Our edge MTA runs Symantec Brightmail and tags messages as spam before passing them along to Zimbra. However, the way it tags spam is a bit awkward:
* First it adds the header "X-Brightmail-Tracker: random-string" if a message is spam
* Then it adds the header "X-Whitelist: TRUE" if the sender is whitelisted. This means the message is not spam.
How can I configure the Zimbra server to match this "double header" rule and discard or quarantine these messages?
This is ZCS 4.5 Network Edition Trial
Thanks for suggestions,