Messaging Gateway

Currently users don't receive any notification from SBMF if they have messages quarantined. I configured the schedule to 1 hour.

Is the quarantine notification email applied to all quarantined message, or only for those messages "Treated as Spam"? Will it be sent to sender, recipient, or both?

Thanks.

Hi,

it could be many things but you may want to check this KB article first:
http://service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2005061716240663

Also, the settings mentioned into the following Kb article affect that:
http://service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2004122212335363


HTH,

Federico

Hi,

I have configured the SMTP Insertion Host to my internal SMTP server on another machine. But after 1 hour I still didn't receive any quarantine notification.

Is there any log file that I can check for this notification email?

Thanks.

Hi,

notifications are sent based on the frequency configured under Settings > Quarantine > Quarantine Notification. Also, not sure, but I think new notifications are sent only if new items are received in quarantine after the last notification sent.
Related events should be logged into BrightmailLog.log file.

HTH,

Federico

Notification schedule is set at 1 hour, and I sent few messages that were quarantined successfully. But SBMF still didn't send any notification to user since yesterday afternoon until this morning.

Log in /opt/symantec/sbas/ControlCenter/BrightmailLog.log looks normal. How can I check last notification message sent, maybe from log file or database?

Is it correct that notification process will start at 4 AM as in the Implementation Guide? Any relation with license issue?
All function is OK except quarantine notification. Please help... :-(

Found this log in my internal SMTP log that I suspected as notification message session:

Jun 18 11:07:51 centos1 postfix/smtpd[16340]: connect from sbmf.local.com[192.168.40.33]
Jun 18 11:07:51 centos1 postfix/smtpd[16342]: connect from sbmf.local.com[192.168.40.33]
Jun 18 11:07:51 centos1 postfix/smtpd[16343]: connect from sbmf.local.com[192.168.40.33]
Jun 18 11:07:51 centos1 postfix/smtpd[16344]: connect from sbmf.local.com[192.168.40.33]
Jun 18 11:07:51 centos1 postfix/smtpd[16345]: connect from sbmf.local.com[192.168.40.33]
Jun 18 11:12:53 centos1 postfix/smtpd[16340]: timeout after EHLO from sbmf.local.com[192.168.40.33]
Jun 18 11:12:53 centos1 postfix/smtpd[16340]: disconnect from sbmf.local.com[192.168.40.33]
Jun 18 11:12:53 centos1 postfix/smtpd[16342]: timeout after EHLO from sbmf.local.com[192.168.40.33]
Jun 18 11:12:53 centos1 postfix/smtpd[16342]: disconnect from sbmf.local.com[192.168.40.33]
Jun 18 11:12:53 centos1 postfix/smtpd[16343]: timeout after EHLO from sbmf.local.com[192.168.40.33]
Jun 18 11:12:53 centos1 postfix/smtpd[16343]: disconnect from sbmf.local.com[192.168.40.33]
Jun 18 11:12:53 centos1 postfix/smtpd[16344]: timeout after EHLO from sbmf.local.com[192.168.40.33]
Jun 18 11:12:53 centos1 postfix/smtpd[16344]: disconnect from sbmf.local.com[192.168.40.33]
Jun 18 11:12:53 centos1 postfix/smtpd[16345]: timeout after EHLO from sbmf.local.com[192.168.40.33]
Jun 18 11:12:53 centos1 postfix/smtpd[16345]: disconnect from sbmf.local.com[192.168.40.33]

Note:
sbmf.local.com[192.168.40.33] is server with Brightmail installed.
centos1 is internal SMTP server

Why the SMTP session timed out after HELO? FYI normal mail (both incoming and outgoing) can be delivered successfully.

I managed to configure SBMF connect to LDAP. End users are able to receive quarantine notification. But when the quarantined message was sent by ESMTP (Extended SMTP) session, it will not be included in notification.

When I check the postfix log
With ESMTP:
Jul 13 10:37:03 sbmf.new bmifilter: [3081558928.9a76c08] bmfi_envrcpt "<user2@my.test.domain>"
Jul 13 10:37:03 sbmf.new bmifilter: [3081558928.9a76c08] bmfi_envrcpt esmtp "<user2@my.test.domain> ORCPT=rfc822;user2@my.test.domain"

With SMTP (not ESMTP):
Jul 13 10:24:57 sbmf.new bmifilter: [3081558928.9a76c08] bmfi_envrcpt "<user2@my.test.domain>"

Then I checked quarantine table in MySQL database, message sent with ESMTP has "<user2@my.test.domain> ORCPT=rfc822;user2@my.test.domain" in the recipient column. While message sent with SMTP has "<user2@my.test.domain>" only.

Anyone experienced this before?
Please help...

Thanks.

what action you have made in the rule for Quarantined , I think ther should be quarantined and notify you have choose then mention the Notification content.