From owner-freebsd-isp Fri Dec 1 3:39:56 2000 Delivered-To: freebsd-isp@freebsd.org Received: from mail.lawforum.co.za (unknown [196.25.141.38]) by hub.freebsd.org (Postfix) with ESMTP id A350037B400 for ; Fri, 1 Dec 2000 03:39:52 -0800 (PST) Received: from nobody by mail.lawforum.co.za with scanned_ok (Exim 3.02 #1) id 141oWU-0008FF-00 for freebsd-isp@freebsd.org; Fri, 01 Dec 2000 13:38:38 +0200 Received: from rip by mail.lawforum.co.za with local (Exim 3.02 #1) id 141oVu-0008EZ-00; Fri, 01 Dec 2000 13:38:02 +0200 Date: Fri, 1 Dec 2000 13:38:02 +0200 From: "R.I.Pienaar" To: James Wyatt Cc: David Lawson , freebsd-isp@FreeBSD.ORG, "Jonathan M. Slivko" Subject: Re: Email Monitoring Message-ID: <20001201133802.Y4646@pinetec.co.za> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0.1i In-Reply-To: ; from jwyatt@rwsystems.net on Thu, Nov 30, 2000 at 10:54:08PM -0600 X-Checked: This message has been scanned for any virusses and unauthorized attachments. X-iScan: Version $Id: iScan,v 1.21 2000/09/23 16:25:21 rip Exp $ Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org hi, doing this is pretty easy if you use exim as a mail server, I have written antivirus software that intercepts mail being sent in and routed through the server, you can do pretty much anything with mail in this fashion, it does add a bit of overhead (each mail gets handled twice and calls the script) but if your code is well optimised it doesnt have a huge impact, how much mail goes through your clients machines? On Thu Nov 30, 2000 at 10:54:08PM -0600, James Wyatt wrote: > On Thu, 30 Nov 2000, David Lawson wrote: > > My client wants to intercept his employees email traffic for monitoring and > > auditing. He wants to make sure the email is not being used for personal use > > and he also wants to make sure that his employees are not making promises to > > customers that they can't keep. I'm not sure what type of business it is but > > they exchange allot of sensitive material. > > Then ensure they talk to their counsel about a document retention policy > and set expiration dates. While I can't say I have a customer doing this > via a holding queue and some scripting, it doesn't mean I don't. (^_^) The > amount of data this can generate can be considerable, but it is a great > way to search attachments when you hear of a new virus and you can make > daily nuggets as gzipped-tarballs with a script that will also delete them > after 30-90 days. But we digress from FreeBSD - Jy@ > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > -- R.I. Pienaar rip@pinetec.co.za "Let us gather hallucinations from our private minds Let us witness the reincarnation of the Sun" To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message