but that is only for a whoile domain (specific domain and / or email address), it wont allow wildcard Ideally i'd like to do *.info below are a couple of the domains im referring to @tyumanimo.info @qqo92.superiorcompound.info @overviewrealization.info It would not be feasible to manually enter them as they change constantly
From: c.house...@gmail.com To: exchangelist@lyris.sunbelt-software.com Subject: RE: Blocking by domain types Date: Mon, 23 May 2011 10:49:50 -0400 Generally one uses sender filtering to block an entire domain or specific senders in a domain. http://technet.microsoft.com/en-us/library/bb125179.aspx Carl From: Jean-Paul natola [mailto:jnat...@hotmail.com] Sent: Monday, May 23, 2011 10:02 AM To: MS-Exchange Admin Issues Subject: Blocking by domain types Hi all, I've been monitoring the the spam and noticed that over 98% is coming from some bogus *.info domain, so I created a rule to change the scl to 8 (which is supposed to send to send it to the quarantine mailbox) it does indeed change the score, but it does not send it to the quarantine (still trying to figure that one out). So instead i decided to create an Edge transport rule that redirects messages "when the From address matches .info" to the quarantine box, that ALMOST worked except that legit email , for example, claei...@googlegroups.com , is also getting quarantined. Is there a proper way to block domain types (ie .info)? or Is there a reason with the first rule the messages with the scl of 8 are NOT being quarantined? TIA J --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
