It seems like your browser didn't download the required fonts. Please revise your security settings and try again.

Inbound Email Precedence

  • Last updated on

Table 1. Inbound Email Precedence

Behavior/SettingAntivirus Scanning?ActionReason
Unmanaged user and default unmanaged policyNoblockedInvalid recipient
More than 40 received headersNoblockedPossible mail loop
Account suspendedYesallowedAccount suspended
Client IP address is on redelivery allow listNoallowed
Empty email body or 1 or 0 headerNoblockedmalformed mail
Sender policy is exempt and the sender is the recipientYesallowedSender policies
Sender policy is set to quarantineNoquarantinedSender policies
User policy is set to exemptYesallowedRecipient policies
Default scan policy is set to exempt for all usersYesallowedRecipient policies
Message content filter is set to allowYesallowed

Message content filters:
Subject Content
Header Content
Body Content
Attachment Content

IP policy for valid first non-trusted forwarder is set to exemptYesallowedIP address policies
User policy is set to blockYesblockedRecipient policies
IP policy for valid first non-trusted forwarder is set to blockYesblockedIP address policies
Sender policy for valid first non-trusted forwarder is set to blockNoblockedSender policies
Attachment policy is set to block or quarantineNoblocked / quarantinedAttachment filter
Block if attachments are encryptedYesblockedContent protected
Message content filter is set to block or quarantineNoblocked / quarantined

Message content filters:
Subject Content
Header Content
Body Content
Attachment Content

Email category or IP/Domain database is set to allow / block / quarantineYesallowed / blocked / quarantinedEmail category
Bulk Email is set to block or quarantineNoblocked / quarantinedBulk email detected
Linked domain policy is set to block or quarantineNoblocked / quarantinedContent URL
Linked domain policy is set to ignoreYesdependent upon scanning resultsContent URL
Recipient blocked by reputation-based blockingNoblockedReputation-based blocking
Rate control policy exempts accountYesdeferredRate control, rate control exemptions
Recipient blocked based on real-time block list (RBL)NoblockedRBL
Deferred by Barracuda real-time system (BRTS)YesdeferredBRTS System
Quarantine by BRTS Noquarantine BRTS System
Blocked by reputation checkNoblockedIntent analysis
Deferred by NameserverYesdeferredSuspicious Nameserver
Blocked by local intent analysis checkNoblockedIntent analysis
Blocked by multi-level intent analysis checkNoblockedIntent analysis
Deferred by multi-level intent analysis checkYesdeferredSuspicious content
Blocked or quarantined by DomainKeys Identified Mail (DKIM) inspectionNoblocked / quarantinedDKIM inspection
Blocked due to no PTR recordNoblockedNo PTR record
Sender Policy Framework (SPF) check blocks client IPNoblockedSPF
Blocked by Barracuda Anti-Fraud Intelligence (BAFi) score checkNoblockedAnti-fraud
Deferred by BAFi score checkYesdeferredSuspicious BAFI score
Blocked by image analysisNoblockedImage analysis
Deferred by antivirus scandeferredSuspicious
Blocked by antivirus scanblockedAntivirus
Blocked by Advanced Threat Detection (ATD)NoblockedATD
Blocked based on Cloudscan scoringNoblockedCloudscan score
Deferred by wait list checkNodeferredSuspicious
Last updated on