Options

Quarantine Server not quaranting

bteddliebteddlie
edited April 2023 in Firebox - Proxies

Hello all,
Just recently I noticed an uptick in delivered spam which is usually a signal to me to check/delete messages out of the quarantine server (i.e. spamBlocker) which I did a few days ago. Since that time, nothing is being or has been quarantined.

M370 Firebox FSM v12.5.3
Running the SMTP proxy with spamBlocker enabled to quarantine Confirmed and Bulk spam.
I restarted the Quarantine Server service.
I rebooted the M370.

What setting am I missing to get the spamBlocker/Quarantine Server going again?

Thanks!
-Brian

Comments

  • Options
    james.carsonjames.carson Moderator, WatchGuard Representative

    Hi Brian,

    Thanks for contacting us.

    Without any logs telling us why the quarantine server stopped, it's difficult to say how to get it going again.

    Since most modern email clients have a integrated spam folder, I'd suggest skipping the quarantine server altogether. Users generally don't check it often, if at all. I generally recommend customer set up subject tags and use rules in their email client to route those messages to the correct folders so the users can actually see them.

    -James Carson
    WatchGuard Customer Support

  • Options
    MattMKMattMK

    We are in the same situation with our M370, no longer quarantining the spam emails for about 3 weeks now.
    And since then, our end users are getting now about double amount of spams.
    Restarted the Quarantine Server, no changes.
    Rebooted the Firebox M370, no changes.
    Opened a case with WatchGuard tech support, no response yet with a resolution.

  • Options
    Bruce_BriggsBruce_Briggs

    For the record, what Fireware version are you running?

    Are you at Fireware v12.5.4 or higher?
    If not, see this:
    WatchGuard retires the old Cyren spamBlocker engine
    https://techsearch.watchguard.com/KB?type=Article&SFDCID=kA10H000000bqG2SAI&lang=en_US

  • Options
    james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @MattMK
    What's the case number for the case you opened. I can go check to make sure it's routed to the correct team.

    -James Carson
    WatchGuard Customer Support

  • Options
    james.carsonjames.carson Moderator, WatchGuard Representative

    I'm going to close this thread, as the Quarantine, Log, and Report servers are no longer supported.

    See:
    (Quarantine Server)
    https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/quarantineserver/quar_server_intro_c.html

    (Log, Report, and Quarantine Server deprecation)
    https://www.watchguard.com/wgrd-blog/wsm-log-report-and-quarantine-server-deprecation

    Customers using quarantine server should consider another option like tagging the subject line, which can allow users to manage spam in their normal email client(s) if they're set up to do this.

    -James Carson
    WatchGuard Customer Support

This discussion has been closed.