How do I set up Anti-Spoofing in SpamTitan?

SpamTitan allows you to configure trusted IP addresses and hostnames to control which sources can send emails using your domain and bypass anti-spoofing checks. This helps prevent fraudulent emails while allowing legitimate services to function properly.

Important notes about SpamTitan anti-spoofing behavior

• Emails from approved outbound relay IPs are not checked for spoofing.
• If SPF is enabled and the IP/Hostname list is empty, SPF test results are applied.
• If SPF is disabled and the IP/Hostname list is empty, no anti-spoofing testing is applied.
• If SPF is disabled and there is an IP/Hostname listed, only listed IPs are trusted; non-matching IPs trigger anti-spoofing rules.
• If SPF is enabled and there is an IP/Hostname listed, the system first checks the IP; if it matches, SPF is skipped, otherwise SPF is applied.

Follow these steps to add a trusted IP or hostname for domain anti-spoofing:

1. From the domain level, go to the sidebar menu and select Filtering > Anti-Spoof.
   (The Domain Anti-Spoofing tab opens by default.)
2. Under IPs & Hostnames, choose the type of entry you want to add:

To add an IP address:

1. Select Add > Add an IP Address.
2. Enter the following details:
   1. IP/Network: Enter the trusted IP address. CIDR notation is supported.
   2. Netmask: Provide the subnet mask (e.g., 255.255.255.255).
   3. Comments (optional): Add a description for the IP.
3. Select Add to save.

To add a hostname:

1. Select Add > Add a Hostname.
2. Enter the following details:
   1. Hostname: Enter the trusted hostname (e.g., example.com to include subdomains like support.example.com).
   2. Comments (optional): Add a description for the hostname.
3. Select Add to save.

To learn more Anti-Spoofing in SpamTitan, click here.