Received-SPF: pass (Last token {include:spf.protection.outlook.com} (res=PASS)) client-ip=40.107.220.111; envelope-from=<jiml@n2net.com>; x-ip-name=mail-co1nam11on2111.outbound.protection.outlook.com;
X-Received: from NAM11-CO1-obe.outbound.protection.outlook.com (mail-co1nam11on2111.outbound.protection.outlook.com [40.107.220.111])
by netwin.co.nz (SurgeMail 7.5d) with ESMTP (TLS) id 34541074-1391920
for <surgemail-list@netwin.co.nz>; Thu, 29 Apr 2021 22:16:09 +0000
X-Return-Path: jiml
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=XeOW3K1IpvoQc+oVE/ff5vmjHUM8zI3giehHbcfAA8Ogr/rhkK7NoTOQRxK01HK/ui7l3Os9gvCRF4iGqw1bKe31DAkNVnib0rZd4NXZUbJ4RoB3+QRC1m8IwHlw+7C+hPI+1ULG5BfZJy4H3WWY6WIPe/UnMvOJY+TTY2FT2wRRie8u19PvQwrDqa+n8fERphS1W7kWfWpEBAl9y9/DhVdim6gDzWt6N6ACuvlx5/wQqz/mDhyUputYUIwC4TWa/3iqiAMZR86Rg698POqg9SEqNQ7q2PCnCZIPG4eoixrfdu5IB7S58DxtjJRar7BwUIZBJ1aawwACuTB3OLEhMg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=MmyMEeWxnGF5QGOCLvcktiX8kkXGB0C8+XAu7E1NzNs=;
b=d0Cfy/9ijB2t3Dd42s8NYSvc92O9DSWP+9dy1EM6Y2dmYHmam2OeKQ2kVHiQ1IwxiIf1L3VKng712xy/BbFd5OCOpnMytWdvrgZzJC4tdOOd+P5n0SgPDe4KgHQdTTTXH/NDb98cKBZ2LXG1c67rP5oO5GtgbCmed+uY1KnDBN9nOIBBq0/E3l2uFrx40zCFnL7DawhDJYRZ/xaq7Q3zyNmqAlIFuvu2xcCOsH8vkn02gQvaFk1K8RITHfIhTnuSHncUMo/YxDTSvCCIHKsOr8bWI7hMq0tDiK6Q+763nKjoH0vMcgwva4YMU8AAdws+J043A1/ra3VUDKVUCPEdFw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=n2net.com; dmarc=pass action=none header.from=n2net.com;
dkim=pass header.d=n2net.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=n2nettenant.onmicrosoft.com; s=selector1-n2nettenant-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=MmyMEeWxnGF5QGOCLvcktiX8kkXGB0C8+XAu7E1NzNs=;
b=k9gW5SMRVidRYCKyRVlT/m47uj82c8QQ2P8peR/poqoqw8ZTGQSSQuVc3a9+Lk/E5hK7XvTVCsYhPO3BlGmctTOgbGQDGRNl9vZeIu/cVjkUNrxiw49Eit6GO/xI3NCisVp9E3j9VsmQ/EjZwXFRusU1r1bQKJ26Zl5gB42Cyi4=
X-Received: from MN2PR05MB7101.namprd05.prod.outlook.com (2603:10b6:208:17b::18)
by BL0PR05MB5427.namprd05.prod.outlook.com (2603:10b6:208:61::14) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4087.23; Thu, 29 Apr
2021 22:16:03 +0000
X-Received: from MN2PR05MB7101.namprd05.prod.outlook.com
([fe80::513b:8fd1:e087:3b87]) by MN2PR05MB7101.namprd05.prod.outlook.com
([fe80::513b:8fd1:e087:3b87%7]) with mapi id 15.20.4108.012; Thu, 29 Apr 2021
22:16:03 +0000
From: Jim Lohiser
To: "surgemail-list@netwin.co.nz" <surgemail-list@netwin.co.nz>
Subject: RE: [SurgeMail List] Spam Quarantine Before Forward
Thread-Topic: [SurgeMail List] Spam Quarantine Before Forward
