Joe: I have a custom Country rule set up using a regular expression:
\.ru$|\.ar$|\.au$|\.at$|\.uk$|\.jo$|\.jp$|\.de$|\.lt$|\.dk$|\.pl$|\.nl$|\.be$|\.at$|\.uy$|\.ae$|\.br$|\.se$|\.cn$|\.ch$|\.cy$|\.tw$|\.kr$|\.it$|\.id$|\.in$|\.gr$|\.es$|\.cz$|\.pe$|\.pt$|\.hu$\.ua$|\.sk$|\.za$|\.pe$ This rule blocks all senders who have one of the items in the list as their final few characters of the email address. Set the rule to delete the email. Add more countries using a |\.xx$ string. The | is a OR function (this or this or this or...). The backslash period (dot) says that the dot is literal, the xx is the 2 character country code (in your case pl) and the $ sign at the end says the .xx must be at the right end of the email address. If you only have one country, then use \.pl$ in the expression line. Set the rule type to be regular expression. I have a whole list of regular expressions for items dealing with sex, drugs, meds, sales, etc. Drops em out quick as a wink. The rule is to not put too many expressions in a string. I probably need to split my country rule into 3 or 4 and alphabetize them to make it easy to check for dups. Let me know if this works for ya... Chip Chuprinko Programming/Network Admin -------------------------------------- Southwest Clean Air Agency From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Tuesday, September 09, 2008 7:39 AM To: MS-Exchange Admin Issues Subject: Blocking a whole domain I've been getting an increase of spam from .pl. In order to block this whole domain, would that be in the Sender Filtering of Global Settings -> Message Delivery? I put it in as [EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]> Is that correct? Joe Heaton AISA Employment Training Panel 1100 J Street, 4th Floor Sacramento, CA 95814 (916) 327-5276 [EMAIL PROTECTED] ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
