Need Exchange 2010 transport rule that will block spam from 'The IT Brief'

I cannot create a working transport rule to block email coming from 'The IT Brief'.  The sending email address is info@techwhitepaperemail11.com but they have so many servers that the '11' on the end could be any number.  I have tried creating transport rules that look for text patterns matching 'techwhitepaperemail' in the From field with no luck.  I also tried some other variations of transport rules and the mails still get through.  Hopefully someone can point me in the right direction in terms of creating a working transport rule.
LVL 1
radukAsked:
Who is Participating?
 
Joseph DalyConnect With a Mentor Commented:
You probably want to do this using a regular expression. If the numbers at the end are the only thing that is changing i think you could probbaly use something like.

techwhitepaperemail\d\d

Im not too great with regular expressions so you may need to play around with it a bit.

http://technet.microsoft.com/en-us/library/aa997187%28v=exchg.141%29.aspx
0
 
Joseph DalyCommented:
I just tested this using regexpal and it looks like it may work.

http://regexpal.com/

techwhitepaperemail\d\d.com
0
 
radukAuthor Commented:
Joe,

Can I use regular expressions in EMC or do i need to use powershell?



I have already created the following 2 transport rules to test(one using from address containing words and one using text pattern matching).

Apply rule to messages
from users that are 'outside the organization'
 and when the From address matches 'info@techwhitepaperemail\d\d.com' or
 'info@techwhitepaperemail\d.com'
redirect the message to 'me@mydomain.com'

Apply to messages
from users that are 'outside the organization'
 and when the From address contains 'info@techwhitepaperemail\d\d.com' or
 'info@techwhitepaperemail\d.com'
redirect the message to 'me@mydomain.com'
0
 
radukAuthor Commented:
OK I think I found the answer to that last question

For Exchange 2007:
In the Exchange Management Console, you can use regular expressions with any condition or exception that contains the words "text patterns." For example, you can use regular expressions with the following condition:
"when the From address contains text patterns"


Note The "Patterns" predicate accepts a regular expression that can be used to match text that follows an identifiable pattern. You must enclose the expression in quotation marks (")

https://support.microsoft.com/kb/2673160



Regular Expressions in Exchange 2010:
In the Exchange Management Shell, you can use regular expressions in any predicate that accepts the Patterns predicate property. In the Exchange Management Console, you can use regular expressions with any condition or exception that contains the words with text patterns. For more information about predicates, see Transport Rule Predicates.t.


I'm unsure if 2010 requires the (") around the expressions so I will likely create rules using both.
0
All Courses

From novice to tech pro — start learning today.