cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
813
Views
0
Helpful
1
Replies

Blocking Russian Spam

fyrefighter77
Level 1
Level 1

Hey all,

Trying to get a content filter to quarantine anything coming from a .ru or .cz domain. I thought the following would do the trick:

if (mail-from == "\\.(ru|cz)$") { quarantine ("Policy"); } 


However, stuff from these domains is still getting thru. Also tried moving this rule to the top of the order to see if that had an effect. No dice.

I've gotta be missing something REALLY stupid but I can't see it. Any data?

1 Reply 1

Andrew Wurster
Level 1
Level 1

include a copy of the mail_logs to illustrate the message going through your system and we can check it against your filter syntax.