Received-SPF: pass (Last token {include:spf.protection.outlook.com} (res=PASS)) client-ip=40.107.236.96; envelope-from=<jiml@n2net.com>; x-ip-name=mail-bn8nam11on2096.outbound.protection.outlook.com;
X-Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2096.outbound.protection.outlook.com [40.107.236.96])
by netwin.co.nz (SurgeMail 7.5d) with ESMTP (TLS) id 34535647-1391920
for <surgemail-list@netwinsite.com>; Thu, 29 Apr 2021 18:01:05 +0000
X-Return-Path: jiml
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=Hg2ObuJRY9TYvvwv3uS2vG60R89tfiSfbHCAgnU0A+XP98E7A+HphWuD9VN4xUDc3v8VoDhO96jXSp83cZobWnG4Av0uruGXNzq6bWjU0F8v5t76Xo6ssDUGysx1Hvn4s1ScxIXupC8iDKRwUJqmQFHEWDLZ181iJk1Jaz8CtevBQEL+xs9LmtsjIyKUF2qaPq5s7uZJ5igjMfpiiOjqgMKT5tGvhSvM5YES4XiuOXvb4CImI5MfOKhvbRulCXayX1MTKUeBop+axgvCInuCrn4XBJZAZtizi/Zo/QDdjpjfNmKVp35WFxr244+kDJ5wa8LLNeRE0afjkPOMghXANA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=9cHjAcDjxiUqV3d7yEXNG1YzktIaydQx0hKt4sdSs3k=;
b=VG82z8NZgjXeNgWMLHkmIdc8W44Yu5+1PE68Ps/l1ID9HItDAhcOMgkuQrtQbOagwyYIlhaKlAXaXXpFN5Cd0VK//cbsYq6yKQ8VcNBz3EqsacFymuj9AubXQu4lW/cufdRc9pGKc8LpjJ/53GVIRBhZ4ThpVj9krNaQsvQ4hSJWPUWqLewAKSHkI4t2MCnBqaiuljJuodN7fztGyaRFtdkSzxiTeIgHVI4Icu9+KuRQjiFdrXldxb4Lio6zQ5788M4ZMHtHzVDUSSh9FPtk9uSiI96EbAvmAgGMkHpDI1AusWtdQCsVgg+GeFEbfL7l6qwl08IWAJOPwcP0XC+n9g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=n2net.com; dmarc=pass action=none header.from=n2net.com;
dkim=pass header.d=n2net.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=n2nettenant.onmicrosoft.com; s=selector1-n2nettenant-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=9cHjAcDjxiUqV3d7yEXNG1YzktIaydQx0hKt4sdSs3k=;
b=1TfR3Zy4MSzwEGXjoNVY17P3JT8Lk8Ep6Qyjvx2Q3jhTipZgiRdrmsGsoezyI9bUaLDeRcIzg16IsAtHbRCCD7vZzWdK6kWM384niwHqhcIfWLb7FzxcKmJ2aituoefJbCeQGStzKo40MwgaYNVAGYsPki0d7rfWlVp8LW524rs=
X-Received: from MN2PR05MB7101.namprd05.prod.outlook.com (2603:10b6:208:17b::18)
by BL0PR05MB5427.namprd05.prod.outlook.com (2603:10b6:208:61::14) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4087.23; Thu, 29 Apr
2021 18:01:01 +0000
X-Received: from MN2PR05MB7101.namprd05.prod.outlook.com
([fe80::513b:8fd1:e087:3b87]) by MN2PR05MB7101.namprd05.prod.outlook.com
([fe80::513b:8fd1:e087:3b87%7]) with mapi id 15.20.4108.012; Thu, 29 Apr 2021
18:01:01 +0000
From: Jim Lohiser
To: "surgemail-list@netwinsite.com" <surgemail-list@netwinsite.com>
Subject: [SurgeMail List] Spam Quarantine Before Forward
Thread-Topic: Spam Quarantine Before Forward
Thread-Index: Adc9IBcJWQMgbSa8Tma55AhW1hYU9w==
Date: Thu, 29 Apr 2021 18:01:01 +0000
Message-ID:
<MN2PR05MB71015F7D305F77A753119015945F9@MN2PR05MB7101.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
X-authentication-results: netwinsite.com; dkim=none (message not signed)
header.d=none;netwinsite.com; dmarc=none action=none header.from=n2net.com;
X-x-originating-ip: [207.166.192.127]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a38f384b-9c8f-4abe-4585-08d90b38bfe7
