Users do not see distribution list messages in their Spam Quarantine
A Scanner does not deliver a spam message that is sent to a distribution list in the intended recipients' Quarantine mailboxes. Instead, the message is delivered to a special Spam Quarantine mailbox for that distribution list.
Undeliverable quarantined messages go to Spam Quarantine postmaster
If Spam Quarantine cannot determine the proper recipient for a message that is received by Symantec Messaging Gateway, it delivers the message to a postmaster mailbox accessible from Spam Quarantine. Alternatively you can specify Delete message sent to unresolved email addresses in the Quarantine Settings page. Your network may also have a postmaster mailbox you access using a mail client that is separate from the Spam Quarantine postmaster mailbox. If the LDAP server fails or has been improperly configured, however, spam messages to non-LDAP-recognized addresses are held in the Scanner's deferred queue (up to the delivery retry and timeout limits) and not in the Spam Quarantine postmaster mailbox.
No notification messages are sent to the postmaster mailbox.
Users receive notification messages, but cannot access messages
If users who cannot access their messages are in a different Active Directory domain from users who can access their messages, configure Directory Integration in the Control Center to use a Global Catalog. Alternatively, ensure that you have a directory data source for each active directory domain.
To configure access to an Active Directory Global Catalog, specify the port for the Global Catalog, usually 3268, on the Administration > Settings > LDAP/Edit page.
You may notice multiple copies of the same message when logged into Spam Quarantine as an administrator. When you read one of the messages, all of them are marked as read. This behavior is intentional. If a message is addressed to multiple users at your company, Spam Quarantine stores one copy of the message in its database, although the status (read, deleted) of each user's message is stored per-user. Because the administrator views all users' messages, the administrator sees every user's copy of the message. If the administrator clicks on Release, a copy of the message is redelivered to each affected user mailbox.
Maximum number of messages in Spam Quarantine
The total Quarantine size is calculated by summing the block size (size on disk) of each message file in the message store. Be aware that the actual disk usage will be higher due to other unaccounted disk usage such as database tables and indexes.
This message may occur if there is a problem with message traffic on your inbound or outbound mail flow. It occurs when the message cannot be delivered to any of the configured non-local relays (default) or cannot be delivered to the SMTP host configured on the Administration > Control Center > SMTP page. It may also occur if a Scanner is not installed on the same appliance as the Control Center and the SMTP host setting has not been set for a host that has an MTA. This causes delivery problems for releasing messages from Spam Quarantine.
Check the base DN query. A more specific DN query returns faster than a more general one. For example, "ou=quarantine-test,dc=brightmail,dc=com" is a more specific query than "dc=brightmail,dc=com."
When an administrator clicks on one spam message, multiple messages are marked as 'read'
This situation occurs when the same message is sent to different recipients. When an administrator accesses one instance of the message, then all instances of that message (regardless of the recipient) are marked as read.
The reason this situation occurs is because the administrator read flag is associated to the message itself.
This situation does not occur for end-user Spam Quarantine. That read flag is associated to each message/recipient combination.
Imported Document ID: HOWTO53928
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe