SpamSentinel.net
Inbound Mail Filtering · N+2 Redundant Architecture

Your mail server will go down. Your mail flow won't.

SpamSentinel sits in front of your existing infrastructure with N+2 gateway redundancy, sub-14ms multi-engine inspection (SpamAssassin, ClamAV, Bayesian auto-learning), and a 96-hour zero-loss spool vault — so a dead primary server is a maintenance ticket, not an outage.

S$8 / domain / month, billed yearly · No CC Required · Inspired in Japan
Gateway Node Verification ALL ROUTES ACTIVE

NODE-A · PRIMARY

tokyo-ap1 anycast

11ms

NODE-B · SECONDARY

osaka-ap2 anycast

13ms

NODE-C · TERTIARY

singapore-ap3 anycast

9ms
SPOOL VAULT 0 QUEUED · 96HR CAPACITY

済 (sumi) — "verified": each node is stamped only after passing health checks

The Failure Mode Nobody Budgets For

A single mail gateway is a single point of failure.

Most spam filtering runs as one inline appliance or one cloud endpoint. When it drops — patch failure, DDoS, regional outage, expired cert — inbound mail doesn't queue politely. It bounces, or routes around your filtering entirely and lands unscanned in your users' inbox.

That 20-minute outage is how ransomware gets in. The window where filtering is down is the window a single unscanned phishing email reaches a finance director — and if it's your upstream mail server that's down, not the filter, most solutions have nowhere to put incoming mail. It's dropped, NDR'd, or lost. Permanently.

The Solution

Three independent layers stand between threats and your inbox.

Anycast Gateway Routing — N+2 Redundancy

Every domain resolves to a minimum of three independent gateway nodes via Anycast DNS. If a node fails health checks, traffic withdraws from that route in seconds — no DNS propagation delay, no manual failover, no single node carrying 100% of your risk.

NODE-A: 11ms · NODE-B: 13ms
NODE-C: 9ms — ALL ROUTES ACTIVE

Multi-Layer MX Failover & Spool Vault

If your primary mail server is unreachable, SpamSentinel doesn't bounce the message — it holds it. The Spool Vault retains clean, scanned mail for up to 96 hours, retrying on a backoff schedule, and releases the full queue automatically once your server is reachable. Zero-loss, not best-effort.

SPOOL CAPACITY: 96HR
QUEUED: 0 · LAST FLUSH: N/A

Inline Multi-Engine Inspection

Every message is scored through SpamAssassin's rule-based engine, scanned by ClamAV for malware and Trojans, and checked against SURBL/DNSBL reputation lists and SPF — adding under 14ms of latency. A self-tuning Bayesian filter learns from confirmed spam/ham over time, sharpening detection without manual rule-writing. Inline scoring, not a delayed batch scan, so threats are quarantined before delivery.

AVG LATENCY: 12.4ms
ENGINES: SPAMASSASSIN + CLAMAV + BAYES

How This Differs From What You Already Run

cPanel's built-in SpamAssassin vs. other anti-spam vs. a dedicated gateway.

Most sysadmins are running one of two things today: SpamAssassin bundled into cPanel, or a third-party cloud spam filter sitting in front of it. Here's where each one actually stands.

Capability
cPanel + SpamAssassin
Other Anti-Spam
SpamSentinel
Filtering location
Runs inline on the same server as the mailbox
Separate cloud gateway, varies by vendor
Separate gateway layer, in front of your mail server
Detection engine
SpamAssassin content scoring + RBL checks
Proprietary, closed-source — not independently auditable
SpamAssassin + ClamAV + Bayesian auto-learning + SURBL/DNSBL
Redundancy model
Single server, no redundancy
Varies widely by vendor and pricing tier
N+2 Anycast gateway nodes by default, every tier — 99.999% uptime SLA
Domain administration
Per-account settings inside the hosting panel
Separate admin portal, often a paid add-on per domain
Dedicated spam panel, optional whitelabel
Pricing model
Bundled into general-purpose hosting cost
Often tiered, with extra mailboxes or domains as add-on cost
Flat S$8/domain/month, no per-seat surprises
Scope
Bundled into general-purpose hosting stack
Inbound mail filtering — purpose-built
Inbound mail filtering — purpose-built

Comparison reflects general, publicly documented behavior for cPanel + Apache SpamAssassin and typical third-party cloud spam filters. Specific vendors and hosting providers vary — confirm against your current setup.

100%

Gateway uptime — trailing 12 months, all Anycast nodes

<14ms

Average inline inspection latency added to mail flow

96hr

Maximum Spool Vault retention during upstream outage

SpamSentinel's filtering layer is built on proven, widely-deployed scanning engines — not a proprietary black box. Inbound mail is inspected through battle-tested spam scoring and antivirus engines before it ever reaches your mail server, so the detection logic you're evaluating is auditable, not a sealed vendor algorithm you're trusting blind.

Inbound Filtering SpamAssassin + ClamAV SPF / SURBL / DNSBL Bayesian Auto-Learning

Pricing

Flat per-domain pricing. No surprise tiers.

S$8 / domain / month

Billed yearly

  • N+2 Anycast gateway redundancy
  • 96-hour zero-loss Spool Vault
  • Real-time adaptive threat analytics
  • Dedicated spam panel
  • Optional whitelabel of spam panel
  • Enterprise volume discounts available
Start 14-Day Free Trial

No credit card required

Questions before you migrate MX records

Anycast DNS routing means client connections fail over to the next healthy node in under a few seconds — no single node's failure stops inbound mail. N+2 means two full nodes can be lost simultaneously before service degrades.

Most cloud filters are a single inline hop with no spooling — if your mail server is down, mail bounces. SpamSentinel adds a 96-hour Spool Vault to remove that failure mode entirely, rather than leaving you exposed to a single point of failure.

Yes — MX cutover is the only DNS change required. Most migrations are a TTL-bounded cutover window, not a maintenance outage.

Full production feature access — N+2 routing, Spool Vault, and a dedicated spam panel — on your real domain, no credit card required. Inbound mail is inspected through battle-tested spam scoring and antivirus engines, so you're evaluating it under real mail load, not a sandboxed demo.

Under 14ms average for inline multi-engine inspection (SpamAssassin + ClamAV + Bayesian filter + SURBL/DNSBL checks) — the scan time added per message, not a batch-processing delay.

Stop treating mail gateway uptime as someone else's problem.

Deploy N+2 redundant spam filtering with zero-loss spooling in front of your existing mail server — fully operational proof-of-concept in under a day.

Start Your 14-Day Free Trial →

S$8/domain/month, billed yearly · No credit card required · Enterprise volume pricing available · Cancel anytime