is the monitoring of internal email traffic a form of attack?