MxGuard Help — Live feed

Live feed

The live feed shows every message that hits MxGuard in real time. New entries appear at the top automatically — no refresh needed.

Columns explained

ColumnWhat it means
Time Local time the message was scanned (Europe/London).
From SMTP envelope sender (the address used in MAIL FROM, not the visible From: header).
To SMTP envelope recipient (the address used in RCPT TO).
Score Final score 0.00–1.00. Colour-coded: green < 0.50, yellow 0.50–0.85, red ≥ 0.85.
Verdict clean / tag / quarantine / reject (scanner) or rejected (SMTP-time)
Size Message size in KB.
Subject Message subject. MIME-encoded subjects (=?utf-8?B?...?=) are decoded automatically to readable text including emoji and non-Latin characters. A 📬 icon to the left of the subject means the message is a mailing-list subscription — see below.
Why A compact summary of which signals fired (URIBL, gibberish_local, no_rdns, sender_rule, etc.)

📬 Mailing-list subscriptions

When MxGuard sees a List-Unsubscribe header on a message, it shows a small 📬 envelope icon next to the subject in the feed. This tells you at a glance that the message is bulk mail from a sender that should honour an unsubscribe request — newsletters, marketing campaigns, order receipts from retailers etc.

Click the row to open the detail panel. At the top you'll see a yellow Mailing list subscription banner listing every unsubscribe option the sender provided — usually one HTTPS link, often also a mailto: address. Click whichever you prefer to unsubscribe from the list.

If the sender supports RFC 8058 one-click unsubscribe (the modern standard that mail clients use for the "Unsubscribe" button shown at the top of messages), MxGuard notes this too. The link still opens in your browser rather than auto-submitting — clicking through is always your choice.

Why no auto-unsubscribe button? Clicking unsubscribe can sometimes confirm to a spammer that your address is valid (in which case you'll get more, not less, spam). For legitimate senders the unsubscribe will work; for spammers it won't. We show the option and let you decide rather than acting automatically.

Filtering

The cards on your dashboard link directly to filtered feed views. You can also filter manually by appending query parameters to the URL:

  • /feed?date=today — only messages from today
  • /feed?verdict=clean — only clean verdicts
  • /feed?verdict=quarantine — only quarantined
  • /feed?verdict=reject — both scanner-rejects and SMTP-rejects
  • /feed?date=today&verdict=clean — combine filters

When a filter is active, an amber banner shows what's filtered with a clear link to remove filters.

Clicking a row

Click any feed row to see the full message detail in a side panel: full headers, all score components broken out, attachment list, and extracted URLs. From the detail panel you can:

  • Mark as spam — adds a spam label and boosts the sender's score in future
  • Mark as ham — adds a ham label and discounts future mail from the same sender domain
  • Release (if quarantined) — deliver to the mailbox

Labels are recorded for the next model retrain, so your judgement improves MxGuard over time.

Live updates

The green pulsing dot in the corner indicates the feed is live. New rows slide in automatically every few seconds. The row count and last-update timestamp keep you oriented.