Sender Whitelisting

[kmkrause2]

When whitelisting a sender, should the Envelope Sender information be entered or should I use the Reverse DNS domain information in found in the logs for a given message?

I have a situation where the sender domain has been entered in the whitelist but upon receipt from that sender, sometimes message is not whitelisted, sometimes it is. When it isn't, the DNS host information is different than when it is whitelisted

Thanks,

Ken

[exMSW4319 · Accepted solution]

For all of the HAT sender groups you want the actual IP address of the connecting equipment, though a reliable rDNS entry will work.

You therefore need to have your spiel ready for when your manager wants domain.tld whitelisted and when you look into it, the connections are from dynamic.pool - a nice low SBRS rating may bolster your argument: "Look, the space is listed for a reason..."

[kmkrause2]

Thanks to both of you for responding. This should clear things up a bit.

Thanks again,

Ken

[Mathew Huynh · Accepted solution]

Hello Ken, 

as exMSW4319 explained, the HAT table WHITELIST will require the rDNS hostname or the IP of the connecting machine, this is located in your "Sending Host Summary" on the message tracking.

To Whitelist by actual domains, this is done with creating a mail policy setup, add the sending domains you wish to allow to skip the scanners.

Submit this policy, then disable the scanners per policy.

Regards,

Matthew