ZeroPhish Whitelisting Guide

Whitelist ZeroPhish

Microsoft Exchange Server 2016 / 2019

Two transport rules allow authorized ZeroPhish phishing-simulation emails to bypass spam filtering, so they arrive in your users inboxes as intended.

On-Premises

All whitelisting guides

Values you will need

Have these ready before you start. Contact whitelist@sabry.sa if your assigned values differ.

Simulation IP address
8.213.46.122
Custom header name
X-PHISHTEST
Custom header value
SABRY

Sender domains to whitelist

These are the current ZeroPhish sending domains. Whitelist them in addition to the IP, so delivery still succeeds if mail reaches Exchange through a relay or smart host that changes the connecting IP.

*@safelinks.online*@helprservice.com*@helprservice.info

Optional — sender-domain rule. If inbound mail is routed through a gateway or smart host (so the connecting IP is not 8.213.46.122), add a third transport rule — condition The sender → domain is the domains above, action set the SCL → Bypass spam filtering. Also confirm all whitelist rules are Enabled (not in Test mode) and sit at a low priority number so they run first.

Create both rules for reliable delivery. The first rule trusts the ZeroPhish sending server by its IP address; the second trusts the campaign by its signature header. Each one sets the Spam Confidence Level (SCL) so the message bypasses spam filtering.
1

Create a Transport Rule for the IP address

  1. Sign in to the Exchange Admin Center (EAC).
  2. Go to Mail flow → Rules.
  3. Click + and choose Create a new rule.
  4. Name the rule ZeroPhish IP Whitelist.
  5. Under Apply this rule if, select The sender → IP address is in any of these ranges or exactly matches, then enter:
    • IP address: 8.213.46.122
  6. Under Do the following, select Modify the message properties → set the spam confidence level (SCL) → Bypass spam filtering.
  7. Click Save.
2

Create a Transport Rule for the custom header

  1. Still in Mail flow → Rules, click + to add another rule.
  2. Name it ZeroPhish Header Whitelist.
  3. Under Apply this rule if, select A message header → includes any of these words:
    • Header name: X-PHISHTEST
    • Words or phrases: SABRY
  4. Under Do the following, add Set the spam confidence level (SCL) → Bypass spam filtering.
  5. Add a second action — Modify the message properties → set a message header:
    • Header name: X-PhishingSimulation
    • Value: Approved
  6. Click Save.

Verify it works. Send a test campaign from ZeroPhish. If messages still land in Junk, confirm these two rules sit above any blocking rules in the rule priority list, and allow a few minutes for the changes to take effect.
Need a hand with the configuration?
Our team can set up the whitelist with you on a short call.

Contact support

Back to all whitelisting guides