How to use content filtering and wildcards to detect spam from this domain...
Question asked by Michael Robinson - December 11, 2017 at 10:11 AM
Answered
I'm having trouble getting content filtering in Smartmail 16 to pull out certain domains.  I think I am not using the wildcards correctly.  Can anyone help?
 
Here is an example:
 
email address = designer.sunglass.deals@silky.quety.win
 
I would like to filter everything containing    ".win" after the @ because I am getting 100 emails per day from .win and they are all spam.
 
I have tried these but they do not work:
 
*.win
*@*.*.win
 
I have it set to allow wildcards and any condition must be met since I am running two conditions.
 
 

15 Replies

Reply to Thread
2
Scarab Replied
Marked As Answer
Here is how to do this using Custom Rules in SmarterMail with RegEx:
 
Rule Name: .win domain
Rule Source: Header
Header: Return-Path (you can use the From but Return-Path works best as many times the From is spoofed. It is *VERY* important not to use the trailing colon in this field!)
Rule Source: Regular Expression
Rule Text: .+\.win>$ (It is important to include the trailing angled bracket otherwise it won't work
Weight: Depends on your scoring system. If using a 10/20/30 set it at 20.
Match Multiple: Off
Enable Spool Filtering: On
Enable Outgoing Spool Filtering: Optional
 
This rule will work for both example1@domain.win and example2@subdomain.domain.win.
0
Can you add multiple rules to block different domains, one per line, or does the expression take that as something an "and" or "or". For example, I sometimes see Spam from .bid and .xyz. I would like to make one rule. I figured out how to do this in Spamassassin, but not in SmarterMail.
0
Scarab Replied
Patrick,

Yes, you can add multiple domains in the Rules Text field (one per line). It assumes "OR" so you would not add that. So, you would just set your Rule Text to something like:

.+\.bid>$
.+\.top>$
.+\.xyz>$
.+\.win>$
.+\.work>$
.+\.zip>$
0
Dumb question. Where do I set up custom rules?
Cant seem to find it when logged in as domain mgr
0
where do you do add custom rules within smartermail 16 ?
 
I cant seem to find it
 
thx
 
Michael
0
Scarab Replied
To add a new Custom Rule in SM16 it is under SETTINGS > ANTISPAM > SPAM CHECKS and click on the [NEW] button.
0
Andrea Rogers Replied
Employee Post
Custom spam checks can be created by logging in as the System Admin and going to Settings > Antispam > Spam Checks tab. Click New, and you can enter the settings Scarab posted above.

Andrea Rogers
Communications Specialist
SmarterTools Inc.
(877) 357-6278

www.smartertools.com

0
thank you - I've set it up, now wait and see

many thanks
0
it's working thank you
0
it's working thank you for your help
0

www.HawaiianHope.org - Providing technology services to non profit organizations, homeless shelters, clean and sober houses and prisoner reentry programs. To date we have given away over 1,000 free computers.

0
Scarab
So does this for SM 16 just filter it as spam or does it prevent it from being processed in the first place ?

www.HawaiianHope.org - Providing technology services to non profit organizations, homeless shelters, clean and sober houses and prisoner reentry programs. To date we have given away over 1,000 free computers.

0
Matt Petty Replied
Employee Post
It stops dead in the tracks at the SMTP level. It will throw an SMTP error and close the session.
Matt Petty
Software Developer
SmarterTools Inc.
(877) 357-6278
www.smartertools.com
0
Thanks Matt !  So what Scarab described here is a custom rule for SMTP, not just spam filtering. So this is the implementation of what Scarab described / requested in the first link i posted ? 
It is still marked as "Under Consideration"

www.HawaiianHope.org - Providing technology services to non profit organizations, homeless shelters, clean and sober houses and prisoner reentry programs. To date we have given away over 1,000 free computers.

0
From what Tim said in other posts. V16 is baked and wont get any enhancements. You have to hold out hope for Ver 17.
Kendra Support
http://www.kendra.com
support@kendra.com
425-397-7911
Junk Email filtered ISP

Reply to Thread