Results 1 to 5 of 5

Thread: Quarantine digests

  1. #1
    jgoldschrafe is offline Starter Member
    Join Date
    Feb 2008
    Posts
    2
    Rep Power
    7

    Default Quarantine digests

    I keep getting this crap probably 80 times a day:

    VIRUS ALERT

    Our content checker found
    virus: Trojan.Agent-49495

    in an email to you from unknown sender:
    ?@[88.236.150.97]
    claiming to be: <dlebenson@pocanticohills.org>

    Content type: Virus
    Our internal reference code for your message is 21755-08/TSwMotRON67q

    First upstream SMTP client IP address: [88.236.150.97] unknown
    According to a 'Received:' trace, the message originated at: [88.236.150.97],
    [88.236.150.97] (unknown [88.236.150.97])

    Return-Path: <dlebenson@pocanticohills.org>
    User-Agent: Thunderbird 2.0.0.12 (Windows/20080213)
    Message-ID: <93945.sarah@moon-jun>
    Subject: You have received an eCard
    The message has been quarantined as: virus-TSwMotRON67q

    Please contact your system administrator for details.
    This sort of defeats the purpose of me having a spam filtering MTA in the first place. Is there anything I can turn on to get quarantine digests once a day?

  2. #2
    lcxe is offline Active Member
    Join Date
    May 2008
    Posts
    34
    Rep Power
    7

    Default

    I think the easiest thing you could do it just create a mail filter and have everything containing "VIRUS" in the subject line filtered into a folder.

  3. #3
    jgoldschrafe is offline Starter Member
    Join Date
    Feb 2008
    Posts
    2
    Rep Power
    7

    Default

    Quote Originally Posted by lcxe View Post
    I think the easiest thing you could do it just create a mail filter and have everything containing "VIRUS" in the subject line filtered into a folder.
    Me and each of my users, individually.

    That makes this not an attractive option.

  4. #4
    Rich Graves is offline Outstanding Member
    Join Date
    Jan 2007
    Location
    Minnesota
    Posts
    719
    Rep Power
    9

    Default

    In the admin console (https://server:7071/) go to Global Settings => AS/AV and uncheck "Send notification to recipient."

    The default is *not* checked. You or some other admin must have changed it.

    Notifications will still go to admin@server.

  5. #5
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    There's actually several attributes when it comes to notifying the admin:
    zimbraVirusWarnAdmin: TRUE
    zimbraVirusWarnRecipient: TRUE
    av_notify_user = admin@server.domain.com
    smtp_destination = admin@server.domain.com
    smtp_source = admin@server.domain.com
    zimbraBackupReportEmailRecipients: admin@server.domain.com
    zimbraBackupReportEmailSender: admin@server.domain.com

    jgoldschrafe you can disable this for just users, just admin address, or both:
    Code:
    su - zimbra
    zmprov mcf zimbraVirusWarnRecipient FALSE
    zmprov mcf zimbraVirusWarnAdmin FALSE

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Quarantine Administration
    By tgx in forum Administrators
    Replies: 3
    Last Post: 09-16-2008, 04:19 PM
  2. Blank listserver digests
    By atlee in forum Administrators
    Replies: 1
    Last Post: 04-03-2008, 03:34 PM
  3. Maintain quarantine
    By rajeshkodali in forum Administrators
    Replies: 0
    Last Post: 02-08-2008, 03:02 AM
  4. Messages released from Barracuda quarantine won't show up
    By meltingrobot in forum Administrators
    Replies: 1
    Last Post: 12-04-2006, 01:39 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •