Solved

Need Exchange 2010 transport rule that will block spam from 'The IT Brief'

Posted on 2014-01-21
4
1,472 Views
Last Modified: 2014-10-31
I cannot create a working transport rule to block email coming from 'The IT Brief'.  The sending email address is info@techwhitepaperemail11.com but they have so many servers that the '11' on the end could be any number.  I have tried creating transport rules that look for text patterns matching 'techwhitepaperemail' in the From field with no luck.  I also tried some other variations of transport rules and the mails still get through.  Hopefully someone can point me in the right direction in terms of creating a working transport rule.
0
Comment
Question by:raduk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 35

Accepted Solution

by:
Joseph Daly earned 200 total points
ID: 39798007
You probably want to do this using a regular expression. If the numbers at the end are the only thing that is changing i think you could probbaly use something like.

techwhitepaperemail\d\d

Im not too great with regular expressions so you may need to play around with it a bit.

http://technet.microsoft.com/en-us/library/aa997187%28v=exchg.141%29.aspx
0
 
LVL 35

Expert Comment

by:Joseph Daly
ID: 39798010
I just tested this using regexpal and it looks like it may work.

http://regexpal.com/

techwhitepaperemail\d\d.com
0
 
LVL 1

Author Comment

by:raduk
ID: 39801540
Joe,

Can I use regular expressions in EMC or do i need to use powershell?



I have already created the following 2 transport rules to test(one using from address containing words and one using text pattern matching).

Apply rule to messages
from users that are 'outside the organization'
 and when the From address matches 'info@techwhitepaperemail\d\d.com' or
 'info@techwhitepaperemail\d.com'
redirect the message to 'me@mydomain.com'

Apply to messages
from users that are 'outside the organization'
 and when the From address contains 'info@techwhitepaperemail\d\d.com' or
 'info@techwhitepaperemail\d.com'
redirect the message to 'me@mydomain.com'
0
 
LVL 1

Author Comment

by:raduk
ID: 39801776
OK I think I found the answer to that last question

For Exchange 2007:
In the Exchange Management Console, you can use regular expressions with any condition or exception that contains the words "text patterns." For example, you can use regular expressions with the following condition:
"when the From address contains text patterns"


Note The "Patterns" predicate accepts a regular expression that can be used to match text that follows an identifiable pattern. You must enclose the expression in quotation marks (")

https://support.microsoft.com/kb/2673160



Regular Expressions in Exchange 2010:
In the Exchange Management Shell, you can use regular expressions in any predicate that accepts the Patterns predicate property. In the Exchange Management Console, you can use regular expressions with any condition or exception that contains the words with text patterns. For more information about predicates, see Transport Rule Predicates.t.


I'm unsure if 2010 requires the (") around the expressions so I will likely create rules using both.
0

Featured Post

Comparison of Amazon Drive, Google Drive, OneDrive

What is Best for Backup: Amazon Drive, Google Drive or MS OneDrive? In this free whitepaper we look at their performance, pricing, and platform availability to help you decide which cloud drive is right for your situation. Download and read the results of our testing for free!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Read this checklist to learn more about the 15 things you should never include in an email signature.
As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question