The legal intercept feature makes copies of email messages that are sent, received, or saved as drafts from targeted accounts and sends these messages to a designated “shadow” email address.
Legal Intercept can be configured to send the complete content of the message or to send only the header information. When a targeted account sends, receives, or saves a draft message, an intercept message is automatically created to forward copies of the messages as attachments to the specified email address.
The legal intercept feature can be configured either for a Class of Service
or for individual accounts. The feature is configured from the CLI, using
zmprov
.
The only required configuration to set up legal intercept is to enable the
feature — zimbraInterceptAddress
— on target accounts or COS.
You can enable the attribute zimbraInterceptSendHeadersOnly to send only the header information of the email message instead of sending the complete message.
Specify the intercept address where the intercepted messages are sent.
-
If enabling intercept by COS:
zmprov mc <cosname> zimbraInterceptAddress <account@intercept_example.gov>
-
If enabling intercept for an account:
zmprov ma <[email protected]> zimbraInterceptAddress <account@intercept_example.gov>
If you are going to use the default intercept message template and From address (postmaster@<youraddress.com>), legal intercept is set up.
To forward the header information, not the complete message for an account:
zmprov mc <[email protected]> zimbraInterceptSendHeadersOnly TRUE
An email message is automatically created to forward copies of the intercepted messages as attachments. The default message includes:
-
From address is Postmaster@<address.com>
-
Subject line “Intercept message for <[email protected] <interceptedmessage subject>”
-
Message “Intercept message for <[email protected]>.Operation=<type of message>, folder=<foldername>, folder ID=<#>”.
The cover email message can be modified. Use the following parameters to modify the email message.
ACCOUNT_DOMAIN |
Domain of the account being intercepted. |
ACCOUNT_ADDRESS |
Address being intercepted |
MESSAGE_SUBJECT |
Subject of the message being intercepted. |
OPERATION |
Operation that the user is performing, “add message”, “send message”, or “save draft”. |
FOLDER_NAME |
Name of the folder to which the message was saved. |
FOLDER_ID |
ID of the folder to which the message was saved. |
NEWLINE |
Used for formatting multi-line message bodies. |
Use steps in this section to change the from name, the subject line, or text in the message body:
-
To change the From name:
zmprov mc <[email protected]> zimbraInterceptFrom <[email protected]>
-
To change the text of the Subject line:
zmprov mc <[email protected]> zimbraInterceptSubject <Intercepted message subject text> parameter <text> parameter
-
To change the text in the message body:
zmprov mc <[email protected]> zimbraInterceptBody <Intercepted message text> parameter <text> parameter
Note
|
To modify by account, type zmprov ma .
|
You can create a query for the user’s mailbox using the REST URL format to search for specific types of email messages and attachments and have these messages zipped and saved to your computer. This zip file can be forwarded to a requesting law enforcement agency.
Email message is displayed as an .eml file name after the subject line. The attachments are saved in the format that they were delivered.
You must be logged into the {product-abbrev} Administration Console to create the zip file. You create a query for one account at a time.
-
In the Administration Console address field of the browser, after 7071/, type:
home/<username>?fmt=zip&query=<searchquerystring>
For example:
In the above example, the search query is requesting a zip file of all email messages and attachments in the Inbox after June 13, 2008 for an account called user1.
You can use any search operators that are used for searching in {product-abbrev}. For example, you can search by folder (in:folder_name), by sender’s name (from:<someone>), and you can use multiple search terms. See the Search Tips wiki page for keyword examples, https://wiki.zimbra.com/wiki/Search_Tips.
-
Press Enter or the arrow to create the zip. A Confirm box displays, asking if you want to navigate away from this page.
-
Click OK.
-
Choose where you want to save the zip file. This zip file is ready to be delivered.