ENQ on box quranteen

denisp_ironport · ‎05-02-2007

Guys , we have two ironports , one mx 10 one mx20 , both are enable to quarantine spam on the box for end user to check , however now end users need to check on each system individually , what can I do to diverts all the spams from last mx to higher mx so everyone will check spam only on one box ..
Does anybody implemented these solution earlier ?
Appreciate your response .

Mark [CSE]_ironport · ‎05-03-2007

Hi,

There is a knowledge base arcticle for that. In a nutshell you want to do, if you are not clustered.

Only use one EUQ,
On the other IronPort instead of the default anti spam action you want to add a header to the messages X-IronPort-Quarantine value Yes and set the delivery host to the other system.

The other system with the EUQ needs to have this host in the relay group to make his email outbound.

All messages should end up in the one EUQ.
The KB article does this a bit different, but this should work as well

Cheers,

Mark

denisp_ironport · ‎05-03-2007

Mark question why do we need to add him in relay group

denisp_ironport · ‎05-03-2007

Mark , can you send me a link for KB article please ?

Mark [CSE]_ironport · ‎05-03-2007

Hi,

KB
http://tinyurl.com/f2qq2

Relay is just to not mess around with the reporting. Everything in the relay is considered outgoing and normally there is no spam scanning, so you don't waste resources on scanning.

You can also use a message filter to do skip spam scan for messages coming from the other IronPort.

bypassspam:
if (remote-ip == 'IP_of_other_Ironport')
{
skip-spamcheck();
}

-Mark