How do I give an AD-synced user account the ability to manage the quarantine for a mailing list?

Matthew, it is possible to create a cron job that adds an address back in.  You should check with Sophos Support for approval before you do it though.  Schedule it to run a few minutes after your Prefetch runs.

Assuming the user is jsmith, you can get the REF_ of the User object with:

cc get_object_by_name jsmith

Assuming we find REF_AaaUseJsmith, add the following line to /etc/crontab-static (where you want the command to run at 05:10 every day):

10 5 * * * root confd-client.plx change_object REF_AaaUseJsmith email_secondary 'maillist@domain.com'

To get that line added to /etc/crontab, go to 'Management >> Up2Date' 'Configuration' and change one of the Intervals, [Apply] and then change it back, [Apply].

Again, you will want to get explicit approval from Support for this.

Cheers - Bob

Thanks, Bob! That's an interesting way to approach the problem. I may give this a shot.

BAlfson said:

Assuming we find REF_AaaUseJsmith, add the following line to /etc/crontab-static (where you want the command to run at 05:10 every day):

10 5 * * * root confd-client.plx change_object REF_AaaUseJsmith email_secondary 'maillist@domain.com' 

Quick question, Bob. What does this line look like if I need to add multiple secondary addresses?

Thanks!

If you have more than two, you might want to run several jobs at one minute intervals:

10 5 * * * root confd-client.plx change_object REF_AaaUseJsmith email_secondary 'maillist@domain.com' && confd-client.plx change_object REF_AaaUseJsmith email_secondary 'otherlist@domain.com'

Cheers - Bob

Thanks, Bob. Unfortunately, Sophos has refused my request to go this route.

I'm trying a different approach:

1. Create a local UTM account, called list.manager@mydomain.com. Populate the alternate email addresses of this account with my distro lists, making this account a "mail manager".
2. Create an Exchange account (disabled to prevent account logon) for list.manager@mydomain.com, in an OU that will not be synchronized with UTM. (Having an account in AD allows recipient verification to work properly.)
3. Create a transport rule in Exchange that redirects quarantine notifications for list.manager@mydomain.com to the real person who should manage these lists. (A simple "forward" would work as well.)

This is not as flexible as I would like, but it should work for us.

Thanks, Bob. Unfortunately, Sophos has refused my request to go this route.

I'm trying a different approach:

1. Create a local UTM account, called list.manager@mydomain.com. Populate the alternate email addresses of this account with my distro lists, making this account a "mail manager".
2. Create an Exchange account (disabled to prevent account logon) for list.manager@mydomain.com, in an OU that will not be synchronized with UTM. (Having an account in AD allows recipient verification to work properly.)
3. Create a transport rule in Exchange that redirects quarantine notifications for list.manager@mydomain.com to the real person who should manage these lists. (A simple "forward" would work as well.)

This is not as flexible as I would like, but it should work for us.