Tracing which rule is firing?
Outlook 2003 connected to Small Business Server (Exchange 2007 SP1)
also running GFI Mail Essentials 14 for antispam.
I'm the IT Manager. One user sometimes emails himself stuff just to
get it in his inbox. Recently all these emails started to get moved to
his GFI Spam folder, which is where GFI Mail Essentials puts what it
thinks is spam. I've done message tracking on the Exchange server, and
checked all the GFI logs, and the messages from him to him are not
being rerouted by GFI; they are all being delivered to his inbox.
Sample message tracking log entry:
#Softwa Microsoft Exchange Server
#Version: 8.0.0.0
#Log-type: Message Tracking Log
#Date: 2009-11-24T00:00:13.634Z
#Fields:
date-time,client-ip,client-hostname,server-ip,server-hostname,source-context,connector-id,source,event-id,internal-message-id,message-id,recipient-address,recipient-status,total-bytes,recipient-count,related-recipient-address,reference,message-subject,sender-address,return-path,message-info
2009-11-24T14:51:12.912Z,,{servername},,{servername},,,STO REDRIVER,DELIVER,70787,6A2C4E678ADC3A458C3121419B , ,,4208,1,,,From
,{username}@{domainn ame}.com,2009-11-24T14:51:12.762Z
He has a ton of rules. I suspect that one of these is moving the
messages from him into the GFI antispam folder. I can't figure out
which one by looking at them.
How can I trace what happens to a message after it hits his inbox?
|