Quarantine Reports

General eFa discussion
Post Reply
Archer
Posts: 27
Joined: 30 Oct 2014 13:38

Quarantine Reports

Post by Archer »

Hello all, Newbie here.

I have read, searched, and etc. to find out about marking option to send daily Quarantine Reports as a default for all users. (Or at least all new users.)

Is there anyway to make this happen?

We are in the process of removing our old filer and moving to EFA. But our users are accustom to receiving daily emails. And they do not handle change well. :roll:
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Quarantine Reports

Post by shawniverson »

How are you adding users to EFA?
Archer
Posts: 27
Joined: 30 Oct 2014 13:38

Re: Quarantine Reports

Post by Archer »

I have it bound to our AD servers, so if somme one logs in with ad creds it makes the account. I have thought about using the AD import tools to pull them all in at once. As of now I have not done either as I was trying to find this solution before making all accounts.
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Quarantine Reports

Post by shawniverson »

Yeah, by default, the Send Daily Report is not checked for users.

Of course, you can go in and change the users, but if you have a lot of users, this is time consuming and very inefficient.

There's a few ways to accomplish this currently.

1) You can edit the /usr/local/bin/mailwatch/tools/Cron_jobs/quarantine_report.php as follows:

Original code

Code: Select all

    $users_sql = "
SELECT
 username,
 quarantine_rcpt,
 type
FROM
 users
WHERE
 quarantine_report=1
";
Edit as follows

Code: Select all

    $users_sql = "
SELECT
 username,
 quarantine_rcpt,
 type
FROM
 users
";
This will ignore the flag in MailWatch and send a quarantine report for all users. Note that updates to mailwatch will likely overwrite this change, so it will need to be changed again after an update.

2) Another way is to mass update the users table

Look in /etc/EFA-Config for the MAILWATCHSQLPWD

Code: Select all

mysql -u mailwatch --password=<MAILWATCHSQLPWD>  -e 'UPDATE users SET quarantine_report=1' mailscanner
3) You can also set the quarantine_report to default to 1 in the database

Code: Select all

mysql -u mailwatch --password=<MAILWATCHSQLPWD>  -e 'ALTER TABLE users ALTER COLUMN quarantine_report SET DEFAULT 1' mailscanner
Archer
Posts: 27
Joined: 30 Oct 2014 13:38

Re: Quarantine Reports

Post by Archer »

Cool. I will put that into use in the AM.

Thanks!!!
Archer
Posts: 27
Joined: 30 Oct 2014 13:38

Re: Quarantine Reports

Post by Archer »

:dance: That was just too cool.....you just made my day!!!! :dance:
james27_84
Posts: 6
Joined: 03 Aug 2015 20:23

Re: Quarantine Reports

Post by james27_84 »

This was working great until the latest version of EFA. Now all non spam email is listed in the quarantine report with the reason listed as "UNKNOWN" but when I check the users mailbox they were delivered successfully. Is there a way to stop non-quarantined emails from appearing on the daily quarantine report?
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Quarantine Reports

Post by shawniverson »

Yes, check out the new settings in /var/www/html/mailscanner/conf.php.
james27_84
Posts: 6
Joined: 03 Aug 2015 20:23

Re: Quarantine Reports

Post by james27_84 »

Hello All,

Just had to set up a new EFA appliance. Noticed that on the latest version these steps are no longer relevant. Can anyone tell me how to go about turning on quarantine reports for all users in the latest version.

Thanks!
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Quarantine Reports

Post by shawniverson »

The sql method should still be valid.
james27_84
Posts: 6
Joined: 03 Aug 2015 20:23

Re: Quarantine Reports

Post by james27_84 »

Thanks shawniverson, you are correct. I tried it and tested today. Thank you for your help!
Post Reply