[SOLVED] finding an email classified as spam

[bflood2000]

Realatively new to Zimbra, have a user who got a email from Zimbra server that an email was classified as Virus. User is certain the attachment is not Virus.

Is there a way to find this email on the server and have it sent to the user. I guess I'm asking if the ClamAV has a quarantine area , where it's at and how an admin could find and forward it.

Running ZCO latest 6.08(?) on Unbuntu 8.06.

[phoenix]

Originally Posted by bflood2000

Realatively new to Zimbra, have a user who got a email from Zimbra server that an email was classified as spam. User is certain the attachment is not spam.

Do you mean he received a notification that a message contained a virus (no notifications are sent about spam)?

Originally Posted by bflood2000

Is there a way to find this email on the server and have it sent to the user. I guess I'm asking if the ClamAV has a quarantine area , where it's at and how an admin could find and forward it.

If it really was a spam email then it would either be in the Junk (if it was a possible spam) folder or it would have been removed if it failed the spam tests.

If it's the Virus notification they received then look at the following threads for details on how to release it.

[bflood2000]

Yes it was a Virus notice. I will look at the link and see if that helps. Thanks

[bflood2000]

wow that is the solution that needs a WHOLE lot more explanation. It appears that the Zimbra amavis quarantines email but that amavis-release is not included in the Zimbra install, so short of doing a whole bunch of steps that I have no clue how to do there is NO way currently to get quarantined email out of Zimbra. I see the bug enhancement request but it appears nothing has been done about that. Major short coming Network Zimbra.

I guess I will start posting questions about how to do each step below.
0. Make sure you've turned off the encrypted mail check for the anti virus.
1. Find the specific file you want to recover
2. Run formail on the file, and convert it to mbox.
3. View the message as root using mutt/pine/elm and save the attachment to your shell on the server.
4. Download the file to your computer.
5. Email the file to the intended recipient.

6. When the recipient gets the message, he'll get the message with the subject saying UNCHECKED .. but the zip file is indeed there.

[uxbod]

[SOLVED] Releasing quarantined emails

[bflood2000]

Thank you
zmlmtpinject worked as described.
Any Admin extension available for this?
Thanks again