Home › Cybersecurity wiki › What are email filters?

Wiki

What are email filters?

Email filters sort incoming messages automatically according to rules or probabilities.
They keep spam, phishing and malware out of the inbox and put wanted mail into folders.

Types of Email Filters

Filters differ in which part of a message they check.

Content Filters

Content filters examine the subject, text, links and attachments.
They spot typical spam words, suspicious links and dangerous file types.

Header Filters

Header filters evaluate sender, recipient, mail servers and check results such as SPF, DKIM and DMARC.
This exposes forged senders and known spam sources.

How Email Filters Work

A filter assigns scores or makes decisions and then determines whether a message is delivered, flagged, moved or rejected.

Rule-Based Filters

Rule-based filters follow fixed conditions such as “sender contains X” or “attachment is .exe”.
They are easy to understand but need constant maintenance.

Bayesian Filters

Bayesian filters learn from examples how likely certain words appear in spam or in wanted mail.
The more users mark messages as spam, the more accurate they become.

The Importance of Email Filters in Cybersecurity

Email is one of the most common routes for attacks.
Filters are therefore a first line of defence.

Protection Against Spam and Phishing

Filters catch bulk advertising and forged messages that lure people to fake login pages.
This lowers the risk that someone gives away credentials.

Protection Against Malware

Virus scanners and sandboxes in the filter check attachments and links for malware.
Dangerous files are removed or quarantined.

Setting Up Email Filters

Filters can be set up on the mail server for all users and in the mail client for individual mailboxes.

Creating and Managing Filters

In the mail client or webmail you define conditions and actions such as “move to folder”.
Rules should be reviewed regularly and unnecessary ones deleted.

Setting Up Whitelists and Blacklists

A whitelist lists senders whose mail is always delivered;
a blacklist those that are always rejected.
Whitelists should be used sparingly because senders can be forged.

Common Challenges and Solutions

No filter is perfect;
it must balance protection and reliability.

False Positives and False Negatives

False positives are genuine messages that end up in spam;
false negatives are spam messages that get through.
Checking the spam folder regularly and giving feedback to the filter improves accuracy.

Spam Evolution

Spammers constantly change text, senders and tricks, now also with AI-generated messages.
Filters therefore need ongoing updates and several checks at once.
Forms on your own website should also be protected with something like CDPCaptcha so that no spam is created there in the first place.

Conclusion

Email filters are an essential part of security.
Set up well and maintained regularly, they keep most email attacks away.