Raul, to use Declude to block mail from these domains, you need to create a filter. A filter is a simple text file which contains lines to stop these. Here are 2 different examples of what you can add to your filter depending on what you need...
The example lines below, if used in a filter, will block all TLDs with more than 5 characters...
MAILFROM 0 PCRE (?i:\.[a-z]{5,}$)
REVDNS 0 PCRE (?i:\.[a-z]{5,}$)
HELO 0 PCRE (?i:\.[a-z]{5,}$)
The example lines below, if used in a filter, will block the 3 TLDs that were discussed in this thread...
MAILFROM 0 PCRE (?i:\.(win|icu|best)$)
REVDNS 0 PCRE (?i:\.(win|icu|best)$)
HELO 0 PCRE (?i:\.(win|icu|best)$)
What you need to do to use either if these examples is open a Notepad file and copy/paste the lines in. Save the file to your Declude\Filters directory. You can call it anything you like. For this example we will call it FILTER_TLD.txt.
Once you do that, open your global.cfg file which is in the Declude directory and scroll down to the filters section. You will see lines for other filters.What you need to do is add a line for this filter. It should look like this...
FILTER_TLD filter [PATH]\Declude\filters\FILTER_TLD.txt x 0 0
Be sure to change the [PATH] to the path of your filters directory. For example, if you have Decude installed to your C drive, your line would look like this...
FILTER_TLD filter C:\Smartermail\Declude\filters\FILTER_TLD.txt x 0 0
Next, open your $default$.junkmail file which is in your Declude directory. Add the following line...
FILTER_TLD DELETE
This will cause any mail which triggers the filter to be deleted.
Please be aware that you do not need to delete these messages if you do not want them. You can hold them, re-route them, etc... At the top of the $default$.junkmail file you will see the different options you can use.
I hope this helps. Please let me know if you have any further questions. Thanks!