blocking domains...

[fluid11]

ESM - Global Settings - Message Delivery - Filtering

I have a long list of domains that we do not accept mail from. It seems that MS only allows you to specify domains in this format....

*@domain.com

This doesn't work when spammers use different domains to send mail from, like this...

d1.domain.com
d2.domain.com
d3.domain.com

They constantly change the domain name. Is there a way to specify a wildcard in front of the domain name so I don't have to add new domains all of the time?

I want this, below, but you can't do it...

*@*.domain.com


Thanks,
Chris

 

[brontosaurus]

did you try just @domain.com ? (no asterisk)

 

[fluid11]

doesn't work. If you use @domain.com, they can still send from @whatever.domain.com. This is what my problem is. I don't understand why M$ would set this up like that.

 

[jaksen112]

Thats worked for me before, Just using @domain.com, I never recieved email from that domain again.

Although if you want to get evil on them set up a fwd'ing rule that fwd;s all their junk mail right back to them =) 01110000

 

[phishe]

Try: *@*.domain.com

This will block all emails from sub-domains of doamin.com

hehe, I never thought of that forwarding rule. I'm going to give that a shot!

 

[fluid11]

phishe - in my first post I said that thats what I wished I could do, but it doesn't work.

The forwarding rule will hurt your own server more than them since a lot of the addresses are spoofed or sent from open relays. Your server will try all day to forward the mail back to a non-existent address. Spammers generally don't use mail servers or domains that they own themselves.

 

[phishe]

You sure can, see this article....

http://www.msexchange.org/pages/articles.asp?art=564

 

[phishe]

Oh, you can change the expiration time and retry intervals for outgoing mail. I have our timeout set to 1 hour. Email sent back to a non-existent spammer will retry every 10 minutes and then give up after an hour. In our situation (25 users) we don't get enough spam to overload exchange forwarding back to the sender.

 

[fluid11]

Thanks, I guess it does work the way I want it to afterall For some reason, I thought it didn't work.

A big problem with sending mail back to spammers is that its a confirmation that they have reached a valid email address. A lot of spam you get is a just a trick to see if they have reached a valid address. When they know they have found a valid address, then your name goes on a premium list and you get hit twice as hard. I just delete spam and never respond to it.