x-ms-traffictypediagnostic: BL0PR05MB5427:
x-microsoft-antispam-prvs:
<BL0PR05MB5427D8AC62197B31B436FB54945F9@BL0PR05MB5427.namprd05.prod.outlook.com>
x-ipw-groupmember: False
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
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
x-forefront-antispam-report:
CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MN2PR05MB7101.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(366004)(346002)(396003)(136003)(376002)(39830400003)(52536014)(5660300002)(7696005)(6916009)(6506007)(71200400001)(316002)(66446008)(3480700007)(26005)(122000001)(33656002)(38100700002)(186003)(76116006)(2906002)(66556008)(86362001)(66476007)(8936002)(9686003)(478600001)(83380400001)(55016002)(64756008)(8676002)(66946007);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata:
=?us-ascii?Q?2P6XVq7A+dm+Is6w99Gz2My7B0eZTc0UtGK98N2kVbTrAKX6i+Nz6dxUH231?=
=?us-ascii?Q?V7eVTrJm8MzuS3pw1ahc+etjtj1gEKCVgzvvZq/Jl3BUn1BddpNqXphzyVad?=
=?us-ascii?Q?j/E3VuZ0rZk1wvyiFmY46SyPRlu+nssQJa+Ra0PGBClBbvmtPoisAOUaRhpc?=
=?us-ascii?Q?qNMP7INf3ltZtqRAsogUs1p6UnlYL47Oz9jZFfpBSBPtwLTMYRlpwu3mfgU7?=
=?us-ascii?Q?jb02pOSRwWi7rkwKX0g7+fbuiuhXMy83brN9qhbC+0f206G/fepW5v3udZE/?=
=?us-ascii?Q?nA1bNC0n9j6GhjnapCTRV2JobJAFwnrz7pKmxoQNQ3XPBbRVlVPaP0r2DPeI?=
=?us-ascii?Q?5/4BbnvSPXQC7CHotAuZof+6TxRpuwrztpQyaV6q60iqYAWqsDB8le7/Mr3Q?=
=?us-ascii?Q?7tTO504q2waUDG8b/mua1MyHR5f1tEXlmQWhbyT1nHqmIWwrx3G1EmBJfjLO?=
=?us-ascii?Q?HwIStdr5pG1QxurtsmBVSr/L0FoXcxgxmF7uukMmt6h807mPHV/qdIZWqOVE?=
=?us-ascii?Q?OnlmSRS0wMFSvG+JjRjJikzN65yYueVPEYrnPBFXnyCmqJVRZvggasQXp+1+?=
=?us-ascii?Q?iX69tX8sRhipIDovoZK5fmAHOr468O24nTCly8XOi/ydOCuuVAihtIXP9Vuc?=
=?us-ascii?Q?EVmJ6D9ubrjLVKmAr+5LXv9LLUhLM8PddW7dXrKFHrjXuQZFQ6Kz+rbHdQ9M?=
=?us-ascii?Q?Itc0YAfs93jmVQ5e7X0eqYiFVDn83jo3pRyefgDIY3mWySdFCHjYHN7ule2e?=
=?us-ascii?Q?EYjhVK27QahJu4EkieHDOTFDdrgWEYCWbSZ8FFAmEKhvYw+/qAodbE0qRtbO?=
=?us-ascii?Q?0eaFTvv+9xTnQzIG0/glEjImtBre3AfJT4fIL/vyFcRPukKdeP6gPCxGs8dJ?=
=?us-ascii?Q?svm3L3wy38//oVtQLqwvHHq1UtVqmHaQFfiL8KmVOQYAOs/3tWT/Z0kRv2i2?=
=?us-ascii?Q?Tiwq62mTmKfU7Ae9rLxEIl+yZE4Slxxk2aC5kHhbUNbVr7JMd22p7SWhNx6W?=
=?us-ascii?Q?xOODtvXdGU+x+Fn79kzmY/Hz68cIWNVwfrdMrReV6TyM5B6RuRXdDYXHEuPT?=
=?us-ascii?Q?Ji51J6WycONYs0YfkK8e/I2QS1DuEyLmOYgeg6luUOPFbm5usoCj4AtpnGxx?=
=?us-ascii?Q?ciwGkG/wxl1dzPOkORR0ueIw6wYJyGiaXHiN5+1R5fwkZYQnPkaIFPIfNjxT?=
=?us-ascii?Q?5VMMjxoPtLBAz7qNMSf7mZJUNV+twCbp3CuLfZ4vBoEaoWUlnXCQAe85lPy+?=
=?us-ascii?Q?sU1rDaGFsnEp+44kYyzQmHtI4il8+TNDgDKiy8EpP/l05DBfvd3uPyksE2yj?=
=?us-ascii?Q?3fouSUum+od0xt/pdam8QzCv?=
x-ms-exchange-transport-forked: True
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: n2net.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR05MB7101.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: a38f384b-9c8f-4abe-4585-08d90b38bfe7
X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Apr 2021 18:01:01.3645
