Zimbra - Releasing quarantined emails

June 19, 2009

I’ve had someone send me an email with an encrypted ZIP file in it, which has got snagged in the Zimbra mail filter. Nice, just release it, right?

Not so easy.

I had a look through the admin console, and there’s no way of doing it through that. I’ve found this thread, which has a couple of methods to try it, and we’ll see which one works!

1. connect to the file system of your server (SSH or whatever)
2. browse to /opt/zimbra/data/amavisd/quarantine
3. The email should be there. When it was quarantined, you would have got an email containing: The message has been quarantined as: virus-DFSjhdshwkhed. That’s the name of the file
4. Copy the file somewhere different
5. Open the file in a text editor. It’ll show the email up the top, with the attachment below. Make sure you do actually want to open it!
6. Install uudeview if you don’t already have it:
apt-get install uudeview
7. run uudeview virus-DFSjhdshwkhed in the folder you copied it to before
8. Open ZIP file. Rejoice!