Thread-Index: Adc9IBcJWQMgbSa8Tma55AhW1hYU9wAIiZ8AAACthOA=
Date: Thu, 29 Apr 2021 22:16:02 +0000
Message-ID:
<MN2PR05MB710161A8F6F1191FCFCA7E2D945F9@MN2PR05MB7101.namprd05.prod.outlook.com>
References:
<MN2PR05MB71015F7D305F77A753119015945F9@MN2PR05MB7101.namprd05.prod.outlook.com>
<2d480caf-b929-1882-9dba-13cb95d1adc8@netwin.co.nz>
In-Reply-To: <2d480caf-b929-1882-9dba-13cb95d1adc8@netwin.co.nz>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
X-authentication-results: netwin.co.nz; dkim=none (message not signed)
header.d=none;netwin.co.nz; dmarc=none action=none header.from=n2net.com;
X-x-originating-ip: [207.166.192.127]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 3a8c5a4c-7e4c-4d0d-f333-08d90b5c604d
x-ms-traffictypediagnostic: BL0PR05MB5427:
x-microsoft-antispam-prvs:
<BL0PR05MB5427DF8C0980E2A8B5A6E049945F9@BL0PR05MB5427.namprd05.prod.outlook.com>
x-ipw-groupmember: False
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
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
x-forefront-antispam-report:
CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MN2PR05MB7101.namprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(136003)(396003)(39830400003)(346002)(366004)(376002)(66476007)(8936002)(83380400001)(478600001)(9686003)(66556008)(2906002)(86362001)(66946007)(8676002)(55016002)(64756008)(6506007)(316002)(71200400001)(53546011)(7696005)(5660300002)(52536014)(38100700002)(33656002)(186003)(66446008)(122000001)(26005)(6916009)(76116006);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata:
=?utf-8?B?ZmllV2E3NlQ0VHVYUjhzd1F4aUlQQzhMMWlkNG50alA4cnNUaTJ4dG9mMitw?=
=?utf-8?B?S2U3dkw4SjhWemljTC9VSnlvMFdrckEwVHhKN0hQMXpsZUF2ZXdHcCt0Tndu?=
=?utf-8?B?NFh3MFNralQybWQwbXNwRVhYa2l2OU5VeG5SKzNqQUFTU0c3UGRuZDN2YmVm?=
=?utf-8?B?MENqK0tKZVFBanBBbFg3Yk5PcHZaWmFVVVdqQjVvUmdRY0JtZnlaZHRZbFJz?=
=?utf-8?B?TURZZGtsOCs5QUVtNU9xdGVNaFV4S25hdHpUZWdWOW5XKzU2SWdGYnltd05P?=
=?utf-8?B?d0JWZ2daRVlxNXB3bXJwL2RPUnBNamNRdE1VaENuU0ZMQ0xQL0Z0dzJlZWFB?=
=?utf-8?B?aFRtamNtbytEc3k5NGtUcFk0RnE4UDBxd1pZZHBZTnl1N2RROCttZDZRNE85?=
=?utf-8?B?aW1vL2JmL1FhbmVaQlNDK1RpOXlnK0JPUHdIVXNQQWVYbG41SVZYUUxVQnFv?=
=?utf-8?B?aTVrNTB2UkgzNUFVeWtqY1RzNjF0WXhCK3ZNKzlRRVp5OWVtRlBBbzQvOUU1?=
=?utf-8?B?ZXFnQjN2K0l0MG1pbDZJOEc3VHV3NnZxR1hLcUFOd09zczUvQzBNOWhmN3dr?=
=?utf-8?B?ZW9UZGl2UHJVZnRMNTF1LzlEWm92ajRlNE8rcXpCQ1NPT0ZpOThqcHoyR0xw?=
=?utf-8?B?OW5GeFkvcUhoY1FXckNCcTBxM0U3U25ka0Q3L3VZZUZ3dmdqSjRDTW44S1cr?=
=?utf-8?B?OTNvSTFOaVdtOEgvWSsrVXZlNHRBQTJFcGhNQ3BEYnFxQ1hqeDFOenlBRllj?=
=?utf-8?B?ajZURnFSdGFheTRNSXV1eGFBaFRPaVZRdlBoSEc1QWg0Tm1WZlhuMXRNWUtD?=
=?utf-8?B?ZlRXM3prbmRHZWNYeG9qaHNoT2NMaTlKWXIwTzdXU3BBYml6Tmo3K1JYTFJq?=
=?utf-8?B?aW9ad3Q0UStDTGxVMHNSVS82Y2lEWWV3L2ZyS01YV2toQzVwZ1FZdDNURFJC?=
=?utf-8?B?eFoyR1I0UmxjU2w1cFQyb0daYlBRT1BMc2ZGTFVwWGdENzVkdTVuSkNROHZD?=
=?utf-8?B?Q0RMR2JOcGZkZ28ySndpREI0L1AxSmJVMmZXbHZOdzlZUEtSeGgvR2NhN2dU?=
=?utf-8?B?R3Q0N3VSRlZnVVk0dzdIMW1pcVB1TTVscGl3Qzd5bWZzMEQ0aGJFSjBiYUJM?=
=?utf-8?B?T0dVZTJaZlNRNFNleU92TWx0UkNuWVZFVVdxTXZEWjdGSlFQNFp0OUlodEwy?=
=?utf-8?B?dkZvcGIwcGlwTzZkdWY1aXhNM3ZFMkdLOUgwdFFKQ2ltUnZXT3RCb2FMVlBy?=
=?utf-8?B?YUlzSW1MaEdvZGRDRUthRWI2THBWYmhscnM2K3hYeERVVEk4aitLbVNlRG9Y?=
=?utf-8?B?Wm9mK2QwUjQzY09wZThyQWxOaG1zMU1TT0ZDNTZ3YVBWRkE4SWRwcmxqK0cw?=
=?utf-8?B?bnh0WmZxUkRUamM1dHZkQXFVR1Q5bmp1aithSjl5S29hMFEwWnZRdzlscmNn?=
=?utf-8?B?a0tzQWsvMTRDdUt3RW8rWWhYaTd4V1k4R3AvQVo2dUkvL2hWOWJnZU14U3Qz?=
=?utf-8?B?Q0RLUXRxU3BnWUsyVE9iM2hvTlA3KzBNblZWV0xmZ2xHR2ZYdk04SFM2a2VI?=
=?utf-8?B?bFgwME0wMGNmeXZ3WWh0YTFmWE9NMWJMNTZkblpVUWgwdU9oRXN5cXZqRnp6?=
=?utf-8?B?SjBOTVhoVlV3Y0E3akorVzlJK1BJRTJLdUEzMGlQN09xeFJZdHM4QXJiZWNU?=
=?utf-8?B?Q1hTWnoxNVVZSGQyKzFkMnBwNkwrRjh2eUNSRk1TNG95ZDRDQ1VkbHlFNXpF?=
=?utf-8?Q?gqcEEah/uNtSqJBqKWwwA23jo04xEBXWM3DFO16?=
x-ms-exchange-transport-forked: True
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: n2net.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: MN2PR05MB7101.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 3a8c5a4c-7e4c-4d0d-f333-08d90b5c604d
X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Apr 2021 22:16:02.8644
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 509ad38e-1591-4f89-8aa7-cb7bc8ef1dba
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: kV/Ay/Z8yh4Ta47jo85RzvtGZMtv4SMdoqHOpyFuk6ANJVdDqSwCXJcyMIF4Mo6O
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR05MB5427
X-Originating-IP: 40.107.220.111
X-Country: code=US country="United States" ip=40.107.220.111
X-Qnum: 34541074
X-ORBS-Stamp: hostkarma_yellow, hostkarma_quitok
X-Rcpt-To: <surgemail-list@netwin.co.nz>
X-SpamDetect: *****: 5.0 sd=5.0 NoRule 0.04(X-myrbl:Color=white) 0.08(X-SpamContent:clean) 0.90(X-Phrase:isspam) 0.76(X-Verify-Helo:-ERR) 0.73(three_words) 0.73(Whole message is base64 e) 0.31(protection.outlook) 0.35(X-NotAscii:utf) 0.35(X-ORBS-Stamp:yellow) 0.37(X-Verify-MX present) 0.42(genuine) 0.42(dkimok) 0.44(StandardTLD) 0.54(X-Verify-Helo:wrongip) Saned 5.0 sanitym 3.3 -> 5.0 NotSaned s=3.3 was=5.0 Sval 3.3
X-NotAscii: charset=utf-8
X-SpamContent: Clean
X-LangGuess: English
X-Phrase: IsSpam score=1.00
X-Verify-Helo: -ERR wrongip: NAM11-CO1-obe.outbound.protection.outlook.com -> 23.103.*.* not in 40.107.220.111
Authentication-Results: netwin.co.nz header.from=jiml@n2net.com; dkim=pass (good signature)
X-Verify-MX: <jiml@n2net.com> senders ip (ch=40.107.220.111 msg=40.107.220.111, net=40.107.) not in mx data dom=n2net.com ipname=mail-co1nam11on2111.outbound.protection.outlook.com (207.166.203.21)
X-Encryption: SSL encrypted
X-MyRbl: Color=White Age=523 Spam=1 Notspam=12 Stars=66 Good=5977 Friend=8945 Surbl=1 Catch=0 r=0.0013 ip=40.107.220.111
X-IP-stats: No info recorded yet ip=40.107.220.111
List-Unsubscribe: <mailto:surgemail-list-leave@netwin.co.nz?subject=unsubscribe>
X-Mailing-List: surgemail-list@netwin.co.nz
List-ID: <surgemail-list@netwin.co.nz>
Precedence: bulk
Reply-To: surgemail-list@netwin.co.nz
ChrisP,
That is how we have been configured (no change). So, that does not fix this issue. Does that setting, perhaps, only apply to the Forwarding configuration for a user and not filter rule based forwarding?
Jim L
-----Original Message-----
From: Surgemail Support <surgemail-support@netwin.co.nz>
Sent: Thursday, April 29, 2021 5:55 PM
To: surgemail-list@netwin.co.nz
Subject: Re: [SurgeMail List] Spam Quarantine Before Forward
You need to turn on 'late' forwarding.
g_late_forward "true"
ChrisP.
On 30/04/2021 6:01 am, Jim Lohiser wrote:
> NetWin,
>
> For several years we had one mailbox that received messages and it was configured to forward a copy of the messages to another mailbox on our system. Recently, we needed to have more granular control of the forwarding, so we removed the Forward To address from the Forwarding config for the 1st mailbox and instead created Filtering rules on the 1st mailbox using the "Forward - keep a copy" action. This works except that messages that go into quarantine on the 1st mailbox end up getting forwarded via the filter rules to the 2nd mailbox. When we were using the Forwarding option, this did not occur (i.e. messages that were quarantined were NOT forwarded).
>
> Trying to resolve this on my own, I found the option g_user_filter_early which says "Process user exceptions/accept filters before tagging message as spam". It was on. I tried turning it off, but the spam continues to forward. I have *not* restarted the server, in case this option requires a restart.
>
> Is there anything I can do to prevent quarantined messages from also being forwarded by filter rules?
>
> P.S. Sending this question to the list in case anyone has a similar issue.
>
> Thank you,
>
> Jim Lohiser
> N2Net
>
>
>
|