Manage blocked addresses

Review the account's blocked senders list and remove old@vendor-old.com and temp-blocked@recruiter.com. Keep the permanent blocks for known abusers. After removing, confirm that new emails from those two addresses arrive to the inbox by asking old@vendor-old.com to resend and reporting results by end of day Thursday.

Before I clean up the blocked list, make it easy for support to decide which entries are obsolete: display when each address was added, show the last time we received mail from that address, and flag any blocked addresses that share domains with active customers so we do not accidentally unblock a necessary security rule.

I opened the blocked addresses list and see around 120 entries, many added years ago by different people. I am responsible for removing outdated ones but I don't know which are tied to legacy automations or vendor suppressions. The people involved are me, the security admin Noor, and procurement who manages vendors; what's the likely risk if I remove old entries and the safest next step to validate before unblocking at scale?

Over time our blocked-senders list has become an unreviewed graveyard of addresses, causing accidental unblocks and missed vendor emails. Which maintenance habit should we adopt—regular review, ownership assignment, or automated expiry—and what exact checklist or schedule will stop the list from degrading?