quarantine virus attachment works only if Remove all Attachments is selected

[leeyc0]

I tried to configure mail filter to remove virus attachment, but found that it only works if "Remove all Attachments" is selected. Virus attachment was still delivered if "Remove all Attachments" is not selected. Is it a bug or intended behaviour?

PMG version: 9.1.2

 

[Stoiko Ivanov]

how exactly does your rule for removing look like? - usually you just match with the What object 'Virus' and the action 'Quarantine' - the mail ends up in the Virus Quarantine...

 

[leeyc0]

how exactly does your rule for removing look like? - usually you just match with the What object 'Virus' and the action 'Quarantine' - the mail ends up in the Virus Quarantine...

This is the rule. Quarantine attachment only works if remove all attachment is selected.

 

[Stoiko Ivanov]

Why don't you simply use "Quarantine" as Action? - if it's indeed a virus - I would not send the text parts on to the user...

 

[leeyc0]

Why don't you simply use "Quarantine" as Action? - if it's indeed a virus - I would not send the text parts on to the user...

False positive matters (and I already seen some in clamav).
I'd rather deliver the text than completing missing the email and wait the customer to call us.

 

[Stoiko Ivanov]

This is not possible with PMG - the virus what object matches the complete mail - not a specific part (the Content-type/Filename objects match only the affected part).

 

[leeyc0]

No problem, it is acceptable to remove all attachments and deliver the text only. Just want to confirm if it is intended behaviour.