[Cialug] Email Archiving

[Josh More]

Yes, if you are archiving for legal or security reasons, a POP or IMAP solution is insufficient as someone could delete or alter data before it is archived.

The "standard" way to do this on Exchange is to create a dedicated mailbox that silently collects all email and forwards it to the archiving system.  It's also not perfect, but better than POP/IMAP.

In the Linux world, you can do something similar by either modifying the mail flow system to all emails are sent to an archiving daemon (hopefully with verification) or leveraging a port span sort of configuration to duplicate all internal and external traffic and send it to a full packet capture system.

I do not believe that it is reliably possible with systems like GroupWise and Lotus Notes.


-Josh More, CISSP, GIAC-GSLC, GIAC-GCIH, RHCE, NCLP
morej at alliancetechnologies.net
515-245-7701

________________________________________
From: cialug-bounces at cialug.org [cialug-bounces at cialug.org] on behalf of L. V. Lammert [lvl at omnitec.net]
Sent: Wednesday, October 06, 2010 17:15
To: Central Iowa Linux Users Group
Subject: Re: [Cialug] Email Archiving

At 04:40 PM 10/6/2010, you wrote:
>On Wed, Oct 6, 2010 at 4:34 PM, L. V. Lammert <lvl at omnitec.net> wrote:
> > Anyone ever tried to setup an archiving solution when an external
> > provider is being used? Most of the hits I see when searching are for
> > Exchange servers.
>
>If your provider supports IMAP you could use offlineimap to sync the
>messages to local disk.

Interesting, .. thanks!! The architecture is similar to the
fetchmail, however, in that an email could be deleted on the hosting
service in between 'archive' events.

The more I think about it, it almost has to be integrated with the
physical mail server (or a proxy thereof), .. but the other side is
merging that incoming archive with outbound email archives.

         Lee

_______________________________________________
Cialug mailing list
Cialug at cialug.org
http://cialug.org/mailman/listinfo/cialug