Amazon Simple Email Service
Developer Guide

Creating IP Address Filters for Amazon SES Email Receiving

An IP address filter enables you to optionally specify whether to accept or reject mail originating from an IP address or range of IP addresses.

You can use the Amazon SES console or the CreateReceiptFilter API to create an IP address filter.


If you only want to receive mail from a finite list of known IP addresses, then set up a block list that contains, and set up an allow list that contains the IP addresses that you trust. This configuration blocks all IP addresses by default, and only allows mail from the IP addresses that you explicitly specify.

To create an IP address filter (console)

  1. Sign in to the AWS Management Console and open the Amazon SES console at

  2. In the left navigation pane, under Email Receiving, choose IP Address Filters.

  3. In the content pane, choose Create Filter.

  4. For Filter Name, type a name for the IP address filter. The name must contain less than 64 alphanumeric, hyphen (-), underscore (_), and period (.) characters. The name must start and end with a letter or number.

  5. For IP Address Range, type a single IP address or a range of IP addresses that you want to block or allow, specified in Classless Inter-Domain Routing (CIDR) notation. An example of a single IP address is An example of a range of IP addresses is For more information about CIDR notation, see RFC 2317.

  6. For Policy Type, choose Allow or Block.

  7. Choose Create Filter.

For information about how to use the CreateReceiptFilter API to create an IP address filter, see the Amazon Simple Email Service API Reference.