Demystifying the Spam Quarantine Report

July 6, 2022 electricoak

Understanding your spam quarantine report

When you receive a spam quarantine report, it should look like this.

If you have more than one active email address, you may get several reports.  Make sure you’re looking at the right one by looking at the box circled in red below.

You don’t need to wait for a report!

If you’re looking for a particular email, and don’t see it in the list, scroll down to this link.

That will take you into your entire quarantine inbox.
It looks like this:

By default, the report will sort email by score, not by arrival time.

Clicking the Date column until you see a down arrow will show the most recently delivered emails first.

When you see the email you need, check the box next to it, then scroll down to the bottom and click Allow or Release.

  • Allow sends the message and allows future messages from the sender.
  • Release sends the message to your inbox.
  • Block prevents future messages from the sender.
  • Delete removes the message from the quarantine report.

To summarize, the four steps to releasing an email are:

  1. Find a recent spam quarantine report.
    (Search for “Spam Quarantine Report”)
  2. Click on the link, “To view your entire quarantine… Click here”
  3. Sort the list by Date.
  4. Allow or Release the quarantined email.

Those are the most critical steps.  If you want to go deeper, read on!

Inside the quarantine inbox, double clicking an email will let you read it.  From the reading window, you can click on the Options tab to Release, Allow, or Delete the message.

The Settings tab.  You can change your password and set up two-factor authentication on the User Management tab.  The Quarantine Report Settings tab is useful – you can use it to change how often the report email comes and what emails appear in it.

Clicking on Filter Rules will show what emails and domains you’ve blocked (User Block List) and what emails and domains you’ve allowed (User Allow List).  You can manually add and remove emails and domains here.

Most of the functions inside the quarantine inbox are also visible in the quarantine report email.

Back to the Spam Quarantine Report email.

You can click on Deliver, Delete, Allow, or Block on links next to recent emails right here.

  • Deliver will send a message to your inbox.
  • Allow takes it a step further, it will deliver a message and it will prevent future messages from the sender from being quarantined.
  • Block will block the sender and force all of their future correspondence into the quarantine.
  • Delete will remove the email from your quarantine report.

You can change a lot of report settings from the Spam Quarantine Report email.

The first four links affect how often the report will be delivered, daily, weekly, on Fridays, monthly, or never.  We don’t recommend never.

  • “All quarantined items” will make for a longer report email, while “New items since last report only” will keep it condensed.
  • “To view your entire quarantine… Click here” was covered already.
  • “Send me a new report now…” will send a new quarantine report email.  The downside of using these links is that the list will be sorted by score, rather than by time received.
  • “To delete all of the messages: Click here” is probably not worth using.  Messages are automatically deleted anyway, and a worthwhile message could easily be buried among the junk.

Finally, Why am I getting more than one report?

The spam quarantine is set to intercept email before it lands in your email server.  It’s like a checkpoint on a road leading into town, completely independent of every other checkpoint.

For instance, jdoe@company.com and johndoe@company.com are both viable email addresses that land in John Doe’s mailbox, but the spam filter doesn’t know that.  If people are sending email to both addresses, John is going to see regular reports from both.  Checking the johndoe@ report for an email that went to jdoe@ will be fruitless.

Click here for a pdf version of this report to share with colleagues!