Roller Network Help - Mail Allow List

The Allow List is used to add exceptions to mail filtering rules. There are two Allow Lists: the standard Allow List and the SpamAssassin scoring Allow List.

The standard Allow List has the following matching types:

• Host (Single IP Address) - A single host IP address.
• Host Name (DNS PTR) - Matches a host name (address->name) and its subdomains.
• Network (CIDR Mask) - An entire CIDR network as calculated from the network and mask.
• Sender Domain Name - Any sender who claims to be from a given domain.
• Sender Email Address - Exact match on the sender address. Address extensions are not stripped.
• Sender Domain Name w/Subdomains - Same as "Sender Domain Name" but includes subdomains.
• Recipient Email Address - Exact match on the recipient address. Address extensions are not stripped.

You may choose to apply the Allow List entry to a selected mail domain or all mail domains. Individual filters may be allowed, or choose the "All Filters" option to skip everything if the Allow List condition matches.

Bulk Entry Mode

The Allow List includes a bulk entry mode to facilitate adding multiple entries of any supported type. Like single entry mode, select an action and domain to apply the entries to. However, the system will automatically detect the entry type based on the following rules:

• If the entry line is an IP address, add as "Host (Single IP Address)"
• If the entry line is an IP address with a CIDR slash-mask, add as "Network (CIDR Mask)"
• If the entry is a valid domain name, add as "Sender Domain Name"
• If the entry is a valid email address AND it is a mail domain, add as "Recipient Email Address"
• If the entry is a valid email address AND NOT a mail domain, add as "Sender Email Address"
• If the entry begins with "*." (i.e. *.example.com), add as "Host Name (DNS PTR)"
• If the entry begins with "." (i.e. .example.com), add as "Sender Domain Name w/Subdomains"

If an error occurs check your bulk entry formatting and try again.

SpamAssassin Scoring Mail Allow List

The SpamAssassin content filter has an optional scoring Allow List. This filter will apply scoring rules to its Allow List entries as described below instead of bypassing the SpamAssassin filter.

• Sender Email Address or Domain - Match the sender address or domain directly.
• Sender Email Address or Domain and Relay - Allow the sender address/domain if and only if one of the "received" headers also contains the named relay.
• Sender Email Address or Domain with SPF/DKIM - Allow the sender address/domain if a SPF or DKIM test authorizes the sender.
• Recipient Email Address (Level 1) - Adds -6 to the score if this recipient email address is found. This lets most questionable messages through
• Recipient Email Address (Level 2) - Adds -20 to the score if this email address is found. This lets most spam through; only high-scoring ones will be blocked.
• Recipient Email Address (Level 3) - Adds -100 to the score if this email address is found. SpamAssassin will never block or tag a message at this level.

If you're familiar with SpamAssassin preferences, these settings are analogous to "whitelist_from", "whitelist_from_rcvd", and "whitelist_auth", "whitelist_to", "more_spam_to", and "all_spam_to", respectively. Our servers and internal relays are automatically allowed.

Sender email addresses or domains are searched in the following headers: From, Envelope-Sender, Resent-Sender, X-Envelope-From.

Recipient email addresses are searched in the following headers: To, Cc, Apparently-To, Delivered-To, Envelope-Recipients, Apparently-Resent-To, X-Envelope-To, Envelope-To, X-Delivered-To, X-Original-To, X-Rcpt-To, X-Real-To.

Internal Networks Allow List

Some Roller Network internal networks are on a static Allow List to prevent the servers from filtering themselves or internal handling channels. It is not possible to override these using the account control center. The internal networks Allow List is only used for Roller Network controlled internal resources. The following networks are internally listed:

• 208.79.240.0/27
• 2607:fe70:0:3::/64
• 208.79.241.0/27
• 2607:fe70:0:4::/64
• 208.79.241.112/28
• 2607:fe70:0:16::/64
• 208.79.242.34/32
• 2607:fe70:0:beef::a/128

An entry will appear in the mail logs, when applicable.