Skip to main content


Anti-Spoofing Settings

Go to Filter Rules > Anti-Spoofing Settings to access SpamTitan Cloud's anti-spoofing functionality. If you are a Domain Group Administrator, the Anti-Spoof Domains window displays showing a list of your domains:


Check the box ST-701-check-box.jpg to the left of the domain you want to edit and click the edit ST-701-edit-button.jpg icon or Edit button. Check multiple boxes to edit multiple domains at once.

The Anti-Spoof Settings window displays for your selected domain(s). If you are a Domain Administrator, the Anti-Spoof window is your default view:


Follow the steps below to enable and modify your anti-spoof settings.

  1. By default, anti-spoof settings are not enabled. Click Enable and the display expands:

  2. Use SPF Record for IP Validation: Enable this option to use your SPF record to determine if a sender is valid instead of specifying IPs in the IP List. By default, this option is not enabled.

  3. IP List: If you have not enabled Use SPF Record for IP Validation, you can add a list of CIDR notation ranges here that are allowed to send email using your domain. Click Add... to add an entry. Once added, click the edit ST-701-edit-button.jpg icon to edit an IP, or the delete ST-701-delete-button.jpg icon to delete an IP from the list.

    Using IP List is more secure than using Hostname List. Generally, try to use Hostname List only if you are not using SPF and a service you are using has too many IPs to list.

  4. Hostname List: Click Add... to enter hostnames that are allowed to send email using your domain, e.g.

    Enter to include any sub-domains such as,,, etc.

    Regular expression patterns can be used here, but are not necessary. If using regular expression, note that the more generic the expression, the easier it is to bypass spoofing.

  5. If logged in as Domain Group Administrator and editing multiple domains, click Save to save changes to all domains and return to the Anti-Spoof Domains window.


    If you do not click Save when editing multiple domains, only changes to the first domain checked will be saved.