qmail, regulatory compliance and bcc

Numerous regulatory compliance bodies provide guidelines for e-mail
capture and retention. And capturing every message, especially for
publicly traded companies, is becoming a strict obligation.

As most know, the QUEUE_EXTRA facility of qmail allows a copy of every
e-mail to be copied to a "log" address. For the most part, this works
well, except for bcc (blind carbon copy).

You see, for compliance it is not only necessary to capture the message,
but also all of the envelope recipients *including* bcc, but qmail, like
most MTAs, strips the bcc off during the SMTP conversation.

Does anyone have a suggestion for retaining bcc (envelope info) for
local accounts (e.g. to "log" via qmail-local) but removing it before
delivering remotely (via qmail-remote)?

Rob Oakley <robo@pobox.com> writes:

> Does anyone have a suggestion for retaining bcc (envelope info) for
> local accounts (e.g. to "log" via qmail-local) but removing it before
> delivering remotely (via qmail-remote)?

You get that from the qmail-send logs.

--
Dave Sill Oak Ridge National Lab, Workstation Support
Author, The qmail Handbook <http://web.infoave.net/~dsill>
<http://lifewithqmail.org/>: Almost everything you always wanted to know.

Dave Sill wrote:
> Rob Oakley <robo@pobox.com> writes:
>
>
>>Does anyone have a suggestion for retaining bcc (envelope info) for
>>local accounts (e.g. to "log" via qmail-local) but removing it before
>>delivering remotely (via qmail-remote)?
>
>
> You get that from the qmail-send logs.

Thanks for your response, Dave.

I've decided (instead) to insert a simple process that snoops the
envelope pipe (fd 1) between qmail-smtpd and qmail-queue (using the
$QMAILQUEUE facility).

Rob Oakley wrote:

> Dave Sill wrote:
>
>> Rob Oakley <robo@pobox.com> writes:
>>
>>
>>> Does anyone have a suggestion for retaining bcc (envelope info) for
>>> local accounts (e.g. to "log" via qmail-local) but removing it before
>>> delivering remotely (via qmail-remote)?
>>
>>
>>
>> You get that from the qmail-send logs.
>
>
> Thanks for your response, Dave.
>
> I've decided (instead) to insert a simple process that snoops the
> envelope pipe (fd 1) between qmail-smtpd and qmail-queue (using the
> $QMAILQUEUE facility).

While you might think that the solution is enough, you might have been
better of using Dave's advice in conjunction with qmailanalog to crunch
the log. There is an abundance of information there that might prove
useful.

AK