Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

ENQ on box quranteen

Guys , we have two ironports , one mx 10 one mx20 , both are enable to quarantine spam on the box for end user to check , however now end users need to check on each system individually , what can I do to diverts all the spams from last mx to higher mx so everyone will check spam only on one box ..
Does anybody implemented these solution earlier ?
Appreciate your response .

4 REPLIES
Community Member

Re: ENQ on box quranteen

Hi,

There is a knowledge base arcticle for that. In a nutshell you want to do, if you are not clustered.

Only use one EUQ,
On the other IronPort instead of the default anti spam action you want to add a header to the messages X-IronPort-Quarantine value Yes and set the delivery host to the other system.

The other system with the EUQ needs to have this host in the relay group to make his email outbound.

All messages should end up in the one EUQ.
The KB article does this a bit different, but this should work as well

Cheers,

Mark

Community Member

Re: ENQ on box quranteen

Mark question why do we need to add him in relay group

Community Member

Re: ENQ on box quranteen

Mark , can you send me a link for KB article please ?

Community Member

Re: ENQ on box quranteen

Hi,

KB
http://tinyurl.com/f2qq2

Relay is just to not mess around with the reporting. Everything in the relay is considered outgoing and normally there is no spam scanning, so you don't waste resources on scanning.

You can also use a message filter to do skip spam scan for messages coming from the other IronPort.

bypassspam:
if (remote-ip == 'IP_of_other_Ironport')
{
skip-spamcheck();
}

-Mark

225
Views
0
Helpful
4
Replies
CreatePlease to create content