This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to get more information in log with messages discrded for reason : keyword

To enhance appliance filter, i added a inbound policy to discard e-mails containing some keywords (for example viagra, replica...as some spam containing these words where classified as medium spam and put in quarantine !!!).

The problem is that i have some legitimate e-mails that are discarded by this rule. In the log, i just have the reason : Keyword, and the name of my rule. To fine tune my rule i would like to have in the log the corresponding word that made the rule activate.

How can i achieve this ?

This thread was automatically locked due to age.

Parents

0 JasonWong over 13 years ago

Hello,
What you can do with your policy rule is enable the enhanced policy options, this will enable the Additional Actions feature. When in the Additional Action section, click "Add", select from the dropdown box "Add a log entry". You can add a key/value pair. There are template variables that you can use. To see what you can use review this url.
http://sea.sophos.com/docs/esa/sea_docs/en/ESA/concepts/PolAboutActionsTempVars.html
-JasonW
:12995
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 JasonWong over 13 years ago

Hello,
What you can do with your policy rule is enable the enhanced policy options, this will enable the Additional Actions feature. When in the Additional Action section, click "Add", select from the dropdown box "Add a log entry". You can add a key/value pair. There are template variables that you can use. To see what you can use review this url.
http://sea.sophos.com/docs/esa/sea_docs/en/ESA/concepts/PolAboutActionsTempVars.html
-JasonW
:12995
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data