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 509ad38e-1591-4f89-8aa7-cb7bc8ef1dba
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: R5T7fA+sknY8uOxEVocgZxOpcWvw3pNo+nB5LNHpQ9xN41cVA9H+JbgfZm1ZbqbW
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR05MB5427
X-Originating-IP: 40.107.236.96
X-Country: code=US country="United States" ip=40.107.236.96
X-Qnum: 34535647
X-ORBS-Stamp: hostkarma_yellow, hostkarma_quitok
X-Rcpt-To: <surgemail-list@netwinsite.com>
X-SpamDetect: ****: 4.1 sd=4.1 lv=7.00 nok=2/1 m=3 nf=0 Close 0.04(X-myrbl:Color=white) 0.90(X-Phrase:isspam) 0.76(X-Verify-Helo:-ERR) 0.70(X-NotAscii:us-ascii) 0.31(protection.outlook) 0.35(X-ORBS-Stamp:yellow) 0.37(X-Verify-MX present) 0.42(genuine) 0.42(dkimok) 0.44(StandardTLD) 0.54(X-Verify-Helo:wrongip) 0.47(spfpass) 0.47(X-LangGuess:English) Sval 4.1 bsan 7.0 Moved 7.0->4.1 Sval 4.1
X-NotAscii: charset=us-ascii
X-LangGuess: English
X-Phrase: IsSpam score=1.00
X-Verify-Helo: -ERR wrongip: NAM11-BN8-obe.outbound.protection.outlook.com -> 23.103.*.* not in 40.107.236.96
Authentication-Results: netwin.co.nz header.from=jiml@n2net.com; dkim=pass (good signature)
X-Verify-MX: <jiml@n2net.com> senders ip (ch=40.107.236.96 msg=40.107.236.96, net=40.107.) not in mx data dom=n2net.com ipname=mail-bn8nam11on2096.outbound.protection.outlook.com (207.166.203.21)
X-Encryption: SSL encrypted
X-MyRbl: Color=White Age=512 Spam=7 Notspam=6 Stars=78 Good=5805 Friend=8648 Surbl=2 Catch=1 r=0.0084 ip=40.107.236.96
X-IP-stats: No info recorded yet ip=40.107.236.96
List-Unsubscribe: <mailto:surgemail-list-leave@netwin.co.nz?subject=unsubscribe>
X-Mailing-List: surgemail-list@netwin.co.nz
List-ID: <surgemail-list@netwin.co.nz>
Precedence: bulk
Reply-To: surgemail-list@netwin.co.nz
NetWin,
For several years we had one mailbox that received messages and it was configured to forward a copy of the messages to another mailbox on our system. Recently, we needed to have more granular control of the forwarding, so we removed the Forward To address from the Forwarding config for the 1st mailbox and instead created Filtering rules on the 1st mailbox using the "Forward - keep a copy" action. This works except that messages that go into quarantine on the 1st mailbox end up getting forwarded via the filter rules to the 2nd mailbox. When we were using the Forwarding option, this did not occur (i.e. messages that were quarantined were NOT forwarded).
Trying to resolve this on my own, I found the option g_user_filter_early which says "Process user exceptions/accept filters before tagging message as spam". It was on. I tried turning it off, but the spam continues to forward. I have *not* restarted the server, in case this option requires a restart.
Is there anything I can do to prevent quarantined messages from also being forwarded by filter rules?
P.S. Sending this question to the list in case anyone has a similar issue.
Thank you,
Jim Lohiser
N2Net
|