English
Chinese (Simplified)
French
German
Italian
Japanese
Russian
Spanish
Vietnamese
message to bad queue
-
Hi,
I using Mdaemon 16.5.2, and some of my email move to bad queue because it's told there's infected with some virus but i'ts not.
I already trying to turn off the antivirus, but still not helpful.
Can someone help me?
As of Fri Oct 06 2023 11:51AM there were 16 messages in the queue.
<table border="3" cellpadding="6" cellspacing="1">
<caption><h1>MDaemon Quarantine Queue Summary</h1></caption>
<tr><th>To</th><th>From</th><th>Subject</th><th>Error type</th><th>Message-ID</th><th>Date</th></tr>
<tr><td>import.agy@agristar.co.id</td><td>ILoan.Report@permatabank.co.id</td><td>LAPORAN AVAILABILITY</td><td>WARNING! infected with virus (LAPORAN_AVAILABILITY202309220059073_40.PDF)</td><td><11034577.1229132.1695319147466.JavaMail.MDACESPIM@TW2-DBCBR-P01></td><td>Fri, 22 Sep 2023 00:59:07 +0700</td></tr>
<tr><td>import.agy@agristar.co.id</td><td>ILoan.Report@permatabank.co.id</td><td>LAPORAN AVAILABILITY</td><td>WARNING! infected with virus (LAPORAN_AVAILABILITY202309220100041_36.PDF)</td><td><6796328.1229429.1695319204173.JavaMail.MDACESPIM@TW2-DBCBR-P01></td><td>Fri, 22 Sep 2023 01:00:04 +0700</td></tr>
<tr><td>herry@agristar.co.id</td><td>ILoan.Report@permatabank.co.id</td><td>LAPORAN AVAILABILITY</td><td>WARNING! infected with virus (LAPORAN_AVAILABILITY202309200059071_40.PDF)</td><td><14276969.1223117.1695146347240.JavaMail.MDACESPIM@TW2-DBCBR-P01></td><td>Wed, 20 Sep 2023 00:59:07 +0700</td></tr>
<tr><td>herry@agristar.co.id</td><td>ILoan.Report@permatabank.co.id</td><td>LAPORAN AVAILABILITY</td><td>WARNING! infected with virus (LAPORAN_AVAILABILITY202309200100048_36.PDF)</td><td><18997261.1223455.1695146404898.JavaMail.MDACESPIM@TW2-DBCBR-P01></td><td>Wed, 20 Sep 2023 01:00:04 +0700</td></tr>
<tr><td>herry@agristar.co.id</td><td>janandi.wijaya@danamon.co.id</td><td>RE: Koordinasi Kerjasama Payroll EBP Bank Danamon - PT. Agristar Grain Industry</td><td>WARNING! infected with virus (FORM CASA BULK.xls)</td><td><TYZPR06MB626371A0FA966256EC001929D9F9A@TYZPR06MB6263.apcprd06.prod.outlook.com></td><td>Wed, 20 Sep 2023 08:32:35 +0000</td></tr>
<tr><td>herry@agristar.co.id</td><td>elvina@cerestargroup.co.id</td><td>RE: Koordinasi Kerjasama Payroll EBP Bank Danamon - PT. Agristar Grain Industry</td><td>WARNING! infected with virus (FORM CASA BULK.xlsx)</td><td><003a01d9eba8$1485b3c0$3d911b40$@cerestargroup.co.id></td><td>Wed, 20 Sep 2023 16:51:45 +0700</td></tr>
<tr><td>herry@agristar.co.id</td><td>ILoan.Report@permatabank.co.id</td><td>LAPORAN AVAILABILITY</td><td>WARNING! infected with virus (LAPORAN_AVAILABILITY202309210059074_40.PDF)</td><td><12696880.1226123.1695232747541.JavaMail.MDACESPIM@TW2-DBCBR-P01></td><td>Thu, 21 Sep 2023 00:59:07 +0700</td></tr>
<tr><td>herry@agristar.co.id</td><td>ILoan.Report@permatabank.co.id</td><td>LAPORAN AVAILABILITY</td><td>WARNING! infected with virus (LAPORAN_AVAILABILITY202309210100049_36.PDF)</td><td><2418782.1226465.1695232804996.JavaMail.MDACESPIM@TW2-DBCBR-P01></td><td>Thu, 21 Sep 2023 01:00:04 +0700</td></tr>
