I have a solution that will do this for you. It involves the smtp-virus script that someone questioned me about a few days ago when I asked about the manpath bug. I will make a posting to the list with a site for download and intructions on how it works next week. I have no time right now as I'm right in the middle of a migration to active directories on a win2k network.. eep the solution I have uses obtuse smtpd, AVP (to scan for virsues) and sendmail plus some custom perl scripts to do the duplication.. It is currently running on a 500 node network with no problems... Cheers _______________________________________________________________ Peter Nixon Systems Engineer Jigsaw Technology Pty Ltd URL: http://www.jigsaw.com.au Address: 21 Boomerang Place          Seven Hills NSW 2147 Australia Phone: 02 9672 4222 Fax: 02 9672 4211 Email: peter@jigsaw.com.au _______________________________________________________________

-----Original Message----- From: Bráulio Gergull [mailto:webmaster@agenciaweb.com] Sent: Friday, 14 July 2000 4:59 To: Lars Ehrichs; suse-security@suse.com Subject: Re: [suse-security] SendMail (SMTP_AUTH) POP (POP_AUTH)

Hi Lars,

...

Hallo Bráulio,

I use a solution from www.lihas.de under Skriparchiv, it was not too difficult to install and everything you need is in the package and ...important... it works with suse 6.4!

Thanks for the link, I've just downloaded and will give it a try.

...

BG> Also, we suspect that a user is sending unauthorized msgs outside the BG> company. Is there a way to send a copy of all the outgoing msgs from a user BG> to the administrator's account (transparently)?

Why don't you look in var/log/mail

We did it and found that one employee is sending msgs to an ex-employee who left the company some months ago not very "friendly". Now the problem is to know what kind of information (if any) is being sent.

...

instead of spying in your users mails?

In fact I don't like this idea either, but I was asked for a "technical" solution. Moreover, I was asked to tell if sending copies of the messages is possible without the sender taking notice. I've already warned the guys about possible legal implications.

...

BG> I'm using SuSE Linux 6.4. Me too :)

:)

Thanks a lot.

[]s, Bráulio Weimann Gergull

--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com