BoxTrapper: How It Works & Setup Guide Print

BoxTrapper is an anti-spam feature that protects your email inbox by requiring senders to verify their identity before their messages reach you. When someone sends you an email, BoxTrapper automatically sends them a verification request. Only after they complete this verification will their message appear in your inbox. Unverified emails are automatically deleted after a set period, keeping spam out of your account.

How BoxTrapper Works

The BoxTrapper feature uses challenge-response verification to filter spam from your inbox. Here's what happens when you receive an email:

• BoxTrapper intercepts incoming messages from unknown senders
• The system automatically sends a verification email to the sender
• The sender must click a verification link or reply to confirm they're legitimate
• Once verified, the original message is delivered to your inbox
• If the sender doesn't verify, the message never reaches you and is deleted automatically

This approach ensures that only real people, not automated spam bots, can email you. Spam bots cannot complete the verification process, so their messages are blocked.

Enabling BoxTrapper on Your Account

To activate BoxTrapper for an email account, follow these steps:

1. Click Manage next to the email account you want to protect
2. Click Enable to activate BoxTrapper

Important: When you enable BoxTrapper, it automatically whitelists any email addresses you send messages to. This means people you email won't need to complete verification.

Configuring BoxTrapper Settings

To customize how BoxTrapper works for your email account, click Manage next to the account. The BoxTrapper Configuration interface will appear with several options you can adjust.

Basic Configuration Steps

1. Click Configure Settings
2. In the Email addresses for this account field, enter any email addresses that forward mail to this account (separate multiple addresses with commas)
3. Enter your name in the Your Name field
4. Set how many days to keep logs and queued messages in the system
5. Configure the minimum SpamAssassin spam score required to bypass BoxTrapper
6. Enable or disable automatic whitelisting by selecting the appropriate checkbox
7. Optionally, select Automatically whitelist the To and From lines from whitelisted senders to whitelist addresses in the To and CC lines of incoming whitelisted emails
8. Click Save to apply your changes

Understanding the Spam Score Setting

The spam score setting determines which emails bypass verification automatically. When BoxTrapper receives an email with a spam score lower than your configured value, it delivers the message without requiring verification. The default value is -2.5. Lower (more negative) scores indicate the email is very unlikely to be spam.

BoxTrapper Verification Messages

BoxTrapper uses several automated message templates to communicate with senders. Understanding these messages helps you know what senders experience:

• verify: Sent to unknown senders requesting they confirm they're legitimate by clicking a link or replying
• verifyreleased: Sent when a sender successfully completes verification
• returnverify: Sent when the verification process fails
• blacklist: Sent to blocked addresses on your blacklist

You can customize these message templates to match your communication style, though the default messages work well for most users.

Best Practices for Using BoxTrapper

To get the most from BoxTrapper while minimizing disruption to legitimate correspondence:

• Keep your whitelist updated with regular contacts
• Review your queue periodically for legitimate messages awaiting verification
• Set a reasonable retention period (7-14 days) for queued messages
• Enable automatic whitelisting to reduce verification requests for your contacts
• Consider the impact on business communications, as verification requests may frustrate some senders

Managing Whitelists and Blacklists

BoxTrapper maintains lists of approved and blocked senders. Whitelisted addresses bypass verification entirely, while blacklisted addresses are rejected automatically. You can manually add addresses to either list through the BoxTrapper interface. The automatic whitelisting feature adds addresses you email to the whitelist, reducing the need for manual management.

When to Use BoxTrapper

BoxTrapper works best for personal email accounts that receive significant spam. It may not be suitable for business accounts where immediate email delivery is critical, as the verification process can delay first-time correspondence. Consider your email volume and communication needs before enabling this feature.

Frequently Asked Questions

What happens if a legitimate sender doesn't verify their email?

If a sender doesn't complete verification within your configured retention period, their message is deleted from the queue. You can manually review queued messages and approve them through the BoxTrapper interface before they're deleted. Check your queue regularly if you're expecting important emails from new contacts.

Will BoxTrapper interfere with automated emails like receipts or notifications?

Automated emails from legitimate services may be caught by BoxTrapper since automated systems typically cannot complete verification. To prevent this, add important automated sender addresses to your whitelist before enabling BoxTrapper, or set a spam score threshold that allows these messages through automatically.

Can I temporarily disable BoxTrapper without losing my settings?

Yes, you can disable BoxTrapper at any time while preserving your configuration, whitelists, and blacklists. Simply click Disable next to the account. Your settings remain saved and will be active again when you re-enable the feature.

How does BoxTrapper work with SpamAssassin?

BoxTrapper and SpamAssassin work together to filter spam. SpamAssassin scores incoming emails based on spam characteristics. Emails scoring below your configured threshold bypass BoxTrapper verification and go directly to your inbox. This prevents unnecessary verification requests for emails that are clearly legitimate based on SpamAssassin analysis.

If you need help configuring BoxTrapper or have questions about email security at OBHost, our support team is available 24/7. Visit our contact page or email support@obhost.org for assistance.