Summary
In IMSS and SMEX environment, when IMSS Anti-Spam rule is configured to Tag and Deliver, ScanMail Attachment Blocking will not block the email.
When the attachment blocking is not applied to emails detected as spam, the following logs appear in the SMEX_Master.log:
[filterattachmentblocking.dll][abf_AttachmentBlockingFilter.cpp( 318)] [DEBUG] This is SPAM mail which will be quarantined to user's SPAM folder, skip to scan.
Details
To apply Attachment Blocking to mails detected as spam:
- Open the Registry Editor. Important: Always back up the whole registry before making any modifications. Incorrect changes to the registry can cause serious system problems.
- Go to HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\CurrentVersion and add the following Key: EnableSpamMailAttachmentBlocking
Type: REG_DWORD
Data value:Where data value is:"0" = (default) ScanMail skips attachment blocking scans on quarantined spam email messages."1" = ScanMail performs attachment blocking scans on quarantined spam email messages. - Restart the SMEX Master Service for the change to take effect.
