Help CenterGoogle WorkspaceHow to Configure Spam Filters and Safe Sender Lists in Gmail

How to Configure Spam Filters and Safe Sender Lists in Gmail

Manage Gmail spam settings, create filters to bypass spam, and configure safe sender lists in Google Workspace.

Spam Filters and Safe Senders in Gmail

### User-Level Spam Management

**Mark as spam:** Select email → Spam icon (or three dots → Report spam)

Gmail learns your preferences over time.

**Not spam:** Open Spam folder → Select email → Not spam → Move to inbox

And add the sender to contacts — this helps Gmail whitelist them.

### Creating Filters to Bypass Spam

1. Gmail → Settings → See all settings → Filters and blocked addresses

2. Create a new filter → enter From address or domain

3. Actions: tick **Never send it to Spam** → Create filter

Or from a specific email:

Open email → three dots → Filter messages like these → Never spam

### Blocking Senders (User)

Open email from sender → three dots → Block [sender name]

Future emails go to Spam automatically.

### Admin: Allow/Block at Domain Level

admin.google.com → Apps → Google Workspace → Gmail → Spam, phishing, and malware

**Approved senders:** Add trusted email addresses or domains that bypass spam filtering

**Blocked senders:** Add domains or addresses that are always blocked

### Admin: Email Allowlist (IP-Based)

For bypassing spam from known servers (e.g. a CRM or marketing tool):

Gmail → Spam settings → Email allowlist → add IP addresses

### Spam Quarantine

admin.google.com → Reports → Email log search → filter by "Delivery — Spam"

Admins can view and release quarantined messages.

### Inbound Gateway / Third-Party Spam Filter

If you route email through a third-party filter (e.g. Barracuda, Mimecast):

Gmail → Advanced settings → Inbound gateway → Add IP range of the gateway

This prevents Gmail from spam-scoring emails that arrive from your gateway.

### Postmaster Tools

Monitor your domain's spam reputation at **postmaster.google.com**

  • Domain reputation (Good, Low, Medium, Bad)
  • Spam rate — keep below 0.1%
  • Authentication failures (SPF, DKIM, DMARC)
Was this article helpful? Contact Support