Quarantine bug in MailSecurity

[katbert 3]

In Eset MailSecrity 6.3.1005.2 I created rule to qarantine messages with *.js attachment (transport protection)

But can't resore messages from Mail Quarantine tab: after press Restore button, message drop again to qarantine

 

[Marcos 5,455]

This is normal and expected. You must create a rule or temporarily disable the existing one to prevent it from being applied after restoring the mail from quarantine.

[katbert 3]

This is normal and expected. You must create a rule...

Which rule?

[Marcos 5,455]

Which rule?

 

The rule that moved the email to quarantine. You wrote  "I created rule to qarantine messages with *.js attachment"".

[katbert 3]

Rule already exist and work. Temporarily disable it is only one way to restore some messages from quarantine?

[filips 44]

Returning of the message to quarantine after "Release" is caused by the fact that the rule still applies (e.g. subject still contains some forbidden words).

To avoid repeated quarantining you can:

1. add "Internal message" "False" condition - rule will be applied to external messages only (the message is released using pickup directory - will be marked as internal and the rule will not hit again)

OR

1. add "Message headers" "does not contain" "X-ESET-Rules: myrule" condition
2. add "Add header field" "X-ESET-Rules: myrule" action

-> when the rule is applied, it will add "X-ESET-Rules: myrule" header to the message - and it will not hit again for messages that have such header (when releasing)
 

[katbert 3]

Great idea! Thanks!