Our domain name is "alanet.org", and lately we are getting hammered by sp**m sent to alanet.org.support. It's obvious that the actual "sender name" in the email is a staff name, and the "alanet.org.support" is the display name. Does any one know of a filter or rule that can utilize the display name to do the filtering?
Murray
