Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Messages do not appear in quarantine.

Created: 25 Mar 2013 | 6 comments
arthursantana's picture

Hi,

Some emails are not showing up in my quarantine, they appear to have been quarantined in the "Message Audit Logs" but are not listed in quarantine, below is my current log:

2013 Mar 25 08:11:16 BRT (err) ecelerity: [2277] sieve: /data/mta/etc/recipient_validation.siv:96 sms_dds_is_valid: DDS call failed.
2013-03-25T07:56:14-03:00 (ERROR:31566.2756295568): [57007] Gatekeeper module: Failure evaluating dictionary rules.
2013-03-25T07:56:14-03:00 (ERROR:31566.2756295568): [57009] Gatekeeper module: Failed to apply rules for attachment dictionary scanning.
2013-03-25T07:56:14-03:00 (ERROR:31566.2756295568): [57155] Gatekeeper module: Failed to downcase utf8 string. Error: failed to convert ustr to lowercase.
2013-03-25T07:56:09-03:00 (ERROR:31566.2829724560): [57007] Gatekeeper module: Failure evaluating dictionary rules.
2013-03-25T07:56:09-03:00 (ERROR:31566.2829724560): [57009] Gatekeeper module: Failed to apply rules for attachment dictionary scanning.
2013-03-25T07:56:09-03:00 (ERROR:31566.2829724560): [57155] Gatekeeper module: Failed to downcase utf8 string. Error: failed to convert ustr to lowercase.
2013 Mar 25 07:31:09 BRT (err) ecelerity: [2277] sieve: /data/mta/etc/recipient_validation.siv:96 sms_dds_is_valid: DDS call failed.
2013 Mar 25 07:20:32 BRT (err) ecelerity: [2277] sieve: /data/mta/etc/recipient_validation.siv:96 sms_dds_is_valid: DDS call failed.
2013-03-25T07:12:26-03:00 (ERROR:31566.2819234704): [23005] Unable to verify reinsertion code for sac.cert@singlepoint.com.br
2013 Mar 25 07:04:27 BRT (err) ecelerity: [2277] sieve: /data/mta/etc/recipient_validation.siv:96 sms_dds_is_valid: DDS call failed.

2013-03-24T23:45:23-03:00 (ERROR:2277.3019508624): [45011] DDS client: XML-RPC call returned fault 800206 - Attempt to authenticate to data source failed: srjctcpdad01.abnote.int

2013-03-24T19:08:35-03:00 (ERROR:31566.2829724560): [23005] Unable to verify reinsertion code for sac.cert@singlepoint.com.br

Can anyone help me with this, I did not find anything more specific about what is happening.

Thank you,
Arthur Sant'ana Fernandes

Operating Systems:

Comments 6 CommentsJump to latest comment

Mudasssar's picture

Can you please disable your LDAP source and then check if these messages are reaching spam quarantine.

TSE-JDavis's picture

Do the messages show up in the Delivery queue? They may still be waiting to try to deliver them to the Control Center. This is done over port 41025, so you need to make sure that port is open between the scanner and the control center.

arthursantana's picture

I'm sorry for the delay in replying, in this environment there is just one SMG, with the functions of control center and scanner.

A.Simeoni's picture

The fastest way to sort this issue would be to open a Case with Technical Support and Provide the Logs (at Debug Level)

...Just to add to what JDavis told you, even if is one SMG only you can check the port 41025 if ansfer any telnet as the comunication error maybe releated to a Service being Down

TSE-JDavis's picture

It would be much quicker if you opened a case and we called you about this.

What I wonder at this point is if you're sure that they are supposed to go to the Spam quarantine, or a content compliance folder, or the suspect virus quarantine? Are you certain that you're looking in the correct place?

arthursantana's picture

It was an open call and the recommendation was to update the SMG, we are currently waiting a maintenance window to do this.

Yes I'm sure they should go there, confirmed the destination of the message in the "Message Audit Logs", and confirmed the settings of the policy has been applied.

I'll update as soon as possible SMG and see what happens.

Thank you all for the help.