Sender Verification Shield and Incoming Gateways

The Sender Verification Shield is a way to help users understand the "validity" of a sender's email address. From an antispam standpoint, it uses SPF, DKIM, and DMARC to verify the sender's email server and domain.

However, many larger installations of SmarterMail make use of incoming gateways to help facilitate the flow of incoming messages, and these gateways can muddy Sender Verification results. 

To remedy that, a system administrator has two (2) options: either turn off Sender verification entirely, or add the IP(s) of any incoming gateways to the IP Bypass list. 

Turn On/Off Sender Verification
To turn off Sender Verification, do the following:
  1. Log in as the system administrator
  2. Select the Manage tab.
  3. Select Domain Defaults.
  4. On the Email card, toggle "Enable Sender Verification" to either enable or disable it.
  5. Save that change.
It's also possible to turn Sender Verification on or off on individual domains. Simply edit the domain, and on the Options tab, the Sender Verification setting is on the Email card.

Add Gateway IP(s) to IP Bypass
To continue using Sender Verification with incoming gateways, you need to add the gateway IP(s) to the IP Bypass list:
  1. Log in as the system administrator.
  2. Select the Settings tab.
  3. Select Security.
  4. Select the Whitelist tab.
  5. Click the New button.
  6. Set the Source to IP Address
  7. Add the IP addresses (single, a range, or a CIDR block) you want to bypass.
  8. Toggle on Bypass IP for Spam Checks.
  9. Click Save
Once done, SmarterMail will run through the Received: values in message headers and simply ignore any IPs that are being bypassed and only use those IPs that are NOT bypassed for Sender Verification checks.