Like every company, we have to care about email archiving. We use an archiving software on a separate server, that polls mail from two special Mercury accounts, "archiveincoming" and "archiveoutgoing" via POP3.
On the Mercury side, I defined two rules (Configuration / Filtering rules / Global rules) as the very first rules of my ruleset. The first one copies every mail with a FROM header containing @mycompany.de to the "archiveoutgoing" account. The second one copies every mail with a TO header containing @mycompany.de to the "archiveincoming" account.
However, I also have spamhalter running. In Configuration / Content control, I have a testing set so that any message tagged by Spamhalter shall be "forwarded and then deleted" to a separate account spambox@mycompany.de
After years of fine operation, I found that obviously the "Content control" is processed before the "Filtering rules", so none of the spam mails ever went to the archives.
Normally no problem, but there are sometimes false positives, that also should be archived.
Also, all internal traffic is archived this way, what I don't need to.
Is there any way to copy out all (external only) traffic before the Content control happens?