OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: e-mail auditing in sendmail 8.9.3/8.10.1
From: Dan Tso (dantsolab.org)
Date: Sat Apr 29 2000 - 00:18:14 CDT

> I need to copy all mail processed (in / out) through my mail server
> (FreeBSD/Sendmail) to one user account (auditormydomain.com.br) it's
> possible with sendmail 8.9.3/8.10.1 ?
>
> - For incoming, i used the /etc/alias file, but for outgoing i don't have a
> solution. :(

This is really a question for the sendmail forums and it comes up all
the time. At least when I researched it, the basic message was that
sendmail doesn't come with a canned solution for this (logging outgoing
mail) on purpose, primarily due to invasion of privacy issues felt by
the core developers/maintainers. However there are possibilities:
1) obviously, used something other than sendmail. I believe qmail and
postfix provide this feature,
2) there is a C source level hack to include this feature in sendmail
which has been posted to USENET,
3) you can alter the sendmail.cf file to do it, either using something
like procmail, or sendmail itself. This method, while not the most
efficient, is the easiest.

I am using a version of solution 3, modified from an example posted to
USENET (which didn't seem to be completely tested as far as I could
tell). The nasties are like if you ever do bulk mailing (mailing lists,
etc), you may want an escape mechanism to avoid 1000's of copies of the
same email in your log file.

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message