PRTG email not blocking.

[dhinilkv]

I have added the blacklist in who objects .*klaviyomail.com, But the mails are still received from spammers with the same domain pattern.



+++++++++++++++++++++++++++++++
Apr 4 07:04:34 proxmox postfix/smtpd[8468]: connect from unknown[192.168.2.1]
Apr 4 07:04:34 proxmox postfix/smtpd[8468]: E14771009C6: client=unknown[192.168.2.1]
Apr 4 07:04:34 proxmox postfix/cleanup[8456]: E14771009C6: message-id=<XcpLy4PZR9WnMuJgk8x6_A@geopod-ismtpd-12>
Apr 4 07:04:34 proxmox postfix/smtpd[8468]: disconnect from unknown[192.168.2.1] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
Apr 4 07:04:34 proxmox postfix/qmgr[1690]: E14771009C6: from=<bounces+24075373-e3d0-lan=bin-drai.com@send.ksd3.klaviyomail.com>, size=39200, nrcpt=1 (queue active)
Apr 4 07:04:35 proxmox pmg-smtp-filter[8042]: 10111E642B93C2EE56D: new mail message-id=<XcpLy4PZR9WnMuJgk8x6_A@geopod-ismtpd-12>#012
Apr 4 07:04:35 proxmox postfix/smtpd[8464]: connect from localhost.localdomain[127.0.0.1]
Apr 4 07:04:35 proxmox postfix/smtpd[8464]: 16C2B101121: client=localhost.localdomain[127.0.0.1], orig_client=unknown[192.168.2.1]
Apr 4 07:04:35 proxmox postfix/cleanup[8456]: 16C2B101121: message-id=<XcpLy4PZR9WnMuJgk8x6_A@geopod-ismtpd-12>
Apr 4 07:04:35 proxmox postfix/qmgr[1690]: 16C2B101121: from=<bounces+24075373-e3d0-lan=bin-drai.com@send.ksd3.klaviyomail.com>, size