In this case, the quota calculation was correct, but the user did
not receive 15,000 new messages in a month. The culprit was Outlook+ZCO+McAfee.
McAfee correctly detected a 170K message dated March 2002 as a trojan.
McAfee told Outlook to move that message to the /Quarantine folder.
The copy to /Quarantine succeeded.
The removal appears to have failed.
Repeat 14,602 times. :-(
ZCS 5.0.15; Outlook 2007 (no SP2); ZimbraConnectorForOutlook/5.0.2990.16.
What doesn't make sense is why the message originally dated March 14, 2002 and moved to /Quarantine on May 27, 2009 got a Zimbra Received date of June 18, 2007.
Code:
mbox user@example.edu> gf -v /Quarantine
{
"children": [],
"color": "defaultColor",
"grants": [],
"id": "44397",
"messageCount": 14602,
"name": "Quarantine",
"parentId": "1",
"path": "/Quarantine",
"unreadCount": 0,
"view": "conversation"
}
mbox user@example.edu> search -t message in:Quarantine
num: 25, more: true
Id Type From Subject Date
------ ---- -------------------- -------------------------------------------------- --------------
1. 174861 mess D Julie- is this a virus? - Thanks, Doug 06/18/07 17:39
2. 174860 mess D Julie- is this a virus? - Thanks, Doug 06/18/07 17:39
3. 174859 mess D Julie- is this a virus? - Thanks, Doug 06/18/07 17:39
4. 174858 mess D Julie- is this a virus? - Thanks, Doug 06/18/07 17:39
2009-05-27 09:33:37,201 INFO [btpool0-34690] [name=user@example.edu;mid=57;ip=137.22.2.218;ua=ZimbraConnectorForOutlook/5.0.2990.16;] mailop - Adding Message: id=160462, MessageID=<05d601c9ded8$1d83d110$588b7330$@edu>, parentId=-1, folderId=44397, folderName=Quarantine.