Conditional always_bcc only for outgoing messages

Sometimes there is a need to clone all outgoing or incoming message traffic and forward it to a specific mailbox. When using Postfix the always_bcc configuration parameter can be used.

The Postfix solution has pros and cons; as the name says, it will add a BCC recipient to ALL emails without exception, you cannot specify certain mailboxes or monitor only outgoing messages. It will even match bounce messages.

If you need to add a blind carbon copy per domain or skip a specific e-mail address you need to use a third party milter. With MSH Traffic Policy automatic bcc based on rules is easier than you think.

For our example I will assume that our internal domain is domain.net. This will let us to create a rule which will behave like conditional always_bcc functionality.

Create a new rule and begin with Add Envelope Recipient action. This will work as “add bcc recipient” because we will not add BCC header to message, so it will only have envelope recipient, which is not visible to the end recipient.

Provide email address for mailbox to which you want to forward all messages.

Next you need conditions which will match messages. On Conditions tab select from Add button Message Sender condition.

For our scenario we assume that we want to add BCC recipient to all outgoing messages.

Use name of your domain, so to each message which will have sender from domain.net BCC will be added (with boss@domain.net email address with our example).

Good idea is to exclude email address which receive all messages, so on Exceptions tab add Message Sender exception and provide boss@domain.net address.

On the Name page provide a name for your rule, i.e. always_bcc, and click the OK button.

Save All settings on main application window.

With MSH Traffic Policy, you can create many sophisticated rules which will match any messages you want: with certain attachments, specific subject or message size.

To learn more visit MSH Traffic Policy website.