BoxTrapper: sender verification and reviewing the queue

BoxTrapper, available in cPanel, is a challenge-response spam filter. It can be impractical for automated messages, mailing lists and senders who cannot complete the verification.

This tool can hold email from unknown senders. The result also depends on its configuration: a message may skip the hold depending on the SpamAssassin threshold, while blacklist or ignore list rules may reject or delete it instead of queueing it.

When an unknown sender writes, the server sends them a request. The sender, not the recipient, must reply or use the verification link for BoxTrapper to release the message and add them to the safe list. If they do not, the message stays in the queue until it expires.

BoxTrapper lets you manually maintain a whitelist and a blacklist (blocked senders), customise the confirmation emails, review the pending queue and logs, and adjust the configuration so it works together with SpamAssassin.

Check its impact before turning it on

In cPanel > BoxTrapper, click Manage next to the account. From there you can turn the feature on or off, review its settings and check pending messages.

Pay particular attention to password recovery emails, invoices, forms and other automated messages: their sender may not respond to the verification request. A safe list and the SpamAssassin list are different controls.

Find a held message

In Review Queue, select the day and open the message to check the sender and content. If it is legitimate, use Whitelist and Deliver when you want to allow that sender and deliver the message. Do not release in bulk anything you have not reviewed.

Review Log helps you understand what happened. Also check how long the queue is kept: a message that has already expired is not recovered simply by allowing the sender afterwards.

After changing the settings, test with another account of your own and check both the request and the final delivery. If you turn BoxTrapper off, check specifically what is still pending; do not assume that turning it off empties or delivers the whole previous queue.