Admin dashboard

Quarantine & security

Keep unwanted and risky mail out of your team's inboxes, and control how people sign in. Incoming mail is spam-scored automatically; quarantine rules let you go further.

Spam filtering

Every incoming message is scored for spam before delivery. Clear spam is filed to each person's Spam folder automatically: there is nothing to configure for the basics.

1. If someone is missing a message, ask them to open the Spam folder in Mail.
2. They open the message to check it.
3. If it is genuine, they click Not spam to move it back to the Inbox.

A person's Spam folder in Mail.

1. 1Message in Spam: open it to check whether it really is junk.
2. 2Not spam: moves the message back to the Inbox.

Quarantine rules

For stricter control, add tenant-wide quarantine rules (Compliance → Quarantine rules). A rule matches on the sender, the sender domain, words in the subject, an attachment type, a minimum spam score or the spam flag, and then either holds the message in quarantine for review or rejects it outright.

• Hold: the message is kept in the quarantine inbox for an admin to release or delete.
• Reject: the message is refused at the door and never delivered.

1. Open Compliance → Quarantine rules and click New rule.
2. Name the rule and choose the action: hold or reject.
3. Fill in one or more conditions. All filled-in conditions must match.
4. Click Create. The rule applies to new incoming mail.

Compliance → Quarantine rules → New rule.

1. 1Name: a label for the rule.
2. 2Action: what happens to matching mail, for example hold it in quarantine.
3. 3Conditions: here, mail from one exact sender domain. All filled-in conditions must match.
4. 4Create: saves the rule. It applies to new incoming mail.

Quarantine inbox

Held messages appear in the Quarantine inbox. Review each one and decide.

1. Open Compliance → Quarantine inbox. The Held tab lists messages waiting for a decision.
2. Click View on a message to see its sender, rule, size and spam score.
3. Click Release & deliver if it is genuine, or Delete to drop it.

Compliance → Quarantine inbox.

1. 1Held: messages waiting for a decision. Released and Deleted show earlier decisions.
2. 2A held message: who sent it, who it was for, and which rule caught it.
3. 3Release: delivers the message to the recipient.
4. 4Delete: drops the message permanently.

Login policy

Tighten sign-in for everyone in your organisation. Repeated failed logins are also rate-limited automatically.

1. Open Mail Policies → Login restrictions.
2. Optionally list the IP addresses or ranges allowed to sign in, and the countries to block.
3. Set how long a sign-in lasts, and tick Require 2FA for admin users if you want it.
4. Click Save policy.

Mail Policies → Login restrictions.

1. 1IP allowlist: only these addresses or ranges (one per line) can sign in. Leave empty to allow all.
2. 2Blocked countries: two-letter country codes to refuse.
3. 3Session TTL: how long a sign-in lasts, in minutes. 0 keeps the default.
4. 4Save policy: applies the policy to every user in your organisation.

Troubleshooting

To see why a message was held, open it from the quarantine inbox: the matched rule and spam score tell you which rule to loosen.

Quarantine inbox, then View.

1. 1Matched rule: the rule that held this message.
2. 2Spam score: higher means more likely to be spam.
3. 3Release & deliver: sends it on to the recipient.
4. 4Delete: drops it permanently.