{% extends "base.html" %} {% block title %}Quarantined Messages · Email Security{% endblock %} {% block content %} {% set base = '/email/quarantine' %} {% set orgq = ('&org=' ~ sel.id) if sel else '' %} {% set filterq = ('&q=' ~ q if q else '') ~ ('&reason=' ~ reason if reason else '') ~ ('&start=' ~ start if start else '') ~ ('&end=' ~ end if end else '') %} {% include "_email_nav.html" %}

Quarantined Messages

Mail held by the inline gateway or pulled back out of a mailbox after delivery. Every row carries its SCL (Spam Confidence Level) — the same 0–9 band an Exchange admin reads off a header. −1 trusted · 0–2 not spam · 3–4 suspicious · 5–6 spam · 7–8 high confidence · 9 certain.

Export CSV {% if tab != 'flagged' %}
{% endif %}
{% if saved == 'bulk' %} {% elif saved %} {% endif %} {# ---- source tabs: the two quarantines we really operate, plus delivered-but-labelled ---- #}
{% if sel %}{% endif %} {% if applied %} {{ applied }} filter{{ '' if applied == 1 else 's' }} applied × {% endif %}
{% if tab == 'gateway' and not can_act %} {% endif %}
0 selected Last updated {{ now| pt('%b %d, %H:%M') }}
{% for r in rows %} {% else %} {% endfor %}
Date Sender Recipient Subject Reason SCL
{{ '↗'|safe if r.direction == 'outbound' else '↘'|safe }} {{ r.ts| pt('%b %d, %H:%M') }} {{ r.sender }} {{ r.recipient }} {{ r.subject }} {% if r.reasons %}{{ r.reasons[0] }}{% if r.reasons|length > 1 %} +{{ r.reasons|length - 1 }}{% endif %}{% endif %} {{ r.reason }}{% if r.clam %}
{{ r.clam }}
{% endif %}		 {% set s = r.scl %} {{ s.v if s.v is not none else '—' }}{% if s.derived %}*{% endif %} {{ s.label }}
{% if applied %}No messages match this filter. {% elif tab == 'gateway' %}The gateway is holding nothing right now. Inbound mail that trips a policy or a malware verdict lands here. {% elif tab == 'mailbox' %}Nothing is held out of a mailbox right now. {% else %}Nothing delivered-and-labelled right now.{% endif %}
{{ first }} - {{ last }} of {{ total }} {% if page > 1 %}‹ Prev{% else %}‹ Prev{% endif %} Page {{ page }} of {{ pages }} {% if page < pages %}Next ›{% else %}Next ›{% endif %}

Retention, honestly: {% if tab == 'gateway' %} gateway quarantine keeps the original .eml on the gateway's own disk, so a message can be released downstream for as long as that file exists — there is no automatic 30-day purge in this platform yet. Deleting here removes the stored copy permanently. {% else %} post-delivery quarantine records the verdict here; the message itself still lives in the mailbox provider. “Delete” moves it to the provider's Trash (Google keeps that ~30 days) and drops our record. Release puts it back in the inbox. {% endif %} {% if rows and rows|selectattr('scl.derived')|list %}
* SCL derived from the stored analyzer score — this row was written before the SCL column existed.{% endif %}

{% endblock %}