Overview

GFI MailEssentials scans emails for spam, viruses, trojans and other malware. When a failure occurs on processing an email by the anti-virus\trojan\content modules, the email is not delivered to the recipient as it may contain unsecured content. When a failure occurs on processing an email by the anti-spam modules (which are executed after successful anti-virus\trojan\content modules), the email is sent to the recipient as it has already been successfully verified for malicious content.

When processing an email fails, a copy of the email is moved to:

• When the email security module fails: \GFI\MailEssentials\EmailSecurity\FailedMails.
• When a module from spam filtering fails: \GFI\MailEssentials\Antispam\FailedMails.

The message to identify which module failed can be found in the GFI MailEssentials dashboard.

Emails may be wrongly moved to the FailedMails folder after upgrading from MailEssentials 2012 to 2015, for example. Contact GFI Customer Support if you find that legitimate emails are being moved to the FailedMails folder, or if you have a lot of emails in this folder.

Process

Once the issue is resolved, legitimate emails in the FailedMails folder can be reprocessed by following these steps:

1. Rename all .TXT files located in the appropriate failed mail folder to .EML files. Example: email1.txt must be renamed to email1.eml. To rename them in bulk,  run the following command from the Command Prompt (make sure you are in the correct failed mails folder): Ren *.txt *.eml
2. Move the renamed files for reprocessing to the following location, according to your system:

   Configuration	Location
   GFI MailEssentials is installed in Gateway Mode	..\Inetpub\mailroot\Pickup
   GFI MailEssentials installed on the same machine as Microsoft Exchange 2000 and 2003	..\Exchsvr\mailroot\vs1\Pickup
   GFI MailEssentials installed on the same machine as Microsoft Exchange 2007	..\Program Files\Microsoft\Exchange Server\TransportRoles\Replay
   GFI MailEssentials installed on the same machine as Microsoft Exchange 2010	..\Program Files\Microsoft\Exchange Server\V14\TransportRoles\ Replay
   GFI MailEssentials installed on the same machine as Microsoft Exchange 2013	..\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Replay
   GFI MailEssentials installed on the same machine as Microsoft Exchange 2016	..\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Replay

Notes:

• Emails in the Antispam / FailedMails folder are typically copies that have already been delivered. It is recommended to check using message tracking or in Microsoft Outlook to verify whether the email message has already been delivered before re-processing.
• The .PROP files in the FailedMails folder can be deleted.