When I get an alert that someone has reported a message as "Unusual volume of messages reported as phish or junk/not junk", how do I determine if they marked it as "junk" or "not junk"? If they've marked it as "not junk", I'd like to intervene and help them by tweaking our EOP to allow messages from that domain.
