Allow / Block Rules

Create rules to explicitly allow or block specific senders from your domain. Rules give you fine-grained control over which IPs and senders are considered legitimate.

Accessing Rules

Navigate to DMARC → Allow / Block Rules. You must have a domain selected.

Creating a Rule

1. Click Add Rule
2. Choose the rule type:
   • IP Address — Match by sender IP (e.g., 203.0.113.5)
   • Header From — Match by the From header domain
3. Enter the value to match
4. Select the action: Allow or Block
5. Add optional notes explaining why this rule exists
6. Click Save

Managing Rules

• Enable/Disable — Toggle rules on/off without deleting them
• Edit — Update the match value, action, or notes
• Delete — Permanently remove a rule

How Rules Work

Rules are evaluated when SpoofWard processes DMARC reports. They help categorize senders in the dashboard and in alerts:

• Allowed senders are marked as legitimate even if their authentication isn't perfect
• Blocked senders are flagged as threats and highlighted in the Threat Intelligence dashboard