# Email filtering for MSPs that manage many client domains

URL: https://iblockspam.com/solutions/msp
Last updated: 2026-10-10

> Per-domain email filtering for MSPs, with a partner console for every client: status badges, drift and lookalike alerts, DMARC pass rates and CSV export.

Protect every client domain with one consistent filtering layer, priced per domain rather than per seat, and manage every client from one partner console. Partner terms, including pricing, are agreed individually.

## The MSP problem with email security

You support clients on a mix of platforms. Some are on Microsoft 365, some on Google Workspace, a few on a cPanel host they won't leave. Per-seat security products make every new hire a billing change. And DNS you configured carefully gets changed by someone else six months later.

iBlockSpam is built for that reality: a single inbound filtering layer, priced per domain, with checks that tell you when a client's setup has drifted.

## What partners get

| Area | What's included |
|---|---|
| Console | One partner console for every client account, with per-domain status badges, search, filters and CSV export |
| Pricing | Partner terms, including pricing, agreed individually; each client pays for its own domains |
| Domains | Per-domain pricing with unlimited mailboxes (mailbox count, not message volume) and unlimited domain aliases |
| Monitoring | MX, SPF and DMARC drift alerts (weekly on Protect, daily on Plus) |
| Setup | Guided setup wizard with before/after DNS comparison and rollback steps |
| Tools | Free [Check tools](https://iblockspam.com/tools) for pre-sales audits and troubleshooting |

Program details are confirmed per partner. We'd rather agree terms that fit how you work than publish a scheme that doesn't. See how [partnering works](https://iblockspam.com/partners), and use our [MSP spam filter pricing guide](https://iblockspam.com/blog/msp-spam-filter-pricing-margin-guide) to model your own cost to serve per client domain.

## One console for every client

The partner console lists every client account that has given you access. For each domain it shows filtering status, Domain Watch changes from the last 30 days, open lookalike domains, the DMARC pass rate from receivers' reports, subscription status and, once the daily sync has run, delivered and held mail. Filter to the clients that need attention, search by client or domain, or export the lot as CSV. You can [try the console demo](https://iblockspam.com/demo/partner) with sample clients.

- **Consent first.** A client gives you access by accepting your invitation or entering your partner code, and can switch you to read-only or remove you at any time.
- **Work in the client's account.** With full access you add and verify domains, run setup checks, manage DMARC monitoring and lookalike reviews, and open the filtering panel. Every action shows in the client's activity log under your name.
- **New clients.** Create an account for a new client; their owner takes ownership by setting a password, then chooses a plan and pays.
- **Clear limits.** Partners can't change a client's billing or security settings, and can't delete the account. There's no partner API, bulk import or consolidated partner invoice yet.

## How it fits into your stack

### One filtering layer across platforms

Every client domain's MX records point to our filtering servers. Spam, viruses, malware, phishing and spoofing are filtered before clean mail is delivered to the client's mail platform. Platform-specific steps differ:

- **Microsoft 365:** an inbound Partner connector with Enhanced Filtering for Connectors. See [Microsoft 365 setup](https://iblockspam.com/platforms/microsoft-365).
- **Google Workspace:** an inbound gateway configuration. See [Google Workspace setup](https://iblockspam.com/platforms/google-workspace).
- **cPanel/WHM:** the correct mail exchanger setting for remote filtering. See [cPanel/WHM setup](https://iblockspam.com/platforms/cpanel-whm).

### Fewer tickets about "missing" email

Each user gets a personal quarantine and digest emails on a schedule (hourly, daily, a chosen weekday or custom), so users can release their own false positives. Admins have a domain-wide shared quarantine. Message history covers 30 days, which helps answer "did it arrive?" tickets quickly.

### Advanced controls when a client needs them

Geographic filters, attachment-type filters, a Microsoft Office macro filter and custom domain rules are available in advanced settings. Approved and blocked sender lists can require sender verification to stop spoofed allow-listed senders.

### Outage cover

If a client's mail server is unreachable, mail is spooled for up to 5 days and delivered when the server returns.

## Use the free tools in your workflow

The [Check tools](https://iblockspam.com/tools) work without an account and are useful on day one:

- [Email Health Check](https://iblockspam.com/tools/email-health-check) for a quick domain review before a proposal.
- [MX Lookup](https://iblockspam.com/tools/mx-lookup), [SPF Checker](https://iblockspam.com/tools/spf-checker), [DMARC Checker](https://iblockspam.com/tools/dmarc-checker) and [DKIM Checker](https://iblockspam.com/tools/dkim-checker) for specific records.
- [Email Header Analyzer](https://iblockspam.com/tools/email-header-analyzer), which runs in the browser, so client headers aren't uploaded.

A note on limits: an MX lookup shows where mail is routed, not proof that it's filtered. A DKIM selector we can't find is unknown, not broken.

## Limits to plan around

- 100,000 inbound messages per domain per month.
- 400 MB maximum inbound message size.
- 500 outbound relay messages per domain per month, with DKIM signing and outbound filtering.
- Mail is processed in the United States. Check this against your clients' requirements; see [security and data handling](https://iblockspam.com/security).

## Switching clients from another filter

Moving a client from another gateway is a routing change, and routing changes need care. Our [migration guide](https://iblockspam.com/migrate) covers TTLs, staging, cutover and rollback.

## Next step

[Apply to become a partner](https://iblockspam.com/partners/apply) with the number of clients you manage, the platforms involved and how you support your clients, or [contact us](https://iblockspam.com/contact?topic=partners) first. We'll agree partner terms with you directly.

## Frequently asked questions

### How is MSP pricing set?

Partner terms, including pricing, are agreed individually. Apply or contact us with an idea of how many domains you manage and which platforms they use. We confirm program details, including pricing, billing and the support model, with each partner directly rather than publishing a single rate card.

### Do my clients need the same mail platform?

No. Filtering happens at the MX level, so the same service sits in front of Microsoft 365, Google Workspace, cPanel/WHM, Exchange and other mail servers. Each platform has its own setup steps, and our guides cover the common ones.

### How do I know if a client's DNS changes?

Domain monitoring checks MX, SPF and DMARC records and alerts you when they drift: weekly on Protect and daily on Protect Plus. That catches the common case where a client or their web designer changes DNS and mail quietly stops being filtered. The partner console flags every client domain with a change to check.

### Do I need a separate login for each client?

No. Partner staff sign in once and see every client account that has given the partner access. Opening a client shows that client's own portal pages with a banner naming the client, and each action is recorded in the client's activity log. Every partner staff account must use two-factor authentication.

---

Source: iBlockSpam, https://iblockspam.com/solutions/msp (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt