I guess I look at it from the Unix side of things[1], in which blocking @domain.com doesn't block anything but @domain.com - @mail.domain.com would still work.
In order to subdomain block, it's a simple matter of adding a wildcard - @*.domain.com That's the way Sendmail, smtpd and postfix all seem to work, from what I've seen. -------------------------------------------------------------- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. [1] I'm predominantly an MS admin, but we use Unix stuff for most mail relays outside of Exchange > -----Original Message----- > From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 28, 2003 12:50 PM > To: Exchange Discussions > Subject: RE: Message Filtering > > > Ben / Roger, > > I can only take a guess that they set the logic up so that the entry > "@domainname.com" would by default block that domain and > every subdomain > below it. If you wanted to let subdomains through, you would have to > explicitly block the ones you don't want through. For example: > > 1. There is 1 primary domain and 4 subdomains: domain.com, > sub1.domain.com, sub2.domain.com, sub3.domain.com, sub4.domain.com > 2. You are getting spam from the primary domain and > subdomains 2 and 4. > 3. So in your block list, you would have: > [EMAIL PROTECTED] > @sub2.domain.com > @sub4.domain.com > 4. It will now block those three domain names and let > sub1.domain.com and > sub3.domain.com through. > > ~Jim > -----Original Message----- > From: Roger Seielstad [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 28, 2003 4:29 AM > To: Exchange Discussions > Subject: RE: Message Filtering > > > That was my point as well - but apparently that's the way the > functionality > works. > > I'd call that a bug, but as Ex5.5 is close to end of life, I > highly doubt > its gonna get fixed. > > -------------------------------------------------------------- > Roger D. Seielstad - MTS MCSE MS-MVP > Sr. Systems Administrator > Inovis Inc. > > > > -----Original Message----- > > From: Ben Schorr [mailto:[EMAIL PROTECTED] > > Sent: Thursday, August 28, 2003 4:04 AM > > To: Exchange Discussions > > Subject: RE: Message Filtering > > > > > > Maybe it's just late but I don't understand how @ew01.com > > would also block > > the subdomains of that domain. > > > > > > -Ben- > > Ben M. Schorr > > Director of Information Services > > Damon Key Leong Kupchak Hastert > > http://www.hawaiilawyer.com > > > > > > > > -----Original Message----- > > From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, August 27, 2003 06:45 > > To: Exchange Discussions > > Subject: RE: Message Filtering > > > > Mike, > > > > I have blocked that EXACT domain already by using: @ew01.com > > > > ~Jim > > > > P.S. - I only have about 3,000 domain names in our company > block list. > > Every one of them *verified* spammers. ;0) > > > > -----Original Message----- > > From: Mitchell Mike [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, August 27, 2003 7:05 AM > > To: Exchange Discussions > > Subject: RE: Message Filtering > > > > > > Jim, > > > > Thanks for the book reference. I will run out and get it. > > > > I was trying to block Neena [EMAIL PROTECTED], and I > > used ew01.com > > and that didn't block it. According to the rules, how > would you have > > blocked this junk mail? > > > > Thanks, > > > > Mike > > > > -----Original Message----- > > From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] > > Sent: Tuesday, August 26, 2003 11:37 AM > > To: Exchange Discussions > > Subject: RE: Message Filtering > > > > > > Roger, > > > > I posted this earlier in the thread...maybe you missed it: > > > > Paul Robichaux's "Managing MS Exchange Server", Chapter 8, pg > > 294, bottom of > > the page: > > > > @foe.com - reject mail from foe.com or any subdomain [EMAIL PROTECTED] - > > reject mail from foe.com, but not a.foe.com > > > > So Nate's response was spot on. > > > > Jim Blunt > > E-mail Admin > > Network Infrastructure Group > > Bechtel Hanford, Inc. > > > > -----Original Message----- > > From: Roger Seielstad [mailto:[EMAIL PROTECTED] > > Sent: Tuesday, August 26, 2003 8:07 AM > > To: Exchange Discussions > > Subject: RE: Message Filtering > > > > > > Hmm - I have no problem with you saying it works that way > > (haven't been able > > to try it) but that's not the way I would expect it to work - > > I would expect > > it to be more restrictive in how it blocks, so @ivy.com only blocks > > @ivy.com. > > > > That's pretty standard practice in other MTA's I've used over > > the years, > > which is why it seems a little out of whack. > > > > -------------------------------------------------------------- > > Roger D. Seielstad - MTS MCSE MS-MVP > > Sr. Systems Administrator > > Inovis Inc. > > > > > > > -----Original Message----- > > > From: Couch, Nate [mailto:[EMAIL PROTECTED] > > > Sent: Tuesday, August 26, 2003 10:43 AM > > > To: Exchange Discussions > > > Subject: RE: Message Filtering > > > > > > > > > Then can you explain why I can enter @fr or @biz and the > > server blocks > > > anything that ends with .fr or .biz. Doesn't this qualify > > as blocking > > > any domain or subdomain that ends with these? It seems to > > me that it > > > does. > > > > > > > > > > > > > ---------- > > > > From: Roger Seielstad > > > > Reply To: Exchange Discussions > > > > Sent: Tuesday, August 26, 2003 9:34 AM > > > > To: Exchange Discussions > > > > Subject: RE: Message Filtering > > > > > > > > Actually, that doesn't support what you're saying. > > > > > > > > "To prevent all users in a specific domain from delivering > > > messages to > > > > your > > > > site, type the domain name in the following format: > > @domainname.com" > > > > > > > > > > > > Ivy.com and mail.ivy.com are two, distinct domains, and > > > therefore blocking > > > > @ivy.com should not implicitly block @mail.ivy.com. > > > > > > > > I'd be interested to know that it blocks subdomains that > > it is not > > > > explicitly told to block, though. That's quite a bug. > > > > > > > > Roger > > > > -------------------------------------------------------------- > > > > Roger D. Seielstad - MTS MCSE MS-MVP > > > > Sr. Systems Administrator > > > > Inovis Inc. > > > > > > > > > > > > > -----Original Message----- > > > > > From: Couch, Nate [mailto:[EMAIL PROTECTED] > > > > > Sent: Tuesday, August 26, 2003 10:14 AM > > > > > To: Exchange Discussions > > > > > Subject: RE: Message Filtering > > > > > > > > > > > > > > > Check out Q245465 for Exchange 5.5. It backs up what I said > > > > > earlier. I have used this successfully on the Exchange > > 5.5 setups > > > > > I > > > have managed. > > > > > > > > > > Nate Couch > > > > > EDS messaging > > > > > > ---------- > > > > > > From: Roger Seielstad > > > > > > Reply To: Exchange Discussions > > > > > > Sent: Tuesday, August 26, 2003 6:14 AM > > > > > > To: Exchange Discussions > > > > > > Subject: RE: Message Filtering > > > > > > > > > > > > You'd have to block it as 'ivy.net', not '@ivy.net' > > > > > > > > > > > > > -------------------------------------------------------------- > > > > > > Roger D. Seielstad - MTS MCSE MS-MVP > > > > > > Sr. Systems Administrator > > > > > > Inovis Inc. > > > > > > > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Couch, Nate [mailto:[EMAIL PROTECTED] > > > > > > > Sent: Monday, August 25, 2003 7:31 PM > > > > > > > To: Exchange Discussions > > > > > > > Subject: RE: Message Filtering > > > > > > > > > > > > > > > > > > > > > My understanding of reading through the help file is that > > > > > if you block > > > > > > > @ivy.net all of the subdomains are blocked as well. > > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Fyodorov, Andrey > [mailto:[EMAIL PROTECTED] > > > > > > > Sent: Monday, August 25, 2003 3:35 PM > > > > > > > To: Exchange Discussions > > > > > > > Subject: RE: Message Filtering > > > > > > > > > > > > > > > > > > > > > Two stars (**) would be an overkill > > > > > > > > > > > > > > > > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Mitchell Mike [mailto:[EMAIL PROTECTED] > > > > > > > Sent: Monday, August 25, 2003 4:24 PM > > > > > > > To: Exchange Discussions > > > > > > > Subject: RE: Message Filtering > > > > > > > > > > > > > > Nate, > > > > > > > > > > > > > > I don't understand what you are saying? I know I > can block > > > > > > > full domains > > > > > > > (@yahoo.com) but what I want is to block @**.ivy.net for > > > > > > > @01.ivy.net and @02.ivy.net > > > > > > > > > > > > > > You see the suffix is .ivy.net but the prefix is 01 > > and 02... > > > > > > > > > > > > > > Thanks, > > > > > > > > > > > > > > Mike > > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Couch, Nate [mailto:[EMAIL PROTECTED] > > > > > > > Sent: Monday, August 25, 2003 2:18 PM > > > > > > > To: Exchange Discussions > > > > > > > Subject: RE: Message Filtering > > > > > > > > > > > > > > > > > > > > > You can wildcard your filters for domains. > > > > > > > > > > > > > > On the IMS under Message Filtering you can enter > > > domains using the > > > > > > > > > > > > > > @domain.com (.net, etc.) > > > > > > > > > > > > > > You can filter a whole country in a similar > fashion by using > > > > > > > > > > > > > > @fr (for France) > > > > > > > > > > > > > > For example. > > > > > > > > > > > > > > > > > > > > > Regards. > > > > > > > > > > > > > > Nate Couch > > > > > > > EDS Messaging > > > > > > > > > > > > > > > ---------- > > > > > > > > From: Mitchell Mike > > > > > > > > Reply To: Exchange Discussions > > > > > > > > Sent: Monday, August 25, 2003 1:50 PM > > > > > > > > To: Exchange Discussions > > > > > > > > Subject: Message Filtering > > > > > > > > > > > > > > > > Greetings, > > > > > > > > > > > > > > > > Outlook 98 Exchange 5.5 Windows 2000 > > > > > > > > > > > > > > > > Is there any way to use a wildcard when doing messaging > > > > > > > filtering on > > > > > > > > Exchange 5.5 Admin? (Connections, IMS, > > Connections, message > > > > > > > filtering) > > > > > > > > > > > > > > > We are trying to filter eMAIL using this > feature and there > > > > > > > are several > > > > > > > > > > > > > > > domains that are the same except for a few characters. > > > > > What is the > > > > > > > > limit of number > > > > > > > > of sites you can block? > > > > > > > > > > > > > > > > Thanks, > > > > > > > > > > > > > > > > Mike Mitchell > > > > > > > > Systems email Administrator > > > > > > > > Alverno Information Services > > > > > > > > * [EMAIL PROTECTED] > > > > > > > > *:(317) 783-9341 EXT. 6211 > > > > > > > > > > > > > > > > "Education is when you read the fine print, > experience is > > > > > > > what you get > > > > > > > > > > > > > > > when you don't!" - Pete Seeger > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _________________________________________________________________ > > > > > > > > List posting FAQ: > > > > > http://www.swinc.com/resource/exch_faq.htm > > > > > > > > Web Interface: > > > > > > > > > > > > > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?> > > > > > enter=exchange&text_mode > > > > > > > > =&la > > > > > > > > ng=english > > > > > > > > To unsubscribe: > mailto:[EMAIL PROTECTED] > > > > > > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _________________________________________________________________ > > > > > > > List posting FAQ: > > > http://www.swinc.com/resource/exch_faq.htm > > > > > > > Web Interface: > > > > > > > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > > > > > > ext_mode=& > > > > > > lang > > > > > > =english > > > > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > > > > > > > > > > _________________________________________________________________ > > > > > > List posting FAQ: > > > http://www.swinc.com/resource/exch_faq.htm > > > > > > Web Interface: > > > > > > > > > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > > > > ext_mode=& > > > > > lang=english > > > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > > > > > > > _________________________________________________________________ > > > > > List posting FAQ: > > http://www.swinc.com/resource/exch_faq.htm > > > > > Web Interface: > > > > > > > > > > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > > > ext_mode=&la > > > > > ng > > > > > =english > > > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > > > > > > > _________________________________________________________________ > > > > > List posting FAQ: > > http://www.swinc.com/resource/exch_faq.htm > > > > > Web Interface: > > > > > > > > > > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > > > ext_mode=&la > > > > > ng > > > > > =english > > > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > > > > > > > _________________________________________________________________ > > > > > List posting FAQ: > > http://www.swinc.com/resource/exch_faq.htm > > > > > Web Interface: > > > > > > > > > > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > > ext_mode=&la > > > > ng=english > > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > > > > > > > > > _________________________________________________________________ > > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > > Web Interface: > > > > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > > > =&la > > > ng > > > =english > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > _________________________________________________________________ > > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > > Web Interface: > > > > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode > > > =&la > > > ng=english > > > To unsubscribe: mailto:[EMAIL PROTECTED] > > > Exchange List admin: [EMAIL PROTECTED] > > > > > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > > ext_mode=&lang > > =english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=&lang > =english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=&lang > =english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t ext_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]