Google Message Security for Google Apps Administration Guide - Manual (Page 264)

264 Message Security for Google Apps Administration Guide
2. For delivered messages that seem to establish a trend, research the
messages (your research data is used in remaining steps):
a. Go to Users and click the Quarantine icon next to the user who delivered
a message.
b. Select the Delivered radio button, and click Apply.
c. Select the message in question, and click Show Header.
d. Look at the header of the message. See “Determining Whether or Not the
Message is Spam” on page 405 and “Analyzing Header Fields” on
page 410 for details on determining if the message should be
quarantined.
3. If messages from that sender address or domain regularly have a Spam rating
that is less than 1.00000, then consider adding an Approved Sender.
4. If the messages are consistently quarantined by Attachment Manager or
Content Manager settings, adjust them as appropriate so that they do not get
caught.
Quarantine Redirect and Approved/Blocked Senders
If you are using Quarantine Redirect (forwarding an organization's quarantined
messages to one account), see “Disabling and Redirecting Notifications” on
page 156 for information about how to set up notifications under these
circumstances. Use the Administration Console to add approved/blocked senders
to the organization that contains the quarantine-redirect account. Use Message
Center to add approved mailing lists to the quarantine redirect user account.
Be sure not to add approved/blocked senders to the quarantine redirect user
account rather than adding them to the account of the intended recipient.
Message Headers for Approved/Blocked Senders
The message headers include information on whether a sender is listed in an
approved/blocked list. See “Attachment Manager and Content Manager Header
Fields” on page 410.
Sender Lists and Google Apps Email Whitelists
Postini for Google Apps sender lists are made up of email addresses and/or
domain names. Google Apps Email whitelists are made up of IP addresses.
However, adding IP addresses to the Email whitelist has no effect: All of your
inbound email passes through the Postini for Google Apps service first, and is
therefore sent from the service's IP address.