Emails getting quarantined over and over again.

mendozal

Hi.

I constantly receive malware detected notifications over some emails. I checked those emails and determined it was a false positive (even created a report on that in the UI).

I've chosen to restore those files to the original folders. But they're getting detected as malware and quarantined over and over again. And from the second time it gets quarantined, the option to restore them is greyed out in the UI, I have to move them manually.

I know I can disable email quarantine, but that's not something I'd like to do.

I'd like to request these points if possible:

For already restored files not to be detected, or at least not quarantined, again.
Ability to report false positives from the quarantined file list. Maybe whitelist them there temporarily until you can resolve the case.
Ability to restore files if they get quarantined again (button not greyed out and marked as already restored)

Or is there any other option I'm not seeing?

Thanks.

cPFence

mendozal

Email quarantine can produce lots of false positives for some users. You can exclude the affected mailbox using:

cpfence --exclude-path /info@domain.com/

This feature will be deprecated in the near future, as it works very well for some mailboxes but causes repeated false positives for others.

mendozal

cPFence Thank you. I'll do this.