04-25-2007 06:44 PM
Im having a big problem.....some jerk is sending a lot of spam mail to my domain....the mails come from @gmail.com and always the mail is sent to 10 or 15 people from my domain(each mail that limit).
If a mail with more than 6 recipients @mydomain.com comes, i want it to go to quarantine for example or drop.
Is there any way to put a limit to all the emails from @gmail.com to the number of recipients to my domain?
For example i want that all the emails from @gmail.com cant be sent to more than 5 people to my domain.
This guy knows a lot of people of my enterprise from where im working and is sending lots of mails to a lot of people, he had once the entire list of users in my enterprise.
Thank you!!!
04-25-2007 07:19 PM
You can choose to quarantine messages from 'gmail.com' if the message has more than 5 recipients via the following message filter:
quarantine_high_rcpt:
if ((rcpt-count >5) AND ((mail-from == '(?i)@gmail\\.com$') OR (header("From") == '(?i)@gmail\\.com$'))) {
quarantine("Policy");
}
Make sure that the 'if' statement has no line breaks when you attempt to add this filter.
Hope this helps!!
04-26-2007 12:56 PM
Im too noob to add those lines :S
I ve searched into the Incoming content filters but i dont have any option to put those in the way you told me
How can i add those? Im starting managing this appliance since a couple of weeks, please be patient :P Thx!
04-26-2007 05:20 PM
Take a look at knowledgebase "answer id 275".
04-27-2007 12:56 PM
Thanx man, i should start using that tool called KNOWLEDGBASE LOL
Thank you very much!
EDIT: i did what you said and nothing :( the rule is active, i had commited the rule but still mails from @gmail.com with more than 5 recipients in the email comes and are delivered.
04-27-2007 03:06 PM
I know what this wont work with GMAIL.....if i send a mail to my domain via gmail with 5 recipients...gmails sends 5 different mails with 1 recipient each to my domain.....
in hotmail this works, hotmail send 1 mail with the 5 recipients inside, but gmail instead of mail 1 mail with 5 recipients....they send me 5 connections with 1 recipient each one! How can i stop this now ?:(
04-28-2007 09:25 PM
Take a look at how throttle works. You can reduce anything to anyone.
For example : 1 IP, 1 connection, 1 mail, for an hour...
Create a mail flow policy with it.
04-30-2007 02:14 PM
Nevermind...thanx anyway...its impossible to do that you said...lots of valid gmail mails with 1 recipient comes by hour, if i do that i will be hang here at work :P
Thank anyway!!
05-21-2007 01:37 PM
Im having a big problem.....some jerk is sending a lot of spam mail to my domain....the mails come from @gmail.com and always the mail is sent to 10 or 15 people from my domain(each mail that limit).
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: