Allow List and High Risk Domains – Mailprotector Help Center

Mailprotector advises against allowing entire commonly used or high-risk domains like gmail.com or ebay.com on the Allow List due to spam and spoofing risks, instead recommending allowing only specific trusted email addresses, and it prohibits adding your own domain or global allow rules for identified high-risk domains to enhance email security.

Spammers often try to appear legitimate by sending emails from well-known domains like @hotmail.com, @yahoo.com, @gmail.com, or even your own domain. Creating an allow rule for one of these commonly used domains would cause all messages from that domain to bypass the Mailprotector spam filter and be delivered directly to your inbox.

As a best practice, rather than allowing entire domains like yahoo.com or gmail.com, Mailprotector recommends adding only specific email addresses you regularly communicate with—such as [email protected] or [email protected]—instead of broadly allowing the entire domain.

Mailprotector does not permit adding your own domain to your Allow List. While it might seem helpful to ensure internal messages aren't quarantined, doing so can create a significant security risk. Spammers often spoof your domain to bypass filters, and allowing it could let a large volume of malicious emails through unchecked.

To improve protection and reduce the amount of spam that bypasses filtering, Mailprotector has identified certain domains as "High Risk"—domains frequently used by spammers to send unwanted or potentially harmful emails. Creating a global allow rule for one of these domains poses a significant security risk by letting large volumes of spam bypass our filters. For this reason, the Mailprotector dashboard prevents global allow rules for High Risk Domains.

Allow List - Error for Banned Domains.png