Quarantine Reports

General E.F.A. discussion
Post Reply
Archer
Posts: 27
Joined: 30 Oct 2014 13:38

Quarantine Reports

Post by Archer » 31 Oct 2014 18:32

Hello all, Newbie here.

I have read, searched, and etc. to find out about marking option to send daily Quarantine Reports as a default for all users. (Or at least all new users.)

Is there anyway to make this happen?

We are in the process of removing our old filer and moving to EFA. But our users are accustom to receiving daily emails. And they do not handle change well. :roll:

User avatar
shawniverson
Posts: 2611
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: Quarantine Reports

Post by shawniverson » 01 Nov 2014 18:14

How are you adding users to EFA?
Version 3.0.2.6 released! Update now to keep your eFa secure!

Archer
Posts: 27
Joined: 30 Oct 2014 13:38

Re: Quarantine Reports

Post by Archer » 01 Nov 2014 18:40

I have it bound to our AD servers, so if somme one logs in with ad creds it makes the account. I have thought about using the AD import tools to pull them all in at once. As of now I have not done either as I was trying to find this solution before making all accounts.

User avatar
shawniverson
Posts: 2611
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: Quarantine Reports

Post by shawniverson » 02 Nov 2014 23:46

Yeah, by default, the Send Daily Report is not checked for users.

Of course, you can go in and change the users, but if you have a lot of users, this is time consuming and very inefficient.

There's a few ways to accomplish this currently.

1) You can edit the /usr/local/bin/mailwatch/tools/Cron_jobs/quarantine_report.php as follows:

Original code

Code: Select all

    $users_sql = "
SELECT
 username,
 quarantine_rcpt,
 type
FROM
 users
WHERE
 quarantine_report=1
";
Edit as follows

Code: Select all

    $users_sql = "
SELECT
 username,
 quarantine_rcpt,
 type
FROM
 users
";
This will ignore the flag in MailWatch and send a quarantine report for all users. Note that updates to mailwatch will likely overwrite this change, so it will need to be changed again after an update.

2) Another way is to mass update the users table

Look in /etc/EFA-Config for the MAILWATCHSQLPWD

Code: Select all

mysql -u mailwatch --password=<MAILWATCHSQLPWD>  -e 'UPDATE users SET quarantine_report=1' mailscanner
3) You can also set the quarantine_report to default to 1 in the database

Code: Select all

mysql -u mailwatch --password=<MAILWATCHSQLPWD>  -e 'ALTER TABLE users ALTER COLUMN quarantine_report SET DEFAULT 1' mailscanner
Version 3.0.2.6 released! Update now to keep your eFa secure!

Archer
Posts: 27
Joined: 30 Oct 2014 13:38

Re: Quarantine Reports

Post by Archer » 03 Nov 2014 01:53

Cool. I will put that into use in the AM.

Thanks!!!

Archer
Posts: 27
Joined: 30 Oct 2014 13:38

Re: Quarantine Reports

Post by Archer » 03 Nov 2014 12:55

:dance: That was just too cool.....you just made my day!!!! :dance:

james27_84
Posts: 6
Joined: 03 Aug 2015 20:23

Re: Quarantine Reports

Post by james27_84 » 17 May 2016 15:06

This was working great until the latest version of EFA. Now all non spam email is listed in the quarantine report with the reason listed as "UNKNOWN" but when I check the users mailbox they were delivered successfully. Is there a way to stop non-quarantined emails from appearing on the daily quarantine report?

User avatar
shawniverson
Posts: 2611
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: Quarantine Reports

Post by shawniverson » 30 May 2016 12:40

Yes, check out the new settings in /var/www/html/mailscanner/conf.php.
Version 3.0.2.6 released! Update now to keep your eFa secure!

james27_84
Posts: 6
Joined: 03 Aug 2015 20:23

Re: Quarantine Reports

Post by james27_84 » 06 Sep 2018 21:24

Hello All,

Just had to set up a new EFA appliance. Noticed that on the latest version these steps are no longer relevant. Can anyone tell me how to go about turning on quarantine reports for all users in the latest version.

Thanks!

User avatar
shawniverson
Posts: 2611
Joined: 13 Jan 2014 23:30
Location: Rushville, Indiana, USA
Contact:

Re: Quarantine Reports

Post by shawniverson » 08 Sep 2018 19:25

The sql method should still be valid.
Version 3.0.2.6 released! Update now to keep your eFa secure!

james27_84
Posts: 6
Joined: 03 Aug 2015 20:23

Re: Quarantine Reports

Post by james27_84 » 10 Sep 2018 21:29

Thanks shawniverson, you are correct. I tried it and tested today. Thank you for your help!

Post Reply