Notifications to users (BANNED contents...)

[sysGSRL]

Hello,
we got several notifications like this:

Subject: BANNED contents from you (.asc....)
Mail text: BANNED CONTENTS ALERT Our content checker found banned name: .asc,VSI7636975231.js in email presumably from you <our-mail-address> to the following recipient:
-> <our-mail-address>

This kind of notifications says that we sent an e-mail that conflicts with our attachment policy.
The problem is that our users didn't sent the "original" e-mail, (I think that some spammer got our e-mail addresses), they only recieve the notification.
I would like to know if is it possible to disable this kind of notification.
I also disabled the notification to my users when someone else tries to send us an e-mail with a dangerous attachment.

Thank you very much

[moren]

We see the same thing here lately. I do not have the answer but I am also looking for a remedy.

[sysGSRL]

I would be happy if there would be an option for disable all the notification from our "Content-filter".
This is a backscatter situation, and I think is absurd there is no way to stop it.

[sysGSRL]

Hello everyone,
I think I may found a solution to disable the notification to the sender when a mail got banned.
I'm gonna wait some days to see if they fully works, but here the steps I follow:
- nano /opt/zimbra/conf/amavisd.conf.in
- modified row: $final_banned_destiny
It was "D_BOUNCE" and now it's "D_DISCARD"
- zmamavisdctl restart

Hope I could help someone, I lost one day with this.

[MightyGorilla]

Same problem started occurring to us recently. We've been using Zimbra since v6 era and while we've seen notifications to recipients before, we hadn't seen them to senders. We're running v8.6.0_GA_1153 at the moment, and do not have any kind of customizations in amavisd.

Appreciate the heads up on a potential resolution!

[m.slavov1155]

Hello,

I want to disable notification to sender if the messages is blocked because spammers send messages to me and I send them back notification
and include in blacklist as "namespace mining spammer". You can read about this on the following page(550 SC-002).

https://mail.live.com/mail/troubleshooting.aspx#errors

[evilside]

The D_REJECT is better option, because the sender is notified.

https://blog.bravi.org/?p=683

Grettings.

[m.slavov1155]

It's work good but mail server doesn't send virus messages to admin mail box.
Thank you

[evilside]

I was wrong, D_DISCARD is better, with D_REJECT the mail queue it filled of messages to inexistents domains.

Anyway, the admin account is alerted when these messages arrive, I created a filter for move its to an special folder with auto delete every 30 days.

[m.slavov1155]

Hello, everyone

I have problem. I blocked rar extension and when I try to send message with rar atachment I don't have notification that
can't send this message. I have this problem with Zimbra 8.6 but I also have Zimbra 7.1.3 wtih restriction to send rar extension and when I try to send message with rar I recieve message that I can't.Any ideas?

Thank you in advance.