<tr><td>herry@agristar.co.id</td><td>elvina@cerestargroup.co.id</td><td>RE: Koordinasi Kerjasama Payroll EBP Bank Danamon - PT. Agristar Grain Industry</td><td>WARNING! infected with virus (FORM CASA BULK.xlsx)</td><td><007801d9ec72$fe6d40a0$fb47c1e0$@cerestargroup.co.id></td><td>Thu, 21 Sep 2023 17:04:16 +0700</td></tr>
<tr><td>finance@agristar.co.id</td><td>fxoperation@permatabank.co.id</td><td>FX Deal Confirmation</td><td>WARNING! infected with virus (FX_4010000354_3611663_secured.pdf)</td><td><81099298.1195.1695361806345@TW3-OPIXFS-P01.permatabank.com></td><td>Fri, 22 Sep 2023 12:50:06 +0700</td></tr>
<tr><td>finance@agristar.co.id</td><td>fxoperation@permatabank.co.id</td><td>FX Deal Confirmation</td><td>WARNING! infected with virus (FX_4010000354_3611662_secured.pdf)</td><td><224584036.1193.1695361806095@TW3-OPIXFS-P01.permatabank.com></td><td>Fri, 22 Sep 2023 12:50:06 +0700</td></tr>
<tr><td>finance@agristar.co.id</td><td>fxoperation@permatabank.co.id</td><td>FX Deal Confirmation</td><td>WARNING! infected with virus (FX_4010000354_3611664_secured.pdf)</td><td><572894421.1197.1695361928820@TW3-OPIXFS-P01.permatabank.com></td><td>Fri, 22 Sep 2023 12:52:08 +0700</td></tr>
<tr><td>finance@agristar.co.id</td><td>aulia.anggini@permatabank.co.id</td><td>FX Deal Confirmation</td><td>WARNING! infected with virus ([RESTRICTED] FX20230922131428.zip)</td><td><SEYPR04MB67504996D185F8C8C9D2874CBCFFA@SEYPR04MB6750.apcprd04.prod.outlook.com></td><td>Fri, 22 Sep 2023 06:18:11 +0000</td></tr>
<tr><td>finance@agristar.co.id</td><td>aulia.anggini@permatabank.co.id</td><td>FX Deal Confirmation</td><td>WARNING! infected with virus ([RESTRICTED] FX20230922131428.zip)</td><td><SEYPR04MB67505D3E788F005A47D216EABCFFA@SEYPR04MB6750.apcprd04.prod.outlook.com></td><td>Fri, 22 Sep 2023 06:33:25 +0000</td></tr>
<tr><td>finance@agristar.co.id</td><td>Permata.Trade@permatabank.co.id</td><td>Report(s) for Customer AGRISTAR GRAIN INDUSTRY</td><td>WARNING! infected with virus (AGRISTAR GRAIN INDUSTRY.zip)</td><td><1066257448.173.1673919793218.JavaMail.mqsvradmin@TW2-PTRADEAPP-P01></td><td>Tue, 17 Jan 2023 08:43:13 +0700</td></tr>
<tr><td>thamrin@kabulinco.co.id</td><td>CreditCard.Estatement@cimbniaga.co.id</td><td>Billing Statement Kartu Kredit CIMB Niaga</td><td>WARNING! infected with virus (CC statement template konvensional_20230921_0316596672.pdf)</td><td>S:316596672</td><td>Fri, 22 Sep 2023 14:29:05 +0700</td></tr>
-
Arron Staff
MDaemon 16.5.2 is no longer supported, but I'll see if I can get you pointed in the right direction.
Check MDaemon's inbound SMTP, routing, content filter, and antivirus logs to see what is causing the messages to be routed to the quarantine. Since the AV engines are turned off, the only other thing I can think of is Outbreak Protection. You can find the settings for Outbreak protection by going to Security / Outbreak Protection.
If the inbound SMTP log shows that outbreak protection is flagging the messages as infected, you can submit them as a false positive by sending the emails to virusfp@mdaemon.com
Also check the Outbreak Protection settings
-
Hi Aaron,
I already disable the ougbreak protection, but still like that. And I already disable the antivirus too.
-
Arron Staff
Attachment filtering or the content filter could also be sending messages to the quarantine.
The logs will tell you for sure what is causing the messages to be routed to the quarantine.
