Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Mail Search & Destroy Agent

Posted on 2005-03-29
Medium Priority
Last Modified: 2013-12-18
I need to create a database that will house a seek and destroy agent and its log. What I am looking for is an agent that can go out to every database on a server and perform the following tasks.

1) Find and report a specified message.
2) Delete that occurrence in every database and log them.

We are running Lotus Notes 5.0.13 on Windows 2000 Server. Basically what we are looking for is if a certain e-mail has gone out to a distribution list we need the ability to recall that message, deleting from everyone's Inbox. We have mail databases and mail-in databases that would need to be touched that reside on 3 different servers and are located in multiple directories. If we can get an agent that just does it on one server recursing all subdirectories in the data directory we can modify it to meet our needs across multiple servers. What we need is the code to look at databases in multiple locations and delete documents from them.

The reasoning behind this are the following scenarios:

1) Person sends out incorrect information to a large distribution and we need to retract it.
2) Automated Notification agent is incorrectly activated so we need to retract those e-mails.
3) Person spams company directory with large size e-mail and we want to retract it.
4) Dangerous email gets through firewall, spam & virus filter, and virus shield and we need to destroy it. (This one is a slim possibility but always the chance exists)

As I am green when it comes to actual scripting, I need some direction in this type of agent. I have not been able to find any example code either so I turn to the experts here.

Question by:Blackmoorian
LVL 20

Accepted Solution

brwwiggins earned 1050 total points
ID: 13657096
There's a 3rd party product called fetch. http://www.metaLogic-inc.com. Maybe interesting for you.

Author Comment

ID: 13657289
Thanks, but we are looking for an in-house solution as there is no budget available for this project other than man-hours.
LVL 19

Expert Comment

ID: 13660554
U have a huge requirement and I am sure none of the Experts here may help you.
You are asking for a Code, which may not be possible to provide. Its a huge task and may need lots of time to prepare logic and give some skeleton code.

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

LVL 46

Assisted Solution

by:Sjef Bosman
Sjef Bosman earned 450 total points
ID: 13661188
I tend to agree with Madheeswar: this is a major project indeed.

Some well-meant answers to your scenarios:
1) this person should be reprimanded or fired; programming against incompetence is a waste of time
2) see 1: test, test, and test again
3) large-seize e-mails can be blocks by simple means; see kSpam of OpenNTF.org
4) train you rpeople to recognize viruses and spam mails

Author Comment

ID: 13711384
So what you are saying is NO ONE has had a need to do something like this before? I was not expecting someone to write this from scratch, I was hoping someone had code they had previously used and was willing to share.

As far as responses to sjef bosman's answers to my scenarios:

1) Agreed - Unfortunately management doesn't (since they are our most frequent flyers - LOL)
2) For some reason when you make a change to a live agent that is to act upon new or modified documents. It looks at the change to the agent as "hey all documents are new for me since I am new or modified" for some reason. So we end up confusing our populus now and then when changes to live agents are necessary. Inconvenience to others is only downfall, would be nice to be able to retract note to save HelpDesk heartache. So testing won't help for this.
3) Would be great if we were to block all large e-mails. However we unfortunately have a business need for some large emails between a few of our groups. The need to pull unwanted large e-mails without blocking all is the solution we were looking for.
4) Like I said this is so infrequent it is almost not worth mentioning except for impact. We have only had this happen once. The virus had spoofed an address so the user actually thought they were opening up a business proposal from one of their clients. Twas a very tricky virus, I know I was impressed by the legitimate look of it. Of course this scenario in particular won't be happening again due to our filter that is now in place that eliminates spoofed addressing. However not everything is 100% efficient so possibility still exists. Therefore need to retract known harm would be nice.

I can understand the scope of this project and if no one has ever done anything like this, I will eventually figure it out, Thanks for everyone's time. Unfortunately I have to do this, luckily no ETA has been set in stone yet.

However if someone has already done this in the past/present any assistance or code would be appreciated.
LVL 46

Assisted Solution

by:Sjef Bosman
Sjef Bosman earned 450 total points
ID: 13715996
I don't think anybody felt the need to do what you're looking for. It looks like narrowing the likelihood of a virus on a system from 0.01% to 0.005%. Don't try to avoid everything, it's almost impossible and very ineffective. Let the anti-virus guys do that. Better stay focused on your business.

1) All the more reason to act!
2) I (almost) never have to change agents. That's mostly because the agent code itself only contains ONE call to a function that's in a Script library. And that library can be changed freely without recompiling the agent.
If "created or modified" is not specific enough, then don't use it. My agents all use a date-field in some profile document that contains its last run date and time. Anything created or modigfied after that date-field is then to be addressed by the agent.
3) you tried kSpam?
4) a good and regularly updated virusscanner is usually enough (I have AntiVir, www.antivir.de or www.free-av.com)

Author Comment

ID: 13940085
Would everyone agree that no solution was offered up for this request and as such this question should be deleted?

Or should this question be closed and the points split between all those that offered up alternate solutions. Please let me know which you feel would be the fair means to handle this question.

Thanks for all those that offered suggestions and I look forward to your responses regarding the disposition of this question.
LVL 46

Expert Comment

by:Sjef Bosman
ID: 13943304
Whether a solution was offered is up to you, isn't it? I suppose, by your last comment, our comments weren't quite to the point. Your problem isn't solved, are you still stuck or did you find some other way? If you really think NOTHING here helped you, then ask for a Refund in the Community Support TA. Otherwise reward those who you think offered the best info. Please don't give a C, then it's better to ask for the Refund.

I'm sorry I couldn't have been more helpful.


Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For Desktop Techs: How to retain a user's Notes configuration data when swapping out the end user's computer. (Assuming that you are not upgrading to a completely different version of Notes client) All you need to do is: 1) install Notes o…
IBM Notes offer Encryption feature using which the user can secure its NSF emails or entire database easily. In this section we will discuss about the process to Encrypt Incoming and Outgoing Mails in depth.
Loops Section Overview
Screencast - Getting to Know the Pipeline
Suggested Courses

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question