Blocking Subdomain in Who Objects

[Kottl]

Hi all,

Unfortunately, we are currently receiving a lot of spam emails from an NL service provider. Unfortunately, he sends via various IP addresses and domains. However, the email addresses / domains are almost structured like this

user@nl.domain.xx
@nl.niveauvoll.fit, @nl.mycheck.de, @nl.shopping-trend.net, @nl.youbuy.com, @nl.hotel24.eu.....

I would now like to block all domains that contain the subdomain @nl.*.

I tried it with a "Who Objects" - Regular Expression - Regex "*@nl.*.*, but that also blocks user@nlgood.com

What am I doing wrong here?

Thanks, Kottl

 

[Stoiko Ivanov]

try:
'.*@nl\..*'
(with regexes '.*', matches zero or more characters not '*' - and you need to escape the literal '.' by writing '\.')

I hope this helps!

 

[Kottl]

Hi Stoiko,

thank you very much. That seems to work. I will try.

Best Kottl