ESA Message Filter

[bruce747]

I need to filter on a authentication user account (AD account) and the action is to allow to only send messages to a particular recipient domain, eg: *@recipientdomain.com. Emails destined to other domains should be dropped. The sending email could be anything and can't be used to filter, only the authenticating account(smtpauth). Can this be done and what would the syntax of the message filter be? Thanks.

[Ken Stieers]

First off I'd add $SMTPAuthID to a spare header or log message, so you know what the ESA is getting.

Then once you know what that is:

Checksmtpauthid:

If ($SMTPAuthID=='whatever its supposed to be')
{ if (rcpt-to != 'recipientdomain\.com')

{

Quarantine ('Policy');

}

{


Fiddle with the logic, make sure its right.
Then change the Quarantine line to Drop();

[bruce747]

Thanks, I'll give that a go.