This also begs the question of who else he threatened via e-mail, which leads to my next piece of advice:Hi again, thanks for input.Seriously, talk to a lawyer. The police are constrained in what they can do on the basis of reliable evidence that they have, but a lawyer will tell you what alternatives you have yourself. You may have grounds to immediately terminate any commercial relationship with the individual in question. If someone is talking about violence, you don't want to be involved with them for six weeks. A lawyer will guide you towards reasonable precautions and away from imprudent responses.
This guy has until april 1 to change providers.
See, its complicated. This started with him sending threats of physical violence against me to me and others by email.
Your acceptable use policy should include the caveat that e-mail is not truly private and that the system administrator may (either accidentally or intentionally) be able to read your messages since they are sent in plain text.
Then you scour your logs to see what he's sending (and to whom.) If you leave the SMTP server logging on level 4 or 5 (Low Level or All Info, don't remember which) you should capture the entire SMTP transmission in the log, including the text of the mail.
Your copy of the threatening e-mail forwarded from the e-mail client software, and your matching log of the SMTP transmission (coming from his machine's IP address) will show the same message and should be forwarded to the officer who has your case.
If you're worried about your SMTP logs getting large this way, you're right to be. But you should be able to use AppleScript to copy the log file off to a network drive and then delete it from your mail server everyday at midnight.
This way you don't run into a "No customers can get e-mail because the mail server disk is full" (of huge log files) situation. THAT is annoying...
tom
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
