ā11-23-2021 06:05 PM - edited ā11-23-2021 08:50 PM
Hi,
I have config a content filter that for some condition, the X-IronPort-Quarantine will be add to header, so the email will send to spam quarantine, however, if a user add those sender email to the spam quarantine safelist, it sill quarantine instead of send to user inbox. is there any ways to workaround ?
ā11-23-2021 09:31 PM
Hi,
You can bypass header value from massage filter.
If user think that mail coming from same domain. And think that it contains trustworthy mails, than he can add the header of that mail to the message filter and bypass spam check for executing the same.
ā11-23-2021 10:26 PM - edited ā11-23-2021 10:27 PM
thanks for your reply AshokJat, however, how can end user(inbox user) add message filter?
ā02-14-2022 07:48 AM
I have this same issue. Did you ever figure out how to solve this?
ā02-14-2022 06:06 PM
no idea yet
ā02-15-2022 04:09 AM
I opened a TAC case to ask this question. It's not the answer we were hoping for. Here is their response:
The mail passes through the anti-spam engine with the sender marked in the safe-list. Then the mail will pass through the remaining further engines in the incoming mail policy. Since the mail is tagged with the X-IronPort tag, in the later coming content filter it will be sent to quarantine . The X-IronPort Tag has nothing to do with the SAFE-LIST. The X-ironport Tag is the real culprit behind it. Removing the TAG itself would be the only way , so the mail can go without a problem.
ā02-18-2022 11:52 AM
Would you not be able to add in the following within the filter?
If header does or does not exist:
header("X-SLBL-Result") != "^SAFE-LISTED$"
ā02-18-2022 01:25 PM
Chris, Good call! I think that will work I already check X-Ironport-Case-Suspect and X-Ironport-Case-Graymail before I add X-IronPort-Quarantine, so I'll just add X-SLBL-Result to the conditions. Thank you!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide