How to block Senders that have a space in the "FROM" name

xaviergrange

Hi everybody, since few day we've received spam in our exchange server.
those mails are not marked as SPAM.
The Name address of these mails look like this "arturmartin @ our domain name" (it's our domain name , and the From is random mail address from .ru .nl .cn ...

Is there a way in smtp proxy to block mail wtih a space in the sender name.
All rules that i've done with "from:" don't work.

Thank you for helping me

Bruce_Briggs

You can try using RegEx instead of Pattern Match.

Try this:
(?i)(@\s.;mydomain.com)
This should match:
user @ mydomain.com

For:
user @ mydomain com
Try:
(?i)(@\s.;mydomain\scom)

Bruce_Briggs

DAMN forum is changing posted characters.
No idea why!!!!!!!!!!!!
remove the semicolon from the above strings prior to mydomain

xaviergrange

Hi Bruce,

I wrote this in my firewall config a few week ago.
It seems to work.

thanks a lot for your help

james.carson

@Bruce_Briggs

Try using the markdown features like the code tag. It makes the weird formatting go away. abc123@google.com and :D :P should show up without any weird formatting

Bruce_Briggs

So we now need to learn Markdown in order to post many things correctly here ????
NOT user friendly.

Is there no default option which could be set for these boards to allow text to be not modified unless using Markdown ???

james.carson

Hi @Bruce_Briggs

I can certainly have the team that manages the forums look into it -- the markdown just lets you do it now by adding a tag.

I'll see what I can do.

Bruce_Briggs

Thanks

Also, can you post a link to a Markdown doc which shows the meaning of :P

Note that colon D displays as an imogee on this board

james.carson

Hi @Bruce_Briggs
It's a link at the bottom of the text box that pops up when you post.
It links here:
https://en.wikipedia.org/wiki/Markdown

Bruce_Briggs

But when I search that site for (colum D) no hits are found.
So what am I missing?

james.carson

Hi Bruce,

You have to put a formatting tag around it. There isn't anything specific for : D.


code> :D /code >

(add the open < to make that work)