Block sender to specific domain

[t_claudiochaves]

Hi there,

I have a small/big problem internally in the company. An employee is sending thousands of emails to the domain @yahoo.com. With this, the Yahoo has blocked our IP of receiving e-mails. All employees can no longer send email to Yahoo.com. I need to know how can i create a rule that blocks certain "sender" internally to send emails to the domain yahoo.com.

Our appliance used is the ESA C170.

Thanks for the help.

Att,

Claudio Chaves

[Ken Stieers]

Under Mail Policies/Outgoing Content Filters, create a filter where the conditions are:

Envelope sender=mail address of your bad user

Recipient contains yahoo.com

Set the "apply rule" drop down to Only if all Conditions Match.

Then in the Action pane, set it to drop the mail, or whatever you want to do...

Then in Mail Policies/Outgoing Mail Policies, add that content filter under Content Filters and enable filters in the drop down box at the top.

[t_claudiochaves]

Okay. I am creating a new Outgoing Mail Policy only for this case specifically. The tool asks me to add users (sender and/or recipient). I must add again ?

[Libin Varghese]

Yes you would need to mention either the sender or recipient for the outgoing mail policy.

You could mention both sender : internal user and recipient : yahoo.com in the outgoing mail policy and just enable a content filter with no condition, action set to drop.

Since the sender recipient are already validated by the mail policy the content filter does not need to check it again.

If you mention either sender or recipient in the mail policy then mention both in the content filter.

Thank You!

Libin Varghese

[t_claudiochaves]

Thank you for your help Libin ! I will do tests

Att

Claudio Chaves

[Ken Stieers]

Yes... But then you can change the Content filter to have no conditions.  (eg always apply)

[t_claudiochaves]

Thanks Ken.

Att,

Claudio Chaves

[LuigiDiFronzo9542]

Hello Claudio,

Did you do the test?

I have a similar situation, I've configured the filter with the Outgoing Policy associated with a specific email sender and a email receipt, and after commit the changes I did the test, but the email was received.

What did I miss?

Thanks.

Luigi Di Fronzo.

[exMSW4319]

If one puts both sender and recipient criteria on an Incoming or Outgoing Mail Policy, isn't the implicit operator an "OR"? That would mean that in the OP's case, mail falls into the policy (if it is the first one applicable in the table) if sender = badun@op.org or recipient = @yahoo.com. Whilst dropping all of bad'un's outbound mail could be a good idea in this case, the Yahoo recipients might possibly notice if none of op.org's mail arrived.