Overview of The Feature
The Alibaba Mail quarantine function serves as an intermediary email container that temporarily holds potential threats such as spam, viruses, and phishing attempts. By leveraging intelligent filtering and user intervention, this feature intercepts emails before they reach the inbox, allowing users or administrators to review and manage quarantined emails. This process ensures that only verified emails make it to the inbox, while suspicious ones are handled appropriately, thus enhancing the security and user experience of the mailbox system.
Detailed Explanation
Transitional Container
The quarantine area acts as a temporary holding point for emails before they are delivered to the inbox, retaining email data for up to 30 days. This differentiates it from the spam folder, which directly collects spam emails.
Security Barrier
Employing advanced anti-spam, anti-virus, and anti-phishing technologies, the mailbox system conducts real-time analysis of email content, sender details, and attachments, automatically directing suspected harmful or unnecessary emails to the quarantine area. This minimizes the need for manual filtering and effectively shields users from direct attacks by malicious emails, thereby reducing the risk of inadvertently activating threats.
Email Review and Handling
Within the quarantine area, users or administrators can examine, filter, and search through emails, making judgments based on criteria like sender and subject. Emails that are mistakenly caught can be released to the inbox, preventing accidental deletion; confirmed spam, viruses, or phishing emails can be permanently removed to mitigate any further impact on users, ensuring only genuine threats are intercepted.
Feature Operation

Access the quarantine area by clicking the top right corner of the mailbox and selecting the account.
My account: The account you are currently logged into.
Authorized account: Manage another person's account with their authorization in the quarantine area.
Quarantine Mails
Retains email data for up to 30 days.

Enter the filter criteria and click Search.
Filter Criteria
Sender, subject and time range.
Returned Data
Sender, subject, time, reason for interception and operation.
Preview the content by clicking on the email subject.

Determine the necessity of emails in the search results based on details like the sender.
If needed, select the emails to be released to the inbox and click Release or Release and add to allowlist.

Release and add to allowlist
Selected emails will be delivered to the inbox, and future emails from allowlisted addresses (or domain names and IPs) will bypass the quarantine and be delivered directly.
You may manage allowlist rules in the quarantine area rule management.
You can apply these settings to quarantine emails simultaneously (please be noted that task execution may take some time; please refresh the list later to verify).

If confirmed as spam, select the emails to be permanently deleted and click Delete or Delete and add tp blocklist.

Delete and add to blocklist
The selected emails will be permanently removed from the quarantine area, and future emails from blacklisted addresses (domain names and IPs) will be automatically deleted.
After deletion, these emails will no longer be visible to other users in the quarantine area and will not be delivered to the inbox. You may manage blacklist rules in the quarantine area rule management.
You can apply these settings to quarantine area emails simultaneously (please be noted that task execution may take some time; please refresh the list later to verify).

Authorization Management
Up to 10 accounts can be authorized for joint management.
How to authorize others to manage the current account's quarantine area?
To delegate management of the quarantine area to another account, click Add Authorization.
Enter the manager account that requires quarantine area permissions and click OK.

Once authorized, the manager will see the authorized account option upon accessing the quarantine area. 
Note:
The authorized user must exist; otherwise, an error message will appear when adding.

How to revoke authorization for others to manage the current account's quarantine area?
To remove management rights, please select the relevant account and click Delete.
Quarantine Rules
Quarantine rules are an integral part of the anti-spam system. Emails from senders on the blacklist are automatically rejected by the anti-spam rules, which take precedence over email filtering rules.
Blocklist
Emails from blacklisted addresses (including domain names and IPs) will be automatically deleted. After deletion, they will not be visible to other users in the quarantine area nor delivered to the inbox.
To add to the blocklist, click Add to blocklist, select the email address, domain, IP, or IP segment in the pop-up window, enter the relevant details, and click OK.
To remove entries from the blocklist, use the filter criteria to find them, then select the emails to be deleted and click Delete.
Filter criteria
Enter the details to perform the search.
Returned data
Email address, domain name, IP and operation.
Allowlist
Emails from addresses in the allowlist (including domain names and IPs) will be delivered directly to the inbox.

Quarantine Log Query
Navigate to Settings--Account and Security--Log Search--Email Log--Quarantine Reveived Log to review the quarantine emails log.

Go to Settings--Account and Security--Log Search--Operation Log--Quarantine, and examine the quarantine area's operational activities.

For email admin, please refer to the following for related operations: