Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Log outgoing emails
  •  
shawnfunn

Messages: 2
Karma: 0
Send a private message to this user
We want to keep a log of the subject and message of all outgoing emails sent through the SMTP server. Is there any way to do that??

-S
  •  
peterj

Messages: 852
Karma: 1
Send a private message to this user

turn on the archiving feature for outbound email
  •  
hobson@jdk.com

Messages: 65
Karma: 0
Send a private message to this user
> turn on the archiving feature for outbound email

Wow; that's really swatting a fly with a sledgehammer; is there no other way?

- Marc
  •  
sedell

Messages: 1168
Karma: 1
Send a private message to this user
The only other way is to use the mail log, which doesn't include the subject. That's it built in - you'd have to roll your own solution or buy a third party product otherwise. Most places don't find a log of to, from, and subject very useful. If you need to track mail, it's somewhat useless without the content of the message, which archiving does.

Scott
  •  
hobson@jdk.com

Messages: 65
Karma: 0
Send a private message to this user
> you'd have to roll your own solution or buy a third party product otherwise.

Interesting! Any pointers to where to find such products or APIs?

> Most places don't find a log of to, from, and subject very useful. If you need to track mail, it's somewhat useless without the content of the message, which archiving does.

Sometimes all that's needed it to determine what was sent/rec'd when; in my experience (20+ years) this is a common and basic requirement.

Archiving the entire message is a HUGE cost to bear for this.

Of course, YMMV. Smile
  •  
sedell

Messages: 1168
Karma: 1
Send a private message to this user
hobson<_a.t_>jdk.com wrote on Thu, 22 May 2008 08:56

Interesting! Any pointers to where to find such products or APIs?

There are no APIs with Kerio, so you'd have to find a solution without. APIs have been requested for some time, but they haven't shown up yet, so you're on your own in that regard.

For 3rd part products, you might have to look at a gateway of some sort. We have a Barracuda gateway appliance that does outbound scanning. That has a log similar to what you want, but that's a bit high end for just logging. Something like that might be the route you'd have to go. Either that, or use the archive forwarding, send it all to a mailbox where the mail gets read, logged and deleted.

hobson<_a.t_>jdk.com wrote on Thu, 22 May 2008 08:56

Sometimes all that's needed it to determine what was sent/rec'd when; in my experience (20+ years) this is a common and basic requirement.

Archiving the entire message is a HUGE cost to bear for this.


The problem with this is you can't determine what was sent or received by the subject. How many times do you see mail with no subject, or a subject of "Hey!". And there's no guarantee that a message with a subject of "Our current PO" doesn't drift into trade secrets, have sensitive or malicious files attached, etc. And if someone knows you're only logging subjects, it's really easy to intentionally use misleading subjects to mask activities.

If something does come up where you need proof of communications, the to, from, and subject aren't worth the paper they're printed on for any sort of legal proceedings because they don't prove anything. That's why a lot of the regulations that have been passed in the last several years have archiving as a requirement. It's the reason in the last few years there have been an explosion of e-mail archiving solutions hitting the market.

Scott
  •  
hobson@jdk.com

Messages: 65
Karma: 0
Send a private message to this user
> The problem with this is you can't determine what was sent or received by the subject.

Clearly. I mean *in addition* to timestamp, sender and recipient as already logged; those are the four necessary pieces.

It would seem to be a simple addition; actually it's strange that it wasn't in from the start.
  •  
sedell

Messages: 1168
Karma: 1
Send a private message to this user
But even with the timestamp, sender, recipient and subject, all you can prove is a message was sent. It's easy to use a false from address, recipient doesn't always show up - like with BCC mail, and use a misleading subject, and nothing is proven other than a message was sent, and what time.

Scott
  •  
hobson@jdk.com

Messages: 65
Karma: 0
Send a private message to this user
> But even with the timestamp, sender, recipient and subject, all you can prove is a message was sent.

Which, as I say, is exactly what I'm looking for. Smile

And, even in cases where one is looking for an additional level of proof (which I'm not) this mechanism would be a quick (and therefore valuable) first step in that additional process.

- Marc
  •  
sedell

Messages: 1168
Karma: 1
Send a private message to this user
There's already a built in mail log for that purpose, and it'll be more accurate since it'll capture data that external solutions won't.

Scott
  •  
hobson@jdk.com

Messages: 65
Karma: 0
Send a private message to this user
> There's already a built in mail log for that purpose, and it'll be more accurate since it'll capture data that external solutions won't.

Although, as I say, it does not log the Subject, and so is needlessly difficult - or impossible - to address the simple user question "Did my message go out?" or "Did message X come in?"
  •  
sedell

Messages: 1168
Karma: 1
Send a private message to this user
If you don't see the message in the queue, and the user didn't get an NDR, it went (users who ask "Did it go?" often, I point at the delivery receipt option). If you do need to verify something in the logs, knowing who sent it, who they sent it to, and what time is enough to find it.

Scott
  •  
hobson@jdk.com

Messages: 65
Karma: 0
Send a private message to this user
> If you don't see the message in the queue, and the user didn't get an NDR, it went (users who ask "Did it go?" often, I point at the delivery receipt option). If you do need to verify something in the logs, knowing who sent it, who they sent it to, and what time is enough to find it.

Ah; must be nice to have users who keep stopwatches to pinpoint exactly when they sent something - and pads to record the info. Smile

Not to mention people from outside your org sending stuff in. Smile)
  •  
sedell

Messages: 1168
Karma: 1
Send a private message to this user
Sent items folder. Does a lovely job of recording sent time. Wink

Incoming mail - that's a little harder to pinpoint as the mail may have never gotten here, or been delayed for unknown lengths of time. Usually if someone is asking if a mail came in, it didn't. I do a search of the mail log for the sender's address, and if not found within the approx time frame, the security and warning log because it was probably rejected or failed for some reason.

Scott
freakinvibe

Messages: 1542
Karma: 62
Send a private message to this user
shawnfunn wrote on Wed, 02 November 2005 06:50

We want to keep a log of the subject and message of all outgoing emails sent through the SMTP server. Is there any way to do that??

-S

The original poster said he would like to catch "subject and message", so why not just switch on archiving? This is not an overkill.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
Previous Topic: LDAP and SSL
Next Topic: Kerio With Apple Open Directory
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Oct 24 00:29:38 CEST 2017

Total time taken to generate the page: 0.00573 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.