I cannot create a working transport rule to block email coming from 'The IT Brief'. The sending email address is email@example.com but they have so many servers that the '11' on the end could be any number. I have tried creating transport rules that look for text patterns matching 'techwhitepaperemail' in the From field with no luck. I also tried some other variations of transport rules and the mails still get through. Hopefully someone can point me in the right direction in terms of creating a working transport rule.