FRAGE:
Hello, I set a large blocklist with filtering rules like SEX, S-E-X, .. , Bitcoin… a.s.o, it works. I get 50 spam mails every day, they are filtered out with these rules. >>> But I find these mails in my everyday Scout Reports which I check ;-(;-( >>> I wish these filtered e-mails not in my Scout Report. I played around with Customise Actions to achieve this …. and did not succeed. Can you help me with my problem please? Roman
Diese Aktionen können genutzt werden.
Permanently reject – message will be permanently rejected and will not be quarantined
Dauerhaft abweisen – REJECT und KEINE QUARANTÄNE
Quarantine – message will be quarantined (550 SMTP response code)
QUARANTÄNE mit 550er Code
Accept – message will be accepted by the filter
AKZEPTIEREN
Accept and notate „spam“ – message will be accepted and delivered to the recipient, with the subject being notated as a spam message with „[spam]“
AKZEPTIEREN und Betreff als „[spam]“ markieren
Blackhole – message will be dropped without informing the sender
Fallen lassen ohne den Sender zu informieren
Accept and notate – message will be accepted and delivered to the recipient, with the subject being notated als „[ Inhalt von Notice ]“
Temporary reject – message will be temporarily rejected and will not be quarantined
?????
Fake Accept – message will be quarantined but the sender will not be informed (250 SMTP response code)
2yz (Positive Completion Reply): The requested action has been successfully completed.
Quarantine (hidden) – message will be quarantined but cannot be released. It works as if the filtering system has permanently rejected the message (550 SMTP response code). This changes the status of the message to „rejected“ instead of „quarantine“, which will appear as the status in the logs search.
Notation – This is to be filled in only if using the Accept and Notate action and will be the text added to the subject when delivered.
ANTWORT:
You are correct that the solution you need is the Customise Actions. But you will have to be specific with the parameters of it, mainly the Main class rule, Sub class rule, and Extra class rule. They would have to be the exact values that appear in the logs for the quarantined emails. You can see the sub class and extra class values by adding the columns for them in the log results.
Here are some helpful articles:
https://documentation.n-able.com/spamexperts/userguide/Content/B_Admin%20Level/incoming-filtering/customise-actions.htm
https://documentation.n-able.com/spamexperts/userguide/Content/C_Domain%20Level/incoming/incoming-log-search.htm#add-cust-action-log-srch
Alternatively, you may also set the „Customised Action“ from the logs. To the left of the quarantined email on the logs, click on the dropdown button and select „Change action for messages like this“. It will redirect you to the Customised Actions page with the parameters pre-filled out for you. Just add an order number, select „Permanently Reject“ as the action, and then save. You will have to do this for each kind of blocklist that you have.