Archives not being scanned, help!

Julian Field mailscanner at ecs.soton.ac.uk
Sat Feb 14 16:02:30 GMT 2004


At 14:16 14/02/2004, you wrote:
>Hello,
>
>I've started archiving one of our domains and forwarding them to mbox
>format files locally. Everything is working fine, however when I open one
>of the files with a webmail program, I notice that they are not being
>scanned. The original email that processes and is routed to another email
>server gets scanned however. It appears as though the archive sends the
>email to the file without traversing the scanner. I even sent the eicar
>test file and it went through fine.
>
>Is there something I need to configure to have archived mail get scanned?

The mail archive is completely intentionally an unmodified copy of the
incoming mail feed. If you are having to archive mail for legal reasons or
(like I do) to collect test data sets, the last thing you want is to have
anything missing from the original copy. Once you are changing anything in
the archive, I very much doubt its trustworthiness would stand up in court
should it be necessary. The court opponents could then argue that a bug in
the software could have deleted something it shouldn't have. By not
modifying it at all, you have a much stronger defence against this argument.

Handle your mail archive carefully.
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



More information about the MailScanner mailing list