3
How to use content filtering and wildcards to detect spam from this domain...
Question asked by Michael Robinson - 12/11/2017 at 10:11 AM
Answered
I'm having trouble getting content filtering in Smartmail 16 to pull out certain domains.  I think I am not using the wildcards correctly.  Can anyone help?
 
Here is an example:
 
email address = designer.sunglass.deals@silky.quety.win
 
I would like to filter everything containing    ".win" after the @ because I am getting 100 emails per day from .win and they are all spam.
 
I have tried these but they do not work:
 
*.win
*@*.*.win
 
I have it set to allow wildcards and any condition must be met since I am running two conditions.
 
 

16 Replies

Reply to Thread
2
Scarab Replied
Marked As Answer
Here is how to do this using Custom Rules in SmarterMail with RegEx:
 
Rule Name: .win domain
Rule Source: Header
Header: Return-Path (you can use the From but Return-Path works best as many times the From is spoofed. It is *VERY* important not to use the trailing colon in this field!)
Rule Source: Regular Expression
Rule Text: .+\.win>$ (It is important to include the trailing angled bracket otherwise it won't work
Weight: Depends on your scoring system. If using a 10/20/30 set it at 20.
Match Multiple: Off
Enable Spool Filtering: On
Enable Outgoing Spool Filtering: Optional
 
This rule will work for both example1@domain.win and example2@subdomain.domain.win.
0
Patrick Mattson Replied
Can you add multiple rules to block different domains, one per line, or does the expression take that as something an "and" or "or". For example, I sometimes see Spam from .bid and .xyz. I would like to make one rule. I figured out how to do this in Spamassassin, but not in SmarterMail.
0
Scarab Replied
Patrick,

Yes, you can add multiple domains in the Rules Text field (one per line). It assumes "OR" so you would not add that. So, you would just set your Rule Text to something like:

.+\.bid>$
.+\.top>$
.+\.xyz>$
.+\.win>$
.+\.work>$
.+\.zip>$
0
Michael Robinson Replied
Dumb question. Where do I set up custom rules?
Cant seem to find it when logged in as domain mgr
0
Michael Robinson Replied
where do you do add custom rules within smartermail 16 ?
 
I cant seem to find it
 
thx
 
Michael
0
Scarab Replied
To add a new Custom Rule in SM16 it is under SETTINGS > ANTISPAM > SPAM CHECKS and click on the [NEW] button.
0
Andrea Free Replied
Employee Post
Custom spam checks can be created by logging in as the System Admin and going to Settings > Antispam > Spam Checks tab. Click New, and you can enter the settings Scarab posted above.
Andrea Free SmarterTools Inc. 877-357-6278 www.smartertools.com
0
Michael Robinson Replied
thank you - I've set it up, now wait and see

many thanks
0
Michael Robinson Replied
it's working thank you
0
Michael Robinson Replied
it's working thank you for your help
0
www.HawaiianHope.org - Providing technology services to non profit organizations, low income families, homeless shelters, clean and sober houses and prisoner reentry programs. Since 2015, We have refurbished over 11,000 Computers !
0
Scarab
So does this for SM 16 just filter it as spam or does it prevent it from being processed in the first place ?
www.HawaiianHope.org - Providing technology services to non profit organizations, low income families, homeless shelters, clean and sober houses and prisoner reentry programs. Since 2015, We have refurbished over 11,000 Computers !
0
Matt Petty Replied
Employee Post
It stops dead in the tracks at the SMTP level. It will throw an SMTP error and close the session.
Matt Petty Software Developer SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
Thanks Matt !  So what Scarab described here is a custom rule for SMTP, not just spam filtering. So this is the implementation of what Scarab described / requested in the first link i posted ? 
It is still marked as "Under Consideration"
www.HawaiianHope.org - Providing technology services to non profit organizations, low income families, homeless shelters, clean and sober houses and prisoner reentry programs. Since 2015, We have refurbished over 11,000 Computers !
0
Matthew Leyda Replied
From what Tim said in other posts. V16 is baked and wont get any enhancements. You have to hold out hope for Ver 17.
Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP
0
Michael Graveen Replied
Does this work the same way in SM15.x?  I don't see a SPAM CHECKS section.

Thanks,

Mike

Reply to Thread