Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Community Member

Emails Ending up in the Spam Quarantine


I have an Ironport C170 and I would like to know how to stop emails from certain domains from ending up in the Spam Quarantine? I have gone into the HAT overview and added these domains to the Whitelist, Unknown list and All list. All of these lists have a mail flow policy of accepted or trusted. Even though I added them to these lists one of these domains emails was processe by the Suspect list.

Thank you,

Community Member

Emails Ending up in the Spam Quarantine

you can create Incoming mail policies.

Go to Mail Policies -->Incoming mail policies --> add a new policy(Define sender domain in that policy) and you can disable antispam for that particular policy.

Community Member

Re: Emails Ending up in the Spam Quarantine

Simply adding a domain name to the HAT will not work. The HAT is matching hostnames and IP addresses. It is not matching sender domain names. Your configuring the host access table, not a DOMAIN access table.

Look at the mail logs of the appliance to make sure the sender that needs to be whitelisted has a hostname that ends with the domain

If it does; alter your entry in the HAT from '' to '

Entering the name like so will then match all hostnames which DNS PTR record ends with

It will match entries such as

If the hostname does not end with, you can add the IP address directly to the HAT. You can find this address in the mail logs as well.

Hope this helps!

For more information please refer to Article #160: How do I whitelist a trusted sender?


CreatePlease to create content