Newsgroups: comp.mail.misc
Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!caen!ox.com!math.fu-berlin.de!grasp1!wolf
From: wolf@grasp1.univ-lyon1.fr (Christophe Wolfhugel)
Subject: Summary: Spy mail
Message-ID: <1991Apr15.161643.5558@grasp1.univ-lyon1.fr>
Date: Mon, 15 Apr 1991 16:16:43 GMT
References: <1991Apr14.103458.15364@grasp1.univ-lyon1.fr>
Organization: INSA Departement Informatique, Lyon, France

Thanks for all input a received to my query. As it may be of general 
interest for system administrators, I post a summary of the received
answers:

First one important point that I forgot:

|From: rickert@cs.niu.edu (Neil Rickert)
|Then there is the problem of whether you can be 'caught' if the sender of
|the message adds a 'Return-Receipt-To:' header, or if the local sender just
|does an occasional 'mailq' or 'sendmail -bp' or routinely uses 
|the '-v' (verbose) option to monitor his outgoing mail.

Based on local user (ie incoming mail).

|From: karl.kleinpaste@osc.edu
|In S0 of sendmail.cf, just before whatever rule it is that detects
|local delivery and invokes the $#local mailer, add a rule which
|notices that user specifically, and sends to both that user and
|yourself:
|Rbaduser<@$D>           $#local $:baduser wolf

I tried this, only on the SysV but it seems that the local mailer only
accepts one argument.
It seems to be equivalent to an alias:
baduser: baduser,spy

|From: ken@csis.dit.csiro.au
|fred: \fred,"|/usr/adm/bin/checkfornaughtymail"

(same as above except that a clever script does mail filtering for the spy).

-- 
Christophe Wolfhugel (on irc: Zolf)  |  Email: wolf@grasp1.univ-lyon1.fr
INSA Lyon - Departement Informatique |  "Ecole publique, ecole fauchee. Encore"
69621 Villeurbanne Cedex             |  "une tradition francaise dont on se"
France                               |  "passerait bien."