OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Archiving all Postfix mail

From: Wietse Venema (wietseporcupine.org)
Date: Sun Feb 01 2004 - 20:27:12 CST


Victor.Duchovnimorganstanley.com:
> On Sun, 1 Feb 2004, Wietse Venema wrote:
>
> > #DEFINE dont_remove
> > The dont_remove parameter is a debugging aid. When enabled, Postfix
> > does not delete queue files but rather saves them in the "saved"
> > mail queue.
> >
> > This feature can also be used to archive all mail. To recover
> > the envelope information and content, use the postcat(1) command.
> >
>
> Cool feature. Of course the administrator needs to implement a periodic
> sweep of the done queue to secondary storage or provide enough disk space
> to cover the expected message rate for the entire retension period :-)

If they don't, then sooner or later they will receive a reminder.

Sweeping is best implemented with rename() within the same file
system (like one saved directory per day); don't delete files until
you are 100% certain that the information is safely stored.

This really calls for a nicer postcat command; but even with the
existing one, all the forensic information is there except for the
date of delivery.

> Does this mean that it is finally safe to assume that every REC_TYPE_DONE
> record in the envelope and extracted segments was originally a message
> recipient? Presumably all messages in the saved queue will have only
> REC_TYPE_DONE records in place of REC_TYPE_RCPT records?

I have added a REC_TYPE_KILL record for nuking data that is no
longer needed. REC_TYPE_DONE is forever reserved for recipients
and nothing else.

I have also added "save" back to the list of mandatory queue
directories in postfix-files.

        Wietse