How to save ALL inbound and outbound mail
Fabio Giannotti
Running 5.0.5 with sendmail 8.8.8.
Does anyone know how to do sendmail.cf "magic" to allow the server to keep a
copy of all inbound and outbound mail?
(Client needs this for legal CYA reasons...)
Thanks,
Fabio
Jeff Hyman
For outbound, you could edit 'uutry' to make a copy of
(lets say) D* /u/spare/ assuming uutry is whats being launched.
Thanks!
Jeff Hyman
.--.
__________________________ .-. | | __________________________________
Lone Star Software Corp. | | | | .-. E-Mail: je...@cactus.com
Cactus International, Inc. | |_| | | | Sales: (800) LONE-TAR
509 E. Ridgeville Blvd. _ |___ |_| | Support: (301) 829-1622
Mt. Airy, MD 21771 _| ~- | ___| Fax: (301) 829-1623
http://www.CACTUS.com \, _} | | http://www.LONE-TAR.com
------------------------- \( -- | | -----------------------------------
| |
Fabio Giannotti
Thanks for the suggestion, but this is a straight sendmail location.
Windows clients use smtp to send mail through the server, which is hooked
directly to the internet.
Fabio
Jeff Hyman <sco...@cactus.com> wrote in message
news:m13ZyX8...@cactus.com...
Tony Lawrence
>
> Hello all,
>
> Running 5.0.5 with sendmail 8.8.8.
>
> Does anyone know how to do sendmail.cf "magic" to allow the server to keep a
> copy of all inbound and outbound mail?
>
> (Client needs this for legal CYA reasons...)
When you start the daemon, add "-X
/var//log/monster_maill_log". You'll need to stop sendmail
fairly often to compress and rotate those logs; they will
get monstrous.. I do this at several client sites probably
for the same reasons your client wants to do it- we keep a
few days on the server and the rest can be had from tape if
ever needed..
--
Tony Lawrence (to...@aplawrence.com)
SCO/Linux articles, help, book reviews, tests,
job listings and more : http://www.pcunix.com
da...@lennon.postino.com
Fabio Giannotti <fab...@venmar.com> wrote:
> Running 5.0.5 with sendmail 8.8.8.
> Does anyone know how to do sendmail.cf "magic" to allow the server to keep a
> copy of all inbound and outbound mail?
> (Client needs this for legal CYA reasons...)
We have been using a shim called logall.c written by Axel Reinhold ,
<ax...@freakout.db> , that is compiled into sendmail.If you would like
a copy let me know, and I can e-mail it to you.
--
Danny Aldham Providing Certified Internetworking Solutions to Business
www.postino.com E-Mail, Web Servers, Web Databases, SQL PHP & Perl
Steve Fabac
>
> Fabio Giannotti wrote:
> >
> > Hello all,
> >
> >
> > Does anyone know how to do sendmail.cf "magic" to allow the server to keep a
> > copy of all inbound and outbound mail?
> >
> > (Client needs this for legal CYA reasons...)
>
> /var//log/monster_maill_log". You'll need to stop sendmail
> fairly often to compress and rotate those logs; they will
> get monstrous.. I do this at several client sites probably
> for the same reasons your client wants to do it- we keep a
> few days on the server and the rest can be had from tape if
> ever needed..
>
>
> --
> Tony Lawrence (to...@aplawrence.com)
> SCO/Linux articles, help, book reviews, tests,
> job listings and more : http://www.pcunix.com
I have tried the -X rout but would like the option to log only the
mail headers and the smtp handshake (including relay requests and
rejections). The -X logs two copies of each message: one copy during
the "send message, end with a single ." and the message when passed off
to the local mail handler.
I have thought to replace the -X file_name with a named pipe with
a process running an awk script to throw away message content and
attachments but have not got around to doing it.
The sendmail FAQ indicates that there are many debugging settings but
then says "too many to keep up to date - see the source code."
What a cop-out.
Steve Fabac
S.M. Fabac & Associates
816/765-1670
Roberto Zini
>
> Hello all,
>
> Running 5.0.5 with sendmail 8.8.8.
>
> Does anyone know how to do sendmail.cf "magic" to allow the server to keep a
> copy of all inbound and outbound mail?
>
> (Client needs this for legal CYA reasons...)
>
> Fabio
Hi !
I had been asking for the same "magic" a while ago; our
local policy is to save every incoming/outgoing message
in a folder which can be used later to a) examine the
above messages and b) retrieve 'em when a customer
of ours manages to delete an important message.
I've changed the sendmail configuration parameters
in order to force it to queue messages instead of
trying to deliver 'em; thus making I've been able to
write a shell program which makes a copy of every
message in the queue before delivering it.
If you're interested, drop me an email and I'll manage
to send it to you; please keep in mind that even if the
script should run both under OpenServer5 and UnixWare 7
without furter changes, the embedded comments are written
in Italian so you'll have to get 'em translated in order
to get a better understanding of what happens when it runs.
BTW, didn't you ask for the same thing a while ago ?
I seem to remember that I've already sent this script to
someone on the 'Net, but I'm not quite sure about it.
Best,
Roberto
--
---------------------------------------------------------------------
Roberto Zini email : fr...@strhold.it
Technical Support Manager -- Strhold Sistemi EDP Reggio Emilia(ITALY)
---------------------------------------------------------------------
"Has anybody around here seen an aircraft carrier?"
(Pete "Maverick" Mitchell - Top Gun)
Bill Vermillion
>> Hello all,
>> Running 5.0.5 with sendmail 8.8.8.
>> Does anyone know how to do sendmail.cf "magic" to allow the
>> server to keep a copy of all inbound and outbound mail?
>> (Client needs this for legal CYA reasons...)
>When you start the daemon, add "-X
>/var//log/monster_maill_log". You'll need to stop sendmail
>fairly often to compress and rotate those logs; they will
>get monstrous.. I do this at several client sites probably
>for the same reasons your client wants to do it- we keep a
>few days on the server and the rest can be had from tape if
>ever needed..
Thanks for that pointer Tony. So many programs - so many flags.
I just tried it and I saw why it gets 'monstrous'. It logs the file
incoming and delivery too. That's all the handshake headers and 2
copies of the message. I just sent a 1 line email message
- plain text - 43 characters long. The log file is 3512.
Monstrous is almost an understatement.
Looking at it I had a small thought. Besides compressing and
rotating the logs, you could pre-process them by doing something as
grep "<<<" <logfile.name> > incoming.messages and
grep ">>>" <logfile.name> > outgoing.messages, of course
using part of the date command to give you dated message files.
That would make things a trifle bit more manageable.
Thanks for expanding my knowledge base.
Bill
--
Bill Vermillion - bv @ wjv . com
Fabio Giannotti
I am trying to go with Tony's solution of -X logfile, but am having a little
problem.
On a test system with low volume, it works great. However, on the real
system with fairly heavy volume, it does not log anything, and I keep
getting the following error in syslog:
NOQUEUE: SYSERR(root) opendaemon socket: server SMTP socket wedged: exiting
I can't find any mention of this in the TAs or newsgroup, but I'm thinking
its a resource overload or contention issue. Any ideas?
We can't have our SMTP socket getting wedgies, now can we?
Thanks in advance,
Fabio
Fabio Giannotti
NOQUEUE: SYSERR(root) opendaemon socket: cannot bind: Address already in use
Nothing else is running on 25. With the -X, I get errors, without it I
don't.
Fabio Giannotti <fab...@venmar.com> wrote in message
news:GeKx5.378$b64....@news1.primary.net...
Tony Lawrence
>
> Thanks to all who responded!
>
> I am trying to go with Tony's solution of -X logfile, but am having a little
> problem.
>
> On a test system with low volume, it works great. However, on the real
> system with fairly heavy volume, it does not log anything, and I keep
> getting the following error in syslog:
>
> NOQUEUE: SYSERR(root) opendaemon socket: server SMTP socket wedged: exiting
I've only used this on Linux systems with high volume..
Bill Vermillion
>> Thanks to all who responded!
>> I am trying to go with Tony's solution of -X logfile, but am
>> having a little problem.
>> On a test system with low volume, it works great. However, on the
>> real system with fairly heavy volume, it does not log anything,
>> and I keep getting the following error in syslog:
>> NOQUEUE: SYSERR(root) opendaemon socket: server SMTP socket
>> wedged: exiting
>I've only used this on Linux systems with high volume..
I have noticed while testing the -X you suggested, that mail
delivery delay on a local station increases. Besides copying the
message three times there is the overhead of inserting all the
tracing information, process ID, etc., before each line in the
log file.
I guess what is needed is something like a simple tee function so
the message is just copied to two places instead of processing the
message on a line by line basis. Fabio didn't say just how large
his mail volume was - just that it was large.
I wonder what something such as sar would say on disk useage and
CPU time during this. I suspect the mail handler just got too busy
logging. The logfile is 7 times larger than the mail message in
the user mailbox.
Fabio Giannotti
Bill Vermillion <bi...@wjv.com> wrote in message news:G1560...@wjv.com...
Update to all who helped with this problem.
