Hey all,
Trying to get a content filter to quarantine anything coming from a .ru or .cz domain. I thought the following would do the trick:
if (mail-from == "\\.(ru|cz)$") { quarantine ("Policy"); }
However, stuff from these domains is still getting thru. Also tried moving this rule to the top of the order to see if that had an effect. No dice.
I've gotta be missing something REALLY stupid but I can't see it. Any data?