Spam Quarantine - Notifications

[Default0815]

Hi,
At this time we only mark potential spam messages.

Now we want to use the Spam Quarantine.
Is it possible to notify the recipient without connecting to a ldap service?

[Ken Stieers]

Yes.
When you enable the spam quarantine, there's a drop down with a selection of how you want to authenticate the users... including "none", mailbox (IMAP/POP) and LDAP
On the SMA you can also use SAML

[Default0815]

OK, Thank you.
We don't want to Enable End-User Quarantine Access.
We only want the spam notification to all recipients.
If we configure the Notification for all users, we must configure "Deliver Bounce Message To:"
But that will result in no one getting a notification, right?

We want to quarantine the spam messages and notify the original recipients.

Just like content/antivirus filter do.

[Default0815]

Probably the only option is to work with Header and Content filters.
So the user will be notified of each quarantined message.

[Ken Stieers · Accepted solution]

Its not clear to me where you're looking at "Deliver Bounce Message To:"...

As far as notification of all spam messages to the users, you're going to fill their mailbox with as much junk as the spammers if you send a notification on every message, defeating half the purpose of quarantining that mail. 

Here's what I'd do:

1. configure LDAP to get the Spam Quarantine Alias Consolidation Query... that way for people with multiple addresses, they only get one notification (e.g. for people that get married and change names.)

2. enable spam quarantine access, select ldap, but set the LDAP config for that to apply only to Admins who may release things for users.  Its just an LDAP filter.

3. configure the spam quarantine message as follows:

a. Quarantine access: uncheck Login without credentials

b. remove the line that mentions the %quarantine_url%

c. set message format to text

Now the users get mail, in a digest, with no links to the quarantine... 

---

[Chess Norris]

Anyone know the reason why we need to enable both end-user quarantine access and spam notification if we only want the users to get a notification? I asked TAC about it, but they didn't really had a good answer. 

We now use a custom header and a content filter with a notify action as workaround this but it's not ideal.

Thanks

/Chess

[Ken Stieers]

I don't have a "reason" other than this is typically done so that they can release their own stuff and take that load off of the Helpdesk/IT dept.
It seems weird to me to send a notification to a user "hey you got spam" every time they got spam...
What is in the notification you send to the user?

[Chess Norris]

The idea is to notify the customer that the message has been quarantined and they need to contact the helpdesk if they want to relase the message ic case of false possitve. I've already told my customer that there's a risk that their helpdesk might be getting lots of calls, but they dont want the users to have direct access to the quarantine. 

/Chess

[Default0815]

We do not use the spam quarantine.
We use an content filter to modify the subject of all spam mails, send them to a policy quarantine, and send a notification to the EnvelopeRecipients.

It is safer this way.