Mailbox Rules
Part of the Security Fundamentals section of Coddy's Cybersecurity journey. Lesson 33 of 43.
A mailbox rule tells an email account what to do with incoming messages automatically. For example, a rule might move newsletters into a folder. It can also forward a copy of each new email to another address.
Suppose you want to check Lee's rules. Run:
seclab rules leeYou should see:
n rule when does
1 Newsletters subject has "News" move to Reading
2 Receipts subject has "Receipt" forward to archive@outside.test (outside)Rule 1 puts newsletters in a folder. Rule 2 sends copies of receipts to archive@outside.test, outside the company. If Lee did not approve that forwarding, delete rule 2:
seclab rule lee delete 2You should see:
Deleted rule 2 ("Receipts") from lee's mailbox.Keep the newsletter rule because it is part of Lee's normal work. A password reset does not delete mailbox rules, so unwanted forwarding needs to be removed separately. If you need to delete another rule, list the rules again first: their numbers change after a deletion.
Challenge
EasyTicket from Sam, IT lead
Invoices are still being emailed outside Lumen, even after the stolen passwords were replaced. Find the mailbox and forwarding rule created from the outside address. Stop new invoices leaving. Keep the owner's account active and keep their newsletter sorting rule.
Try it yourself