domain not blocked

[digiweb]

There was a spam mail from xxxx@e.abcd.com. To prevent this, I added abcd.com as a domain to the blacklist. (Who Objects->Black List->Type: Domain) But the mail was filtered again. I think it passed because it is a subdomain. How can I block a domain address including all subdomains?

 

[hata_ph]

Show the spam mail header is raw format.

 

[digiweb]

this mail raw attach

 

[hata_ph]

Who object refer to Return-Path: <rpmelike@e.creafone.com>.
Did you add e.creafone.com domain?

 

[digiweb]

I added creafone.com. Doesn't this cover all subdomains as a domain address?
x.creafone.com
y.creafone.com

 

[hata_ph]

I added creafone.com. Doesn't this cover all subdomains as a domain address?
x.creafone.com
y.creafone.com

As I know the who object domain entry refer to Return-Path header field.

 

[digiweb]

thank's bro.

I want to ask one more thing.

Reject unknown clients
Reject unknown senders
DNSBL
Use SPF

I want to create a trusted list where I don't want rules like is it possible?
For example: For the abcd.com address, I want it to be delivered directly, regardless of these rules. because I know this domain address.

 

[hata_ph]

Create a highest priority rule with who object domain list.
To bypass SPF checking, add the domain list to Mail Proxy -> Whitelist.
But I am not sure will above setting bypass reject unknown sender/clients as I did not enable it.

 

[digiweb]

thank's bro