How do I verify the score a missed message received in SpamCensor?


This article applies to:

  • Trustwave MailMarshal (SEG)

Question:

  • How do I verify the score a missed message received in SpamCensor?
  • How do I log all spam (SpamCensor) results?
  • How do I verify the score a missed message received from SpamProfiler (MailMarshal 6.7 and above)?

Procedure:

You may want to view the spam scoring of messages that were not blocked by MailMarshal.  By default, MailMarshal will only log results to the engine log file if the SpamCensor or SpamProfiler triggers. If you want to log all results, regardless of whether or not the features trigger, you will need to modify the registry of the MailMarshal Server.

Warning: Using the Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Trustwave cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Make sure that you backup your Registry prior to making any changes.

  • In MailMarshal 10.0 and above, open the Management Console and navigate to Advanced Settings. Edit or add the following value:
    • Name: Engine.LogSpamAlways
    • Type: Boolean
    • Value: True (selected)
  • In MailMarshal 8.X and below, open the Registry Editor on the Array Manager. Within the base registry key, navigate to \Default\Engine
    • In version 8.X: HKEY_LOCAL_MACHINE\SOFTWARE\Trustwave\Secure Email Gateway\Default\Engine
    • For information about the registry location for each version, see article Q10832.
    • Add or edit a DWORD value named LogSpamAlways with value 1.
  • Save your registry settings or configuration settings.
  • Commit the configuration changes and restart the MailMarshal Engine service on each node.

 

    This article was previously published as:
    NETIQKB39846

    Last Modified 4/1/2020.
    https://support.trustwave.com/kb/KnowledgebaseArticle10534.aspx