Reporting on releases from the EUQ

Unanswered Question
Apr 15th, 2009

I have a requirement to quarantine a mail with a particular extension. Inbound is to be be user managed so the Spam Quarantine is the only location for it. Is there any way I can mark the mail so that it is logged if the recipient releases it. I know in the "euq_logs" I can get a username and MID # but this would be unworkable trying to manually link MIDs to their Subjects.
Simple quarantining+releasing is working but its the reporting I'm after.
Outbound will be dealt with by Helpdesk on request.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
kyerramr Wed, 04/15/2009 - 22:14

Here is one option:

Requires M-series or centralized quarantine if you have multiple C-series

If you have an M-series being used to quarantine messages. If a message is released by a user, it needs to go through one of your C-series appliance. On the C-series you could create a filter to check if the connecting IP is your M-series then just set any action deliver, tag with some header.

This way, you could pull out a report based on content filters.

Hope this helps!

smacloug_ironport Fri, 04/17/2009 - 16:47

Thanks for that. Unfortunately the M series is in the future so this solution is currently possile for me.



This Discussion