Question

  Asked: Jul 8 2008   1:01 PM GMT
  Asked by: RHS


How to disable mail forwarding to external email address


Lotus Notes 7.x, LotusScript

Hi. My users are setting up agents to export their mail to external emails. any ideas how to counter this while still allowing them to create "out-of-office" and "archive" agents?

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window

Answer Wiki (Improve, edit or add to this answer)


 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0



The easy answer would be to lower their access privileges to "Editor" ... that will prevent them from creating any agents - but SHOULD still allow them to use the built-in OOO and archiving features of the R7 mail template. (Granted, Notes gets a bit buggy about that.)

However, two additional (albeit conflicting) thoughts on this:

1. It sounds like you're trying to prevent users from automating an action that they are still allowed/enabled to do manually. This rarely makes sense. If they're not allowed to ever forward e-mail messages to their home/personal/external e-mail accounts, then you should be blocking such e-mail activity in other ways. But, if they're allowed to do it manually, then why do you care that they automate such activity. (It sounds to me like you have employees who are trying to be good employees and still cover their duties even when they're on vacation.)

2. Any such "mail sending" agents are EXTREMELY dangerous!!! It is very easy for a user to create an "infinite loop" in such situations. For example, if they write an agent that will forward all e-mail they receive and the e-mail account that they forward it to rejects it for any reason (or auto-reponds due to an OOO agent), this will create an infinite loop of the Notes mail DB receiving an incoming message, the agent forwards it externally, the external e-mail account responds, repeat, repeat, repeat. I once saw an agent like this create millions of e-mail messages in a matter of a couple of hours - ate up all available DASD on the server and brought the entire Notes server down!!! I recommend you notify all employees that all "mail sending agents" must be pre-approved by IT!!!

Here is another way that you would want to do to limit the forwarding ability.
You will also want to prevent users from creating rules that forward messages outside of the company. This can be done within the server configuration document. Go to the Router/SMTP tab, then Restrictions and Controls, then to Delivery Controls. Set the value for the field "User rules mail forwarding:" to "Disabled".
  • AddThis Social Bookmark Button

Browse more Questions and Answers on Lotus Domino.

Looking for relevant Lotus Domino Whitepapers? Visit the SearchDomino.com Research Library.


Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register

RHS  |   Jul 14 2008  7:03AM GMT

Hi RICHMON, thanks for your answer.

Our problem started with the new IT-Devil called iphone. Suddenly employees are rushing to move their whole world to the iphone (including corporate emails). We allow employees to use their judgment on what to forward and what not, but you can’t equate this to a mass forwarding rule!
Anyway, is there any way in Lotus Notes to actually achieve your last sentence in #2 (”all “mail sending agents” must be pre-approved by IT”)?

 

Broxy  |   Jul 14 2008  3:11PM GMT

Hi agree with Richmon but would add

I disagree about lowering mail access rights to less than Manager, its their mail file and they should be able to do whatever they want other than change the design. The caveat is of course that they must agree that if they break something that its their fault not yours. I would discourage them heavily from ever writing their own agents, this is very dangerous unless you know what you are doing and should never be necessary, if enough people need additional functionality then the IT dept should create it, test it and relaeas it to everybody.

It might be a better overall step to give them access to their mail on the web so they could view their emails on the iphone or whatever when out of the office rather than have to forward or auto-forward emails, you would probably only have to replicate the mail files of a relatively small number of users to the external server and this avoids issues of ‘I didn’t get your email’ or the dreaded planet that stores emails that were sent but never received which will inevitably happen with some of the forwarded emails.