PMG rule: quarantine emails from gmail.com if recipient count exceeds 3

[Konstantin2000]

Hi. Is it possible to configure a filter so that if an email comes from the gmail.com domain and it has more than 3 recipients (for example: To: 1@my.com, 2@my.com, 3@my.com), then such an email should be sent to quarantine?

 

[Badej]

You can add a rule in custom.cf that will add 5.0 points if the sender's address is @gmail.com and the recipient's address is 3+

header        __FROM_GMAIL_ADDR    From:addr =~ /@gmail\.com$/i
header        __TO_MANY_RCPT        To =~ /(,[^,]*){2,}/
meta        FROM_GMAIL_MANY_RCPT    __FROM_GMAIL_ADDR && __TO_MANY_RCPT
describe    FROM_GMAIL_MANY_RCPT    Gmail sender with 3+ recipients in TO
score        FROM_GMAIL_MANY_RCPT    5.0