Snort mailing list archives

RE: RE: [Snort-sigs] capture email


From: "Ricardo Londono" <rlondono () ccisd net>
Date: Tue, 04 Nov 2003 12:30:57 -0600

yeah... that does not work for me... :)

I turned that feature on a few months ago and it was scary!

I have 4,000 plus users who love their email!

Ricardo


"Schmehl, Paul L" <pauls () utdallas edu> 11/4/2003 11:23:49 AM >>>
-----Original Message-----
From: Snort [mailto:Snort () intercept net] 
Sent: Tuesday, November 04, 2003 10:35 AM
To: Ricardo Londono
Cc: Snort-users () lists sourceforge net 
Subject: [Snort-users] RE: [Snort-sigs] capture email

You might want this option for postfix, have it bcc a new 
e-mail box on your groupwise server and setup rules that will 
delete all e-mails except those destined for your teacher or 
coming from that suspected student.

The postfix always_bcc parameter is what you're looking for: 
/usr/share/doc/packages/postfix/samples/sample-misc.cf: 

# The always_bcc parameter specifies an optional address that 
# receives a copy of each message that enters the Postfix system, 
# not including bounces that are generated locally. 
# 
always_bcc = 

Oof dah!  Hope he has a very small user base or a very large hard
disk!

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: