How to retrieve header information from quarantined messages, and how to add this header information to the Allowed Mailhosts list (905973)

MORE INFORMATION

How to retrieve header information

To retrieve header information from messages that have been already been quarantined, follow these steps:

1. Start the Sybari Client (SybariClient.exe).
2. In Shuttle Navigator, click Report, and then click Quarantine.
3. Click a message that has been quarantined, and then click Save As.
4. Save the message as a .txt file.
5. Open the .txt file to view the header information.

Alternatively, if you configured Antigen to send a Content Administrator notification when a message is quarantined, you can configure the Content Administrator notification to include the MIME header of quarantined messages. To do this, follow these steps:

1. In Shuttle Navigator, click Report, and then click Notifications.
2. In the right pane, click Content Administrators.
3. Right-click the body of the notification, point to Paste Keyword, and then click MIME Headers.
4. Click Save.
5. After a message is quarantined, review the Content Administrator notification to view the header information.

To view a complete list of Keyword substitution macros, see Appendix C in the Antigen User Guide.

How to add header information to the Allowed Mailhosts list

1. In Shuttle Navigator, click Filtering, and then click Filter Lists.
2. In the right pane, click Allowed Mailhosts, and then click Edit.
3. Click Add, and then type the name of the domain that you want to allow.
   
   The domain name appears in the .txt file of the quarantined message that you created. Or, the domain name appears in the body of the Content Administrators notification. You can type a domain name or an IP address. Make sure to type a wildcard character (*) before each domain name.
4. In Shuttle Navigator, click Settings, and then click General Options.
5. In the Maximum Allowed Mailhosts Lookup box, type a number that is appropriate to your organization's messaging topology.
   
   Type a number that is equal to the number of relay servers that have public IP addresses in your organization plus one. For example, if your organization has two public IP addresses that an e-mail message can pass through, type 3 in the Maximum Allowed Mailhosts Lookup box. When you type 3, the last external IP address will be checked against the Allowed Mailhosts list. The internal public IP addresses may be from relay servers that are located inside the perimeter network (also known as DMZ, demilitarized zone, and screened subnet).
6. In the General Options panel, click Skip Content Filtering for Allowed Mailhosts if you want Antigen to skip Content Filtering or RBL Filtering.
7. Save your changes.

Note The entries in the Allowed Mailhosts list will not override entries in the Rejected Mailhosts list.