Can i find which emails were sent during a month?

machinakias · 04-28-2009, 12:14 PM

Hi all...
I need your help folks...

They want me to find all the emails that a specific user sent during April...

Is there any way to get a report of the user's activities for a month?

We use red hat 7.3 and sendmail...

Hope these info helps....

b0uncer · 04-28-2009, 12:17 PM

Unless the user tells you, there isn't any legal way you can, at least without calling a police. It's the same thing as with the "old" letters, they're none of anybody's business except for the sender and receiver.

machinakias · 04-28-2009, 12:32 PM

Quote:

Originally Posted by b0uncer

Unless the user tells you, there isn't any legal way you can, at least without calling a police. It's the same thing as with the "old" letters, they're none of anybody's business except for the sender and receiver.

i know that it's not right and i really do not want to do it...but they call me it manager....(but i'm not a real one i think!).

anyway,my boss demands it...that's why...
he wants to know to whom the mails gone...not the real message...
(well...it's just the same,but anyway.......)

so,can i get this report somehow? (by-passing the legal part....)

farslayer · 04-28-2009, 01:59 PM

IANAL - consult your companies legal team for actual legal advice.

Email correspondence is the property of the company, so the company has the right to retrieve and view it. provided they have a policy in place, in writing, to that effect.

Quote:

Under federal law the Electronic Communications Privacy Act (ECPA) allows companies to monitor employees' emails when one of three provisions are met:

* one of the parties has given consent,
* there is a legitimate business reason
* the company needs to protect itself

Even though the ECPA requires a provision to be met, under federal law companies are generally allowed to monitor employees' email

More info on Privacy inthe Workplace

To and from addresses should be in the mail log on the server.. Anything more detailed would have to come from the Client machine.

I hate when I am asked to pull logs, but I've let the employees here know that it is part of my job, and they understand the policies that are in place for net access. If they decide to do things they aren't supposed to, and it shows up in the logs. I can not, and will not sanitize the logs to protect them, doing so would put my job on the line.

machinakias · 04-28-2009, 02:03 PM

so, can anyone tell me where exactly to look? i'm not an advanced linux user....just a noob...
thanks for your replies!

unSpawn · 04-28-2009, 05:55 PM

/var/log/maillog and previous logs that might have been logrotated?