Storing/Quaranting certain outbound emails

[Alex Neuman]

I think you're looking for the "Archive Mail" option. You set up a ruleset
like you specified, something like:

FromOrTo:       *@domain.com     /home/youraccount/mail/suspicious
or
FromOrTo:       *@domain.com     /home/youraccount/suspicious
then
FromOrTo:       default         no

Depending whether your IMAP server stores its mailbox files under
/home/youraccount (uw-imap) or /home/youraccount/mail (dovecot). That way
you can use any IMAP client to browse through the archive.

I've never tested sending it to /var/spool/mail/youraccount, but in theory
that would mean you'd be able to read it using any e-mail account on the
system.

Another way that just popped into my head would be to send it to a file,
and then formail -s sendmail youraccount at yourdomain.com that file on a
regular basis, then delete it.

So if you think about it, there are quite a few ways you could accomplish
what you need.

> Hello everyone.
>
> Is it possible to setup a rule that will store/quarantine email that is
> destined for a certain domain?
> We want to store and view :) some emails that are leaving our network and
> see what they contain.
>
> I tried setting the following rule in spam.rules:
>
> FromOrTo:       @domain.com     store
>
> But that didn't seem to work.
>
> Is there another way to do that?
>
> Thanks.
>
> Jason
>
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html
>

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html