Quarantine

Syneto’s quarantine is a specialized containment area that primarily holds infected emails & spam. Emails may also enter the quarantine on an email filter’s instruction, or when there’s a problem with the scanning engine – situation when all the emails are quarantined for obvious reasons of not spreading an infection. To access the quarantine there are two methods: either use the web interface or the command line utility qmanager.

Quarantine Management From Web Interface

For quarantine management interface go to Email -> Quarantine. It offers the possibility of searching the quarantine for emails and navigate through it. The checkbox on the left of each email message can be used to select multiple emails for:

deletion
send them to their original recipient
send them to an arbitrary email address

The “Actions” dropdown menu also allows for the “flushing” of all mails stored in the quarantine.

The ‘Show’ drop down box allows to select messages based on the reason they entered the quarantine and the ‘Settings’ label offers two configuration options for the quarantine:

maximum size of the email that can be quarantined
how many days a message is kept in the quarantine before it is deleted

Figure 1. Quarantine management interface

Quarantine Management From Console

qmanager is a console program which offers a way to inspect, send emails from and delete the quarantine. It selects the email from the quarantine based on an expression who’s grammar can be inspected by calling qmanager -b or qmanager -h. A few examples may show you the way it can be used:

show shortened info about all messages with status virused:
```
$ qmanager status like virus
```
if the list is too large, you can show only 10 messages:
```
$ qmanager -l 10 status like virus
```
you want to see only the viruses sent to user foobar:
```
$ qmanager status like virus and receiver like foo
```
however, there are two users who’s name begin with foo: foobar and foobaz; to select precisely foobar we can use the operator is:
```
$ qmanager status like virus and receiver is foobar
```
to see all the messages that doesn’t have a VirusFound status use:
```
$ qmanager status notlike virus
$ qmanager status isnot VirusFound
```
you want to send all the emails from the quarantine to their original recipients:
```
$ qmanager -s
```
you want to send only the emails for user foobar:
```
$ qmanager -s receiver like foobar
```
you listed a bunch of emails with status VirusFound but you think one of them should be closely examined; you get the id of the email and you display the whole message with:
```
$ qmanager -m id is 9567
```