How to requeue emails or retrieve block emails in ORF? RSS Back to forum
Hello RadekK,
I am afraid there is no way to retrieve or re-queue the original emails if they had been processed by ORF already. If you want to make sure that your users receive legitimate emails intact, you should do the following:
1) Mark the 'Attachment Filtering Test' in the 'Whitelist Test Exceptions' dialog disabled (Filtering > Tests > Whitelist Test Exceptions > Configure button)
2) Enable the 'Auto Sender Whitelist' and assign it to both filtering points (Before Arrival & On Arrival). It will automatically whitelist the frequent correspondents of your clients.
3) Modify your 'Attachment Filtering' test settings to quarantine the removed attachments (Blacklists > Attachment Filtering > Settings > Quarantine tab).
4) Add trusted business partners to the 'Sender Whitelist' of ORF.
5) Use less strict attachment filtering policies and let your mail-enabled anti-virus catch infected attachments - if you do not have any, you should definitely get one. As a temporary solution you may set up ClamAV with ORF: https://vamsoft.com/support/docs/articles/using-clamav-with-ORF-part-1
Finally, on a somewhat related note, if you want to make sure that no blacklisted emails are lost, you should configure ORF to tag and redirect emails to specified mailbox or to the user's Junk E-Mail folder (see: https://vamsoft.com/support/docs/knowledge-base/faq-redirect-to-junk-folder) and assign each blacklist tests to the On Arrival filtering point - with the exception of Greylisting, which is Before Arrival-only test. I hope this helps.
For additional configuration tips, consult our Best Practices guide at https://vamsoft.com/support/docs/how-tos/best-practices-5.4.1
@Daniel Novak (Vamsoft):
Hi Daniel,
Thank you for your response. I am using an older version of the software and it seems that the feature for Quarantine is not available in this one.
I think this would do the trick.
Unless there is some magic way to do it.
@RadekK:
The Attachment Quarantine option was introduced with ORF v5.2 (see ORF Change Log: https://vamsoft.com/support/docs/orf-help/5.4.1/changelog). The first thing that came to my mind as a possible workaround was using the mail flow rules of Exchange to strip certain attachments, but after doing some research it turns out that there is no built-in quarantine in Exchange that could store the files. You may however specify a multitude of filtering actions, such as SCL scoring, redirection, adding disclaimers etc for such emails: https://technet.microsoft.com/en-us/library/jj674307(v=exchg.150).aspx
In any case, I think it is best if you configure the mail server's anti-virus to scan and quarantine malicious/unwanted attachments.
Hello there,
We setup the attachment blocking via ORF but from time to time customers will get the legit email with attachment that is being blocked. Is there a way to do some ad hoc way to retrieve this email with attachment or requeue it? For now we ask them to ask sender to resend it but it is impractical and takes time and customers are not happy about this.
Please advise.