RE: [Snort-users] RE: [Snort-sigs] capture email

yeah... that does not work for me... :)

I turned that feature on a few months ago and it was scary!

I have 4,000 plus users who love their email!

Ricardo


>>> "Schmehl, Paul L" <pauls@utdallas.edu> 11/4/2003 11:23:49 AM >>>
> -----Original Message-----
> From: Snort [mailto:Snort@intercept.net]
> Sent: Tuesday, November 04, 2003 10:35 AM
> To: Ricardo Londono
> Cc: Snort-users@lists.sourceforge.net
> Subject: [Snort-users] RE: [Snort-sigs] capture email
>
> You might want this option for postfix, have it bcc a new
> e-mail box on your groupwise server and setup rules that will
> delete all e-mails except those destined for your teacher or
> coming from that suspected student.
>
> The postfix always_bcc parameter is what you're looking for:
> /usr/share/doc/packages/postfix/samples/sample-misc.cf:
>
> # The always_bcc parameter specifies an optional address that
> # receives a copy of each message that enters the Postfix system,
> # not including bounces that are generated locally.
> #
> always_bcc =
>
Oof dah! Hope he has a very small user base or a very large hard
disk!

Paul Schmehl (pauls@utdallas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users