Sean Cull

SNTT : Button to check if your users are fowarding mail to external email accounts 

Sean Cull  December 11 2008 18:28:53

Users forwarding automatically forwarding emails to external accounts can cause both security and reliability issues. I have seen instances where an email was automatically sent to an external account which sent back an error bounce message ... which got sent to the same account ... which sent back another bounce message ... and so on.

There are two main ways that users will do this.

The first
is to modify the mail forwarding address in their person record ( Can your users edit this setting ? Should they be able to edit this setting ? ). You can find these affected records by searching the people view in the NAB / Domino Directory using a search string such as the one shown below - this is a cruse search looking  for the existence of the "@" symbol in the mailaddress field. Note that you can save this as a shared search for future use.

Image:SNTT : Button to check if your users are fowarding mail to external email accounts

The second
method that users use to forward mail to external accounts is to use the mail rules in their mail files. These can be disabled in the server configuration record but they are genuinely useful things to have in many cases.

I have written code for a button which will scan everyones mail rules ( assuming the user has access to their mail files ) and return a report of mail rules containing the symbols "@" and "." in the same forwarding address. This is a fairly crude search string but it is effective in most cases - feel free to improve upon it.

Clicking on the button will produce a report such as the one below which is emailed to your Notes account.

Image:SNTT : Button to check if your users are fowarding mail to external email accounts

If you are having trouble accessing peoples mail files you may want to try using the "Full Access Administration" option in the administrator client

Image:SNTT : Button to check if your users are fowarding mail to external email accounts


You can download the as an lss file at the end of this post. You can also download a database with the button in the first document - just cut and paste it to where ever. You should obviously look at the code before you click on the button - do this by selecting the button, right clicking and choosing edit. The easiest way to select the button without pressing it is to backspace onto it.

The code is provided for your own use without warranty. FoCul would be very happy to provide you with admin or development support for your Notes and Domino needs. You can contact us via

http://www.deliverytoolkit.com - our new shrink wrapped offerings
http://focul.net - our main site ( needs updating !! )
http://seancull.co.uk ( my personal tech blog )


mailaudit.zip
mailaudit2.lss

As ever if anyone knows of a better way to monitor this - or to disable it - please let me know. It does seem odd that the functionality does not exists in 80x

The last question is will my GPRS signal last far enough into the Irish Sea to replicate this from my ferry !

Sean



 Admin Tips  Download  Show-n-Tell Thursday  Lotus 


1Randy Bye  12.11.2008 22:09:06  Policy document

In the server configuration documents...

Router/SMTP tab

Restrictions and Controls tab

Delivery Controls tab

User rules mail forwarding: Enabled to disabled.

Users will see the forward indicator but it won't go anywhere.



2patrick picard  12.12.2008 14:21:24  NSF link broken

An error has occured whilst trying to find the page that you have requested.

It may be that the page does not exist or that you do not have the authorization to view it.

Error Message:

HTTP Web Server: Lotus Notes Exception - Entry not found in index



3patrick picard  12.12.2008 14:21:57  NSF link broken

An error has occured whilst trying to find the page that you have requested.

It may be that the page does not exist or that you do not have the authorization to view it.

Error Message:

HTTP Web Server: Lotus Notes Exception - Entry not found in index



4Sean Cull  12.12.2008 17:55:46  Download showl now be working

@2,3 Patrick, the download should be ok now, I think the .nsf ending confused the blog template



5Sean Cull  12.12.2008 17:57:28  Delivery Controls

@1 Randy, you are correct but this restriction also stops forwarding to internal people which is a very useful thing to be able to do.



6James Algar  6.4.2009 17:58:15  Forwarding in agents?

An admin could create LotusScript agents on behalf of the users to achieve internal forwarding, which will get past the restriction in the Config doc.

However my users have created simple agents to forward mail, rather than rules, yet they don't have Designer clients. Any ideas how to stop them creating these, without reducing their access level down from Mgr in the ACL?



7sean cull  6.4.2009 19:08:25  Use the ACL

You could try leaving them as Managers but removing their ability to create private agents in the ACL

I don't think that this will affect mail rules or Out of Office but you should check to be sure.





Please leave a comment


Subject:
   
Name:
E-mail:
 
Comment:  (No HTML - Links will be converted if prefixed http://)
 
Remember Me?