Match field syntax

[Abdelrahman]

Hello,

So I have a problem with blocking specific emails, I need to block xx@xx.com,

I added the syntax as following
Field= to
Value= xx@xxx.com

The problem is when I try to send "manual" emails, it gets blocks successfully, but when some system emails from the server to the same emails xx@xx.com it deliver without any issues

I tried
Field= to.*
Value= xx@xxx.com

I wanted to try to\ .* but it's not working, looking for ignoring the space after "to" but even after that I'm not sure if it will be blocked or no

Thank you

 

[hata_ph]

show your what action rules and the raw email format.