Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 17 replies
  • Subscribers 1 subscriber
  • Views 8673 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

False positive

most_ahdy
Dears,

      I have a strange problem that any mail send from only one internal specific mail address is reported as confirmed spam.
I have internal network with internal mail server with domain @something.com ,  and any mail sent by one specific mail aaa@something.com is reported as confirmed spam and this mail is quarantined by Astaro smtp proxy and when I release them they quarantined by Astaro pop3 proxy and I can not release them from mail manager.

please I need an explanation for this problem ASAP

Thanks,
Mostafa


This thread was automatically locked due to age.
Parents
  • 0
    Dear Bob,

          please find the below smtp log:
    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-Ek" size="29287" reason="as" extra="confirmed"

    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-EU" size="29287" reason="as" extra="confirmed"


    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-Ee" size="29287" reason="as" extra="confirmed"


    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-Eh" size="29287" reason="as" extra="confirmed"


    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-Eb" size="29287" reason="as" extra="confirmed"


    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-EY" size="29287" reason="as" extra="confirmed"

    and this some from pop3 proxy log
    2011:08:02-12:28:28 asg pop3proxy[12997]: id="1101" severity="info" sys="SecureMail" sub="pop3" name="email quarantined" from="" to="" subject="" size="40365" srcip="0.0.0.0" dstip="" uid="fM(%22!:IX%22!X8W%22!G#E!!" ident="0/12997-1-1312277308" reason="as" extra="confirmed"

    2011:08:02-13:36:08 asg pop3proxy[16989]: id="1101" severity="info" sys="SecureMail" sub="pop3" name="email quarantined" from"" to="" subject="" size="38852" srcip="0.0.0.0" dstip="" uid="7;@!!->'%22!Pca%22!FjD%22!" ident="0/16989-25-1312281368" reason="as" extra="confirmed"

    "Is the output in red make any sense to you??
    About the POP3 proxy ; if I have internal mail server and do not use any external mail server should I disable POP3 proxy?

    I did not make any changes recently, I think that the solution of exception will be accepted to me temporarily , BUT the most important is how to release the quarantined mail in POP3 proxy?
Reply
  • 0
    Dear Bob,

          please find the below smtp log:
    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-Ek" size="29287" reason="as" extra="confirmed"

    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-EU" size="29287" reason="as" extra="confirmed"


    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-Ee" size="29287" reason="as" extra="confirmed"


    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-Eh" size="29287" reason="as" extra="confirmed"


    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-Eb" size="29287" reason="as" extra="confirmed"


    2011:08:04-19:36:20 asg smtpd[22718]: SCANNER[22718]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="" from="" to="" subject="" queueid="1Qp0uC-0005uQ-EY" size="29287" reason="as" extra="confirmed"

    and this some from pop3 proxy log
    2011:08:02-12:28:28 asg pop3proxy[12997]: id="1101" severity="info" sys="SecureMail" sub="pop3" name="email quarantined" from="" to="" subject="" size="40365" srcip="0.0.0.0" dstip="" uid="fM(%22!:IX%22!X8W%22!G#E!!" ident="0/12997-1-1312277308" reason="as" extra="confirmed"

    2011:08:02-13:36:08 asg pop3proxy[16989]: id="1101" severity="info" sys="SecureMail" sub="pop3" name="email quarantined" from"" to="" subject="" size="38852" srcip="0.0.0.0" dstip="" uid="7;@!!->'%22!Pca%22!FjD%22!" ident="0/16989-25-1312281368" reason="as" extra="confirmed"

    "Is the output in red make any sense to you??
    About the POP3 proxy ; if I have internal mail server and do not use any external mail server should I disable POP3 proxy?

    I did not make any changes recently, I think that the solution of exception will be accepted to me temporarily , BUT the most important is how to release the quarantined mail in POP3 proxy?
Children
No Data
Cookie Information Banner