Score Email from Domains at SMTP Level
Idea shared by kevind - Yesterday at 8:43 AM
Proposed
We're receiving a lot of spam from .space domains. I'm guessing others are seeing this as well. Here's something that would be cool to have...

The ability to score addresses and domains at the SMTP level.  So I could assign .space domains 15 points and if combined with RBLs and other SMTP scoring, the message would be blocked at SMTP. Currently we're only able to score domains after they are received, so end up with thousands of messages in Junk folder.

If you agree, vote this up as it would be a nice feature. If SM already has this feature, please provide instructions on how to do it. Thanks!
We flat out block that entire tld via EHLO, Email Address and Domain Blocking, as well as via spool filtering on the headers (because 3rd party relay services)...

There's probably a dozen other TLDs we fully block - nothing but garbage.

Not sure what features you have available on older versions -- 
MailEnable survivor / convert --
That can be done using a custom spam check rule.

can you post the full list from that inhere?
Brian,

I'm sure plenty can be added, but just what have added over time when noticing spam domains.

.+\.asia>$
.+\.beauty>$
.+\.cricket>$
.+\.click>$
.+\.digital>$
.+\.in>$
.+\.ink>$
.+\.link>$
.+\.life>$
.+\.mobi>$
.+\.party>$
.+\.pw>$
.+\.quest>$
.+\.rocks>$
.+\.ru>$
.+\.ru.com>$
.+\.science>$
.+\.site>$
.+\.shop>$
.+\.space>$
.+\.tk>$
.+\.tech>$
.+\.tst>$
.+\.work>$
.+\.th>$
@Millenium, thanks for the tip with custom spam rule. We do use that and the message gets put in Junk folder.

What I'm asking for is to take it to the next level. Be able to assign a score to sender's domain at the SMTP level. Then we can reject it during SMTP and not even accept the message.
You could set the "high" spam level to "delete", give it a higher number so there's more spread between your "junk mail" level and "delete" level.

Then those custom spam rules will at least achieve "deletion".  

There's no way to do it with scoring at the connection/data transmission level in current versions - the only way to achieve that would be maybe a custom RBL or URIBL server implementation that you maintained seperately.

The Security -> Email Address/Domain blocks achieve it at the connection level - but there's only wildcard searches and not regex yet.  

We have one that searches for aaaco*@*, and a ton of others -

MailEnable survivor / convert --

Reply to Thread

Enter the verification text