Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 2275 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Who releases that mail from quarantine?

hagman_01
Hi all, 
is there any place in the logs where I can see who released a specific mail that was originally quarantined? The situation I am facing is this:
[LIST=1]
  • A mail arrived with receiver somegroup@mydomain and was (correctly) quarantined by UTM
  •  A quarantine report was sent from UTM to somegroup@mydomain, so my Exchange server forwarded it to groupmember1, groupmember2, etc.
  •  Apparently someone in the group clicked the release link in their quarantine mail
  •  Due to the release, UTM released the mail to somegroup@mydomain, so my Exchange server forwarded it to groupmember1, groupmember2, etc.
[/LIST]

My problem is that I'd like to prove point 3.

Thanks
Hagen


This thread was automatically locked due to age.
  • 0
    Hagen, I think you're out of luck for the past.  Going forward, add the group address to 'Mailing list address patterns' on the 'Exceptions' tab of 'Quarantine Report'.
    In Mailing list address patterns, define which internal email address patterns are distribution lists. When a user wants to release a message to a recipient which matches one of these patterns, he is asked for an alternate address where to deliver it to. This avoids releasing messages to the whole mailing list. Messages to mailing lists can also be released several times.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML