Viewing Quarantined attachments?

32bitbradley

New Member
Nov 26, 2018
5
0
1
20
Hi everyone, I'm looking into implementing PMG for our business, currently in the testing stages.

I have a quick question that I've not been able to find an answer too.

Is there a way to view/download quarantined email attachments so they can be investigated further?

This would be really useful!

Cheers! :)
 

dietmar

Proxmox Staff Member
Staff member
Apr 28, 2005
16,503
320
83
Austria
www.proxmox.com
The current quarantine interface allows you to see the RAW email data, so you can simply copy/paste.
 

32bitbradley

New Member
Nov 26, 2018
5
0
1
20
The current quarantine interface allows you to see the RAW email data, so you can simply copy/paste.
Thanks, that's great. I can see the file name and extension in the Raw email info. Is there a way I can download the actual file?

For example a quarantined .exe file, can I download the .exe so it can be analysed with Hybrid Analysis?

If not via the web interface, is there a directory that they're restored in so I can use SFTP or SSH to grab a copy?

Really appreciate your help on this! :)

Cheers
 

tom

Proxmox Staff Member
Staff member
Aug 29, 2006
13,688
435
83
  1. go to the quarantine web interface and select the needed email
  2. switch to raw view
  3. copy all text and paste into into a new file
  4. now you can open this file in your email client, e.g. thunderbird
 

32bitbradley

New Member
Nov 26, 2018
5
0
1
20
  1. go to the quarantine web interface and select the needed email
  2. switch to raw view
  3. copy all text and paste into into a new file
  4. now you can open this file in your email client, e.g. thunderbird

Ah! of course, the attachment is encoded at base64 towards the bottom of the raw email! I never knew that haha!

Thanks for the help both! :)
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE and Proxmox Mail Gateway. We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get your own in 60 seconds.

Buy now!