Our email filtering system automatically helps protect your inbox while ensuring trusted senders can reach you.
Automatic Whitelisting
When you send an email to someone, their address is automatically whitelisted for your entire domain.
Example:
- You have users:
david@example.comandamy@example.com - If David emails
mary@gmail.com, that address is automatically trusted - Mary’s replies will reach all users on the domain without being filtered
Important Notes
- The system uses the envelope sender (not the visible “From” address) for filtering.
- If manual whitelisting/blocklisting doesn’t work:
- Check the email headers for:
X-EmailArray-EnvFrom - Use that address instead.
- Check the email headers for:
- If a sender uses changing email addresses:
- Create a rule/filter based on:
- Part of the sender address
- Subject line
- Create a rule/filter based on:
- Best Practice:
Use Spam Reports to whitelist senders — this:- Delivers the message immediately
- Automatically adds the correct sender to your whitelist
Add an Email Address to the Whitelist
- Go to: https://cp.thexyz.com
- Log in using your full email address (e.g.
user@domain.com) - Navigate to Filtering → Whitelist / Blocklist
- Select the correct domain from the dropdown (left side)
- Click New Whitelist
- Enter the email address
- Choose whether to continue virus scanning (recommended)
- Click Add Whitelist
Add an Email Address to the Blocklist
- Go to: https://cp.thexyz.com
- Log in using your full email address
- Navigate to Filtering → Whitelist / Blocklist
- Select the correct domain
- Click New Blocklist
- Enter the email address
- Click Add Blocklist
Remove an Email Address from the Whitelist or Blocklist
- Go to: https://cp.thexyz.com
- Log in using your full email address
- Navigate to Filtering → Whitelist / Blocklist
- Select the correct domain
- Locate the email address
- Click the minus (-) icon to remove it
Tips
- Whitelisting is applied domain-wide, not just per mailbox
- Always verify the correct domain is selected before making changes
- If unsure, use Spam Reports instead of manual entries for best results