cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
377
Views
0
Helpful
2
Replies

ESA message filter $remotehost usability?

harunwayne487
Level 1
Level 1

I need to bypass spam filtering from email being sent from a certain set of remote servers. Due to the specifics of how everything is setup (lots of 3rd party integrations into the operation) i can't use message policy or trusted senders, and it looks like message filters are the only way to do it.

the $remotehost variable looks like it'll give me what i need, can i do something like if ($remotehost == "examplemailsender.com$" ) to check for that?

thanks!

2 Replies 2

Pulkit Mittal
Spotlight
Spotlight

Hi there,

These are the two things you will need to do to allow certain IP's to bypass spam and outbreak filters.

https://support.phishingtackle.com/hc/en-gb/articles/4419302354961-Allowlisting-in-Cisco-IronPort

https://support.phishingbox.com/hc/en-us/articles/360041627433-Safelisting-in-Cisco-Ironport

Specially for spam, the Cisco article is https://www.cisco.com/c/en/us/support/docs/security/secure-email-gateway/217140-how-do-you-whitelist-a-trusted-sender.html

You can create a trusted sender policy with anti-spam disabled.

PulkitMittal_0-1711239763904.png

If you find this useful, please mark it helpful and accept the solution.

The answer you got on your reddit post should work for you.