Creating a Custom Rule
Tip: Custom rules can bypass all verdicts, including banned attachments, geo filtering, phishing, and malware.
Unlike Allow and Block Rules, Custom Rules can be multi-conditional, based on the following criteria:
Sender address, or domain
IP address or range
Subject
Attachment type
Custom Rules can be set to so that email is:
Delivered
Quarantined
Deleted
Rejected
Custom Rules Set To Deliver:
Custom Rules when set to deliver, bypass all filtering categories.
Verdict | Bypassed by Custom Rule? |
|---|---|
Spam | Yes |
Infomail | Yes |
Impersonation | Yes |
Policy - Banned Attachment | Yes |
Policy - Geo | Yes |
Malware | Yes |
Phishing | Yes |
Custom Rules Can Be Applied:
Globally - for all or selected customers under an MSP partner (can only be created at Partner level)
Organizationally - for a specific customer
Domain - for a specific domain
Users - for specific users or mailboxes
Step 1: Select "New +"
Click "New+". A popup window will appear.
Step 2a: Select Customers To Whom The Rule Will Apply (Partner view)
Click “Select All Customers” or select what customers you would like to apply the rule.
Step 2b: Select Organization/Domain/User To Whom The Rule Will Apply (Customer view)
Select if you are applying the rule to the “Organization”, “Domain”, or a particular “User”.
Step 3: Select The Rule Options
Here is an explanation for each of the fields
Sender - The sender email address or domain. Wildcards can also be used. See below for a further explanation.
IP - The sender's IP address.
Subject -The subject line the email will have. Useful for emails that will always have the same subject line.
Attachment Type - Select attachments that appear in the email. Useful if you want to always allow or block email with certain attachments from a particular sender. This can override the global policy.
Action - Decide if the email is delivered, rejected, quarantined, or deleted.
Preference - Set a preference value between 1 and 10. 1 being the highest priority.
Edge - The “Edge” slider should only be enabled if you wish to bypass SPF checks or DNS issues. For example, if an email is being quarantined as spam, you do not need to enable the edge slider. Enabling this unnecessarily can be a security risk.
Comment - Text field to describe the rule and make searching in the future easier.
Step 4: Submit
Click Submit to save settings. The table will now be updated with the created rule.