ability for users to setup forwarding rules to external accounts. There’s a lot of things that can go wrong (not just security) when users can forward to an external account.
Subject: mail rule forwarding?
As far as I can tell there is no way to prevent a forwarding rule, unless the template is modified to remove such rules?
I just thought it was odd the journal did not pick up this setup in the first place and I can work around it.
David.
Subject: Sure you can …
In the config doc(s) ->Router/SMTP tab -Restrictions and Controls → Delivery Controls.
Like I said, it’s just bad practice to allow this. Security aside, if you get into a routing loop (where mail is bouncing back and forth from one address to the other), you can shut down your entire messaging system.
Subject: Re: Sure you can
Thanks for that, I’ve not noticed that option before. Might turn it off and that will solve my problem.
David.