background

SpamExperts KnowledgebaseEmail Archiving

Exchange Journaling

This page describes how to setup Journaling in Microsoft Exchange and set-up processing of these message with SpamExperts.                       The steps below are for Microsoft Exchange 2010. 

To use the Microsoft Journaling option with SpamExperts, the domains you are archiving for need to be already added to your cluster.

Journaled reports processing

Journal reports sent to the specified address are parsed and the following information is extracted:

  • Original sender
  • Original recipients
  • Original Messages

After extraction the original message is archived instead of the journal report. In the Log search page you will be able to see log for both the journal report and the original message/recipients under the same Message ID. 

Steps to enable Journaling:

In Exchange 2010

Setup DNS lookup send connector:

  • Open EMC
  • Organization Configuration
  • Hub Transport
  • Send Connectors
  • Right click and select New Send Connector
  • Select "Internet" in the drop down
  • On the next page add new address space with * (representing all domains)
  • On the next page select "Use domain name system (DNS) "MX" records to route mail automatically"

Be Advised: Servers will most likely already have a send connector for external emails, this should change according to local set-ups.

If the current server setup is too complicated instead of a catch-all address space (*) the user can specify the exact domain and set the cost as low as possible. This should prevent conflicts with other send connectors.


Add new External Mail Contact for journaling address:

  • Open EMC
  • Recipient Configuration
  • Mail contact
  • Right click and select New Mail Contact
  • Select New Contact
  • Select "Specify the Organizational unit" and chose the "<root domain>/Users" one
  • Edit "External e-mail address" and add your journaling email address, for example: journal@example.com
  • Fill out the rest of the details form

Add new Journal rule:

  • Open EMC
  • Organization Configuration
  • Hub Transport
  • Journal Rules
  • Right click and select New Journal Rule
  • Select the mail contact added at step 1 at "Send Journal reports to e-mail address"
  • Select "Internal" Scope
  • Select "Journal messages for recipient" and select the Dynamic Distribution Group for this domain

Configure Journaling from the SpamExperts interface:

  • Log into the SpamExperts Control Panel as Admin
  • Overview
  • Select your domain, for example: example.com
  • Archive > Archived Recipients
  • Enable Journaling, if its current state is disabled
  • Add the journaling recipient

Be Advised: When you set the Journaling recipient, this will automatically whitelist the recipient and blackhole it.

Global Journal Address

In the Status page, under Archive, you will find the global journal address. This is a custom address available for each domain which allows you to set up Journaling without having the MX records pointing to the filtering server. You can use this in your Journaling setup directly, without having to configure anything in the Archived Recipients. 

In the example above, the hostname: server1.example.com will be pointing to a hostname of the cluster that you are using. This will automatically be detected in case the MX records of the domain are pointing to the filtering server. If the MX records are not pointing to the filtering server, then you will have to manually add it instead.



Was this article helpful?

Related articles

Search result for :