If you've got pro, you could add a filter:
MAILFROM10 CONTAINS [EMAIL PROTECTED]
that will check the envelope mailfrom.
To check for those addresses in the headers:
HEADERS 10 CONTAINS [EMAIL PROTECTED]
Another option is to update your virus software more often to minimize the
opportunity window for the virus.
----- Original Message -----
From: "Kevin Rogers" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, June 02, 2005 5:15 PM
Subject: [Declude.Virus] Newbie question
How do I ban certain email addresses?
Some viruses have gotten through lately (first that I know about since
installing Declude) sent from forged email addresses using our own domain.
We do not whitelist our domain. I'd like to ban some of these common
addresses (e.g., [EMAIL PROTECTED], [EMAIL PROTECTED], etc.)
Thanks.
---
[This E-mail was scanned for viruses.]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
