Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am working with a company on a migration from a standard POP3 email provider over to Google Apps premier.

The owner of the company currently receives copies of all INBOUND and OUTBOUND email into Outlook by way of server aliases (inbound) and outlook settings (outbound). It is a bit kludgey.

Upon the transition to Google Apps, I need to have a equivalent system in place. I have lookd high and low, but not yet found the answer.

The google auditing API looked very promising, but since it attaches the raw message as a text attachment, that is not equitable.

Update:

After discussing this with Postini Support, there is indeed a way to accomplish it. Essentially, you setup an inbound and an outbound content filter that matches everything, and instruct Postini to copy each message to a specific quarantine. Said quarantine should be a user that is never know or used, otherwise it may end up mixing good mail with spam. Finally, an admin can release the quarantine to HIS mailbox, therefore resulting in getting a copy of everything.

The inconvenient part is that there is no automatic delivery. I am looking into ways to automate that...

share|improve this question
1  
Please make sure that all users of the system are aware of the fact that their communications are being monitored, which may or may not be in violation of your local laws on wiretapping (depending where you live). Also make sure that whoever's getting these duplicates isn't sending "read receipts" or you may end up leaking the fact that you're spying on them. –  Andrew Sep 17 '10 at 1:01
add comment

3 Answers 3

How about Google Message Discovery? Sounds like that's part of Google Postini Services. It looks like Google bought Postini in 2007. The Message Discovery Console might be close enough, and it's probably the easiest (though not cheapest) solution. Looks like there is maybe a free trial?

share|improve this answer
    
If you can afford the cost, this is probably the easiest solution. There is a kludgey alternative (see my answer), but it is a lot trickier to setup. –  Zoredache Sep 8 '10 at 22:30
    
Yeah, it's plug 'n chug, but definitely not cheap. –  Mark Johnson Sep 9 '10 at 1:58
    
It's included with Google Apps premier edition, BTW. –  gahooa Sep 10 '10 at 12:46
add comment

It is possible using the routing options available in Google apps and a second mail server to save a copy of all messages provided you have either the Premier or Education edition. Basically you have to setup an inbound and outbound gateway and you can run everything through another mail server which along with some advanced rules can result in a spare copy of the message being saved on the email archive server, or you can forward it to another address somewhere.

See these two pages for details about setting up the mail routing in the Google interface.

There are some downsides to setting up an external archive system.

  • Since incoming email will be delivered through your mail server Google will not see the actually sender. Google's SPAM filter will be a lot less effective. You will probably need to run a SPAM filter on your gateway/archive box.
  • This setup is far more complex and likely to break. Kludgey, describes this method as well.
  • Trouble-shooting in the case of failures or problems will be a lot more difficult since there are many places for things to break.
  • This requires you to have a spare email server setup somewhere with enough capacity to capture all the email you want to save.
  • You must have a very good understanding of how to setup message relaying. On the gateway you will need to set it up to allow some relaying, but you must only allow relaying under the right conditions or your server will be abused by spammers.

I am not aware of any simple tutorials for doing this so you are going have to know your favorite MTA pretty well to get all the routing, relaying, and message archiving setup properly.

share|improve this answer
    
BTW, I have actually set this up, and used it in a couple places, it can be made to work. Using Google solution is probably much easier. –  Zoredache Sep 8 '10 at 22:35
    
I agree that this can be done, but not without the disadvantages you mentioned, particularly replacing part of Google's infrastructure (which is a primary reason to be there in the first place). Thanks for the specific pointers! –  gahooa Sep 10 '10 at 12:48
add comment

its possible now even within google apps control panel

http://www.gappsfix.com/how-you-can-access-your-users-email-without-knowing-their-password-in-google-apps/

share|improve this answer
1  
It is nice when you at least provide a summary of what the solution linked is. Links become dead. –  Falcon Momot Sep 17 '13 at 5:57
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.