All mail arriving at an EDZNET mailbox is checked by MailScanner, our server-side filter, before it reaches you. This article explains what it does, what the tags and warnings you might see mean, and how you can adjust the filtering for your own domains in cPanel.
How incoming mail is checked
Each message goes through several independent checks: the sender's reputation and whether they're allowed to use the domain they claim, virus and malware scanning (including inside ZIP and RAR files), blocked attachment types, content scoring, fraud and phishing link detection, and disarming of active content such as scripts, forms and tracking pixels.
Spam filtering is a scoring system, not a yes/no decision. A message that scores a little is tagged and delivered to your inbox. One that scores highly is filed in your Spam folder. Nothing in the Spam folder is deleted on arrival, but older messages are cleared automatically, so check it about once a week.
Tags and warnings you might see
| You see | What it means |
|---|---|
[SPAM] in the subject | Scored as junk. Delete it unless you recognise the sender. |
[SUSPECTED FRAUD] in the subject, or a red warning beside a link | A link goes somewhere other than where it claims to. Don't click it. |
{Virus?}, {Filename?}, {Dangerous Content?} | Something harmful or not allowed was found and removed. A text file attached to the message explains what was removed. |
{Size} | The message was over the size limit. Ask the sender to use a file-sharing link. |
Older mail may show earlier wording such as {Spam?} or {Fraud?}. They mean the same thing. Our post on how our spam and phishing protection works explains each one in more detail.
Adjust the filtering in cPanel
- Log in to cPanel and open Email › MailScanner.
- Choose the domain you want to change. Settings apply per domain.
- Adjust the settings you need:
- Low scoring spam threshold: the score at which a message is tagged. Lower catches more but gives more false positives.
- High scoring spam threshold: the score at which a message is filed in the Spam folder instead of the inbox.
- Whitelist and Blacklist: senders that always skip scoring, or are always treated as junk.
- Spam destination: the Spam folder, or a specific address such as a shared review mailbox.
- Save your changes.
Change one setting at a time and give it a week of real mail before judging the result. If you keep deleting tagged junk from your inbox, lower the high threshold slightly so more of it goes to the Spam folder automatically. Leave virus scanning on.
Good to know
- Whitelist specific addresses, not whole domains, and never your own domain. Whitelisted mail skips scoring entirely, so a forged sender address would get straight through.
- We don't recommend BoxTrapper. It sends a challenge email to every unknown sender, which annoys genuine contacts and can send challenges to forged addresses. Thresholds and the blacklist do the job better.
- If you want to sort or discard mail by its subject or content, use email filters instead.
- To report a message that was wrongly filtered, or spam that got through, forward it to us as an attachment in a support ticket. This keeps the headers we need to investigate.
