Summary
The administrator wants to know if SMD removes all the emails from MAIL.BOX and logs the mails after specifying the Block option as the action for the "Action when Sender and Recipient Match" rule in the General tab of the Mail Scan rule.
Click image to enlarge.
Details
Yes. When the recipients do not receive the emails, this indicates that SMD deleted the mails that match the rule.
However, SMD does not log blocked emails in the smvlog.nsf file because SMD prevented the mails from going through the Policies.
To block specific senders, the administrator should use the Blocked Senders list of the Trend Micro Anti-spam Configuration in the Mail Scan tab of the policy. If the sender matches the information in the list, SMD creates a log entry in smvlog.nsf and names the entry depending on the pre-configured action (Blocked Spam Messages, Quarantine Spammed Messages, or Passed Spam Messages).
