Systems, methods and computer program products for ingress email security

A system, comprising:

• a processor;
• a non-transitory computer-readable medium;
• and
• stored instructions translatable by the processor to perform, at an ingress server computer of a computer network:
• receiving a request for connection from a sender system, the sender system having a sender network address;
• comparing the sender network address with a plurality of lists of addresses without receiving an envelope and an associated message from the sender system;
• determining, based on the comparing, whether to trust the sender system and accept the request for connection from the sender system, to accept the request for connection from the sender system but not trust the sender system, or to reject the request for connection from the sender system;
• when it is determined to accept the request for connection from the sender system but not trust the sender system, accepting the request for connection and receiving the envelope from the sender system but not accepting the message associated with the envelope, the envelope from the sender system containing a sender email address, the sender email address containing a domain;
• comparing the domain of the sender email address from the envelope with a plurality of lists of domains, the plurality of lists of domains including a whitelist, without opening the message;
• and
• responsive to a determination that the domain of the sender email address from the envelope is found on the whitelist of the plurality of lists of domains or a determination that the domain of the sender email address from the envelope is not found on any of the plurality of lists of domains, accepting, by the ingress server, the message from the sender system and routing the message to the end user's device.

A computer program product comprising a non-transitory computer-readable medium storing instructions translatable by a processor to perform, at an ingress server of a computer network:

• receiving a request for connection from a sender system, the sender system having a sender network address;
• comparing the sender network address with a plurality of lists of addresses without receiving an envelope and an associated message from the sender system;
• determining, based on the comparing, whether to trust the sender system and accept the request for connection from the sender system, to accept the request for connection from the sender system but not trust the sender system, or to reject the request for connection from the sender system;
• when it is determined to accept the request for connection from the sender system but not trust the sender system, accepting the request for connection and receiving the envelope from the sender system but not accepting the message associated with the envelope, the envelope from the sender system containing a sender email address, the sender email address containing a domain;
• comparing the domain of the sender email address from the envelope with a plurality of lists of domains, the plurality of lists of domains including a whitelist, without opening the message;
• and
• responsive to a determination that the domain of the sender email address from the envelope is found on the whitelist of the plurality of lists of domains or a determination that the domain of the sender email address from the envelope is not found on any of the plurality of lists of domains, accepting, by the ingress server, the message from the sender system and routing the message to the end user's device.