Mail Quarantine
Email messages and their components, such as attachments, are put into Mail quarantine instead of traditional file quarantine. The Mail Quarantine provides for a more convenient way of managing spam, infected attachments containing malware or phishing messages. There are different reasons why email messages are put into the Mail Quarantine, depending on which ESET Mail Security protection module handles the message (Anti-Malware, Antispam, Anti-Phishing, Sender Spoofing protection or Rules).
Filtering by icons
You can use icons to filter messages to see attachments, emails or emails with attachments only.
Timespan
Select the time span for which you want to see quarantined emails. When you select Custom, you can specify a range (Date from and Date to).
Cluster nodes
Select the cluster nodes for which you want to see quarantined emails.
Quick search
Type a string into the text box to filter displayed emails (all columns are searched).
Type
Use check boxes to filter further by type (spam, malware, rule, phishing, or sender spoofed).
|
Mail Quarantine manager data is not updated automatically, we recommend that you click Refresh |
regularly to see the most current items in the Mail Quarantine.
Release
Releases email to its original recipient(s) using Replay directory and deletes it from quarantine. Click Yes to confirm the action. If quarantined item is an attachment from mail-disabled public folder, Release button is not available.
|
When releasing an email from quarantine, ESET Mail Security ignores To: MIME header because it can be easily spoofed. Instead, it uses the original recipient information from RCPT TO: command acquired during the SMTP connection. This ensures that correct email recipient receives the message which is being released from quarantine. |
|
If you run a clustered environment and release a message from the quarantine, the message will not get quarantined again by the other ESET Mail Security nodes. It is achieved by the synchronization of the rules between the cluster nodes. |
Release to
If you do not want to release an email to all recipients, use this option to select specific recipients that will receive the released email. This option is available only for messages with multiple recipients.
Delete
Deletes items from quarantine. Click Yes to confirm the action. Items deleted via the main program window are removed from the quarantine view but are still kept in storage. These are automatically deleted later (after three days by default).
Delete permanently
Removes items from the quarantine view and deletes them from the storage. Click Yes to confirm the action.
Quarantine mail details
Double-click the quarantined message or right-click and choose Show Details. A new window will open with details about the quarantined email message. You can also check the original RFC email headers for further details.
Quarantine attachment details
When an attachment is double-clicked, the detail dialog is different compared to email message detail dialog. RFC headers are unavailable; an area with an attachment envelope text is displayed. You can type the custom text of the attachment envelope when releasing it from mail quarantine.
Actions are also available from the context menu. If desired, click Release, Delete or Delete permanently to take action with a quarantined email message. Click Yes to confirm the action. If you choose to Delete permanently, the message will be deleted from the file system as well, as opposed to Delete which will remove the item from the Mail quarantine manager view.
