Menu

Mailbox Rules

Part of the Security Fundamentals section of Coddy's Cybersecurity journey. Lesson 33 of 43.

A mailbox rule tells an email account what to do with incoming messages automatically. For example, a rule might move newsletters into a folder. It can also forward a copy of each new email to another address.

Suppose you want to check Lee's rules. Run:

seclab rules lee

You should see:

n  rule         when                   does
1  Newsletters  subject has "News"     move to Reading
2  Receipts     subject has "Receipt"  forward to archive@outside.test (outside)

Rule 1 puts newsletters in a folder. Rule 2 sends copies of receipts to archive@outside.test, outside the company. If Lee did not approve that forwarding, delete rule 2:

seclab rule lee delete 2

You should see:

Deleted rule 2 ("Receipts") from lee's mailbox.

Keep the newsletter rule because it is part of Lee's normal work. A password reset does not delete mailbox rules, so unwanted forwarding needs to be removed separately. If you need to delete another rule, list the rules again first: their numbers change after a deletion.

challenge icon

Challenge

Easy

Ticket from Sam, IT lead

Invoices are still being emailed outside Lumen, even after the stolen passwords were replaced. Find the mailbox and forwarding rule created from the outside address. Stop new invoices leaving. Keep the owner's account active and keep their newsletter sorting rule.

Try it yourself

Terminal

All lessons in Security Fundamentals