For safety (read: being afraid of new releases) reasons, I will probably go
with Roberto's script (Thanks Roberto!), but I also found out the following:
It turns out that Sendmail versions 8.10 and higher provide a hook that
allow you to write macros to do all sorts of things to mail as it passes
through the system.
The sample macro they give you, of course, is to save a copy of all email
going through the system!
So, my question NOW is: Has anyone compiled Sendmail 8.10 or better on
OpenServer 5.x, and if so, can I get a copy of it and how well does in work?
Bill Vermillion
>Update to all who helped with this problem.
>For safety (read: being afraid of new releases) reasons, I will
>probably go with Roberto's script (Thanks Roberto!), but I also
>found out the following:
>It turns out that Sendmail versions 8.10 and higher provide a hook
>that allow you to write macros to do all sorts of things to mail as
>it passes through the system.
>The sample macro they give you, of course, is to save a copy of all
>email going through the system!
Care to mention the title of this macro - so I don't have to hunt
everywhere for it :-). I know, I know. RTFM - but it is SO BIG.
:-)
Fabio Giannotti
Bill Vermillion <bi...@wjv.com> wrote in message news:G16xy...@wjv.com...
Sorry 'bout that.
The command/macro/whatever is called "milter" and it has a related
"LIBMILTER" associated with it. Keep in mind I have no idea what I'm
talking about. ;-)
Fabio
Bill Vermillion
Fabio Giannotti <fab...@venmar.com> wrote:
>Bill Vermillion <bi...@wjv.com> wrote in message news:G16xy...@wjv.com...
>> In article <Bi3y5.429$b64....@news1.primary.net>,
>> >The sample macro they give you, of course, is to save a copy of all
>> >email going through the system!
>> Care to mention the title of this macro - so I don't have to hunt
>> everywhere for it :-). I know, I know. RTFM - but it is SO BIG.
>> :-)
>Sorry 'bout that.
>The command/macro/whatever is called "milter" and it has a related
>"LIBMILTER" associated with it. Keep in mind I have no idea what I'm
>talking about. ;-)
Well this IS the old usenet newsgroup hierarchy. Does anyone
really know what they are talking about. Thanks for the pointer.
Bill
Bill Vermillion
Fabio Giannotti <fab...@venmar.com> wrote:
>So, my question NOW is: Has anyone compiled Sendmail 8.10 or better
>on OpenServer 5.x, and if so, can I get a copy of it and how well
>does in work?
Well it's just been put up as a ptf for Unixware 7 so perhaps
the 5 is coming real soon now.
Otto Rodusek (SG)
1. I've been following all your dialog as I have been trying to do the
same with SCO 5.0.5 and sendmail 8.8.8. To date my attempts are no better
than Bill , Fabio, Roberto or Lawrence. Some time back I posted a simalar
request on several news groups but alas no one had an answer. To date the
best answer is the 8.10 solution (if it really exists and works). I will
also be VERY interested in the binary version of sendmail 8.10 or better
8.11 if anyone has it out there or learns of it.
2. I have however managed to quite successfully log ALL incoming messages
to our server via fetchmail - that is to say all incoming mail is
automatically copied to a mail account I specified (in this case I called it
"mailer").
3. The only problem I need to resolve is how to capture all mail GOING
out via sendmail!
Thanks for all the interesting reads from all the contributors on the above
matter.
rgds. Otto.
Bill Vermillion <bi...@wjv.com> wrote in message news:G19r6...@wjv.com...
Bill Vermillion
Otto Rodusek (SG) <apl...@cyberway.com.sg> wrote:
>1. I've been following all your dialog as I have been trying to do
>the same with SCO 5.0.5 and sendmail 8.8.8. To date my attempts are
>no better than Bill , Fabio, Roberto or Lawrence. Some time back
^^^^^ ^^^^^^^^^
If you mean Tony Lawrence, he suggested the -X but noted the big
log files. I tried that and it does work and I suggested massaging
the log files as the conversation between the host and the source
has both sides logged, thus duplicating every email. I suggested
separateing the output into two file by greping [or what other type
processing you would care to use' for the >>> and the <<< which
appear on every line in the file, with the >'s and <'s relating
to the conversation on either machine. I had no problems but I
was also using 8.9.x as was Tony.
>I posted a simalar request on several news groups but alas no one
>had an answer. To date the best answer is the 8.10 solution (if it
>really exists and works). I will also be VERY interested in the
>binary version of sendmail 8.10 or better 8.11 if anyone has it out
>there or learns of it.
I did receive mail from someone who had ported the the 8.10 to SCO.
Perhaps that person - I don't recall the name now - will send you
mail on this or post a location to get his compiled version.