Message data availability

[Beheer tno-netwerk]

What happens to ESA Message Data and mail marked for the quarantine  when using an Content Security management Appliance and

this SMA goes temporary down.

Will this data stay on the ESA until the SMA returned and automatically send to the SMA after its returned.?

Thanks for your response

[dmccabej]

Hello,

The messages pending delivery to the SMA quarantine/s will be stuck in the delivery queue on the ESA until the SMA is back online. You can view any pending messages using the 'tophosts' command on the ESA from the CLI. Anything marked with an * will be an unreachable host. You can also view more specific details on each host by using the 'hoststatus' command. (IE: hoststatus --> the.cpq.host)

the.cpq.host = PVO Quarantines

the.euq.queue = Spam Quarantine

Thanks!

-Dennis M.

test.lab.local> tophosts

Sort results by:

1. Active Recipients
2. Connections Out
3. Delivered Recipients
4. Hard Bounced Recipients
5. Soft Bounced Events
[1]>

Status as of: Mon Nov 14 15:01:32 2016 EST
Hosts marked with '*' were down as of the last delivery attempt.

Active Conn. Deliv. Soft Hard
# Recipient Host Recip. Out Recip. Bounced Bounced

1* the.cpq.host 14 0 7 0 0
2* the.euq.queue 11 0 9 0 0

test.lab.local> hoststatus

Recipient host:
[]> the.cpq.host

Host mail status for: 'the.cpq.host'
Status as of: Mon Nov 14 15:07:19 2016 EST
Host up/down: up

Counters:
Queue
Soft Bounced Events 0
Completion
Completed Recipients 21
Hard Bounced Recipients 0
DNS Hard Bounces 0
5XX Hard Bounces 0
Filter Hard Bounces 0
Expired Hard Bounces 0
Other Hard Bounces 0
Delivered Recipients 21
Deleted Recipients 0

Gauges:
Queue
Active Recipients 0
Unattempted Recipients 0
Attempted Recipients 0
Connections
Current Outbound Connections 0
Pending Outbound Connections 0

Oldest Message No Messages
Last Activity Mon Nov 14 15:01:53 2016 EST
SMTP routes for this host:
/dev/null
Ordered IP addresses: (expiring at Mon Oct 03 13:46:02 2016 EDT)
Preference IPs
X.X.X.X:7025

[Beheer tno-netwerk]

HI ,

thanks for your answer.

Will also Message tracking data be collected on the ESA and forwarded to the MSA after it has been come available again.

Thanks for your response.

[dmccabej]

Hello,

You're very welcome :)

Message Tracking will be stored on the ESA/s for up to 3 hours by default and Reporting up to 24 hours if the SMA is unreachable. If beyond that point then the data is removed and overwritten with new logs.

You can use the commands below in order to modify those default values if needed.

Thanks!

-Dennis M.

test.lab.local> trackingconfig

Message Tracking service status: Message Tracking is enabled.

Choose the operation you want to perform:
- SETUP - Enable Message Tracking for this appliance.
[]> storage

While in centralized mode the C-series will store tracking data for the
M-series to collect. If the M-series does not collect that data then
eventually the C-series will begin to overwrite the oldest data with new
data.
A maximum of 60 files are presently stored. This means a maximum of 3 hours will be stored, though depending on load that time may be smaller.
How many files should be stored before data loss?
[60]>

test.lab.local> reportingconfig

Reporting service status: local and Centralized Reporting enabled.

Choose the operation you want to perform:
- SETUP - Enable centralized or local reporting for this appliance.
[]> mailsetup

SenderBase timeout used by the web interface: 5 seconds
Sender Reputation Multiplier: 3
The current level of reporting data recording is: unlimited
No custom second level domains are defined.
Legacy mailflow report: Disabled

Choose the operation you want to perform:
- SENDERBASE - Configure SenderBase timeout for the web interface.
- MULTIPLIER - Configure Sender Reputation Multiplier.
- COUNTERS - Limit counters recorded by the reporting system.
- THROTTLING - Limit unique hosts tracked for rejected connection reporting.
- TLD - Add customer specific domains for reporting rollup.
- STORAGE - How long centralized reporting data will be stored on the C-series before being overwritten.
- LEGACY - Configure legacy mailflow report.
[]> storage

While in centralized mode the C-series will store reporting data for the
M-series to collect. If the M-series does not collect that data then
eventually the C-series will begin to overwrite the oldest data with
new data.
A maximum of 24 hours of reporting data will be stored.
How many hours of reporting data should be stored before data loss?
[24]>

[Beheer tno-netwerk]

many Thanks , Dennis.

[dmccabej]

You're welcome! Feel free to rate and mark as correct if you've found my answers helpful. I'm glad I was able to assist. :)

Thanks!

-Dennis M.