Re: Logging all smtp/pop3 in/out ?

On Oct 9, 8:17 pm, Sam <s...@xxxxxxxxxxxxxx> wrote:
Benoit Lefebvre writes:
My client want to be able to record/review all in/out emails sent/
received - smtp/pop3/imap/etc..

In the last four decades, or so, since the Internet existed, not a single
message has been sent or received using POP3 or IMAP for the simple reason
that neither POP3 or IMAP has anything to do with sending or receiving mail.
That jobs belongs to SMTP. Your problem comes down to logging all mail sent
or received via SMTP.

I am thinking about setting up a linux box between the m0n0wall and
the internet with maybe a kind of sniffing software that would record
everything...

This generic software might be useful for capturing raw data being sent or
received from the network. That is generally useless when you want to locate
and examine a single individual message that was sent or received, since
you'll have to manually hunt down and trace all the relevant packets.

A more useful solution is to simply use the linux box as a smarthost for all
mail sent or received. Your linux box is the sole machine that's connected
to the Internet, your internal network is connected to the linux box, on a
second network card. Your linux box will be receiving incoming mail from the
Internet and forwarding it to your internal mail server, and receive
outgoing mail from your mail server and forwards it to the Internet. Your
internal network has no direct connectivity to the Internet, and must send
or receive all mail through the gateway box, which might also run some other
proxy software, such as a web proxy, to allow internal machines to browse
the Internet.

Then, the problem is reduced to having the gateway box log all mail it sends
or receive. Most common, free linux email servers can easily do that.

application_pgp-signature_part
1KDownload

Thank you for not answering my question and the useless talking about
how emails works :-)

Having written an entire custom smtp server in the past I think I know
pretty much about the details you are pin-pointing.

I'm happy that you are having the same problem as me.. Finding the
software that would do the job for logging everything.

Now lets see if someone have an answer :-)

--Ben

.

Relevant Pages

  • Re: Logging all smtp/pop3 in/out ?
    ... In the last four decades, or so, since the Internet existed, not a single message has been sent or received using POP3 or IMAP for the simple reason that neither POP3 or IMAP has anything to do with sending or receiving mail. ... Your linux box is the sole machine that's connected to the Internet, your internal network is connected to the linux box, on a second network card. ... Your internal network has no direct connectivity to the Internet, and must send or receive all mail through the gateway box, which might also run some other proxy software, such as a web proxy, to allow internal machines to browse the Internet. ...
    (comp.os.linux.misc)
  • Re: Remove Internal Hops from Header
    ... If you can not to understand why someone might not want to expose their internal network structure via extra Received: headers, I can not explain it to you. ... When messages originate internally and go out to the world, the first header you will see is the first receiving SMTP server, the one that got it from Exchange / GroupWise. ... Vanadium is connected to a generic internet connection on the 64.26.171.x network with a extremely generic looking reverse DNS. ...
    (comp.mail.sendmail)
  • How to detect WORMS/VIRUS that send spam
    ... the internal computers connect through LAN technologies like Ethernet ... server act as the proxy or firewall for all sort of internet ... mostly Windows and Linux based. ... happening only the days our mail server is up(On holidays spam is not ...
    (comp.os.linux.networking)
  • How to detect WORMS/VIRUS that send spam
    ... the internal computers connect through LAN technologies like Ethernet ... server act as the proxy or firewall for all sort of internet ... mostly Windows and Linux based. ... happening only the days our mail server is up(On holidays spam is not ...
    (comp.os.linux.misc)
  • How to detect WORMS/VIRUS that send spam
    ... the internal computers connect through LAN technologies like Ethernet ... server act as the proxy or firewall for all sort of internet ... mostly Windows and Linux based. ... happening only the days our mail server is up(On holidays spam is not ...
    (comp.os.linux)