ESA message filter $remotehost usability?

[harunwayne487]

I need to bypass spam filtering from email being sent from a certain set of remote servers. Due to the specifics of how everything is setup (lots of 3rd party integrations into the operation) i can't use message policy or trusted senders, and it looks like message filters are the only way to do it.

the $remotehost variable looks like it'll give me what i need, can i do something like if ($remotehost == "examplemailsender.com$" ) to check for that?

thanks!

[Pulkit Mittal]

Hi there,

These are the two things you will need to do to allow certain IP's to bypass spam and outbreak filters.

https://support.phishingtackle.com/hc/en-gb/articles/4419302354961-Allowlisting-in-Cisco-IronPort

https://support.phishingbox.com/hc/en-us/articles/360041627433-Safelisting-in-Cisco-Ironport

Specially for spam, the Cisco article is https://www.cisco.com/c/en/us/support/docs/security/secure-email-gateway/217140-how-do-you-whitelist-a-trusted-sender.html

You can create a trusted sender policy with anti-spam disabled.

If you find this useful, please mark it helpful and accept the solution.

[Ken Stieers]

The answer you got on your reddit post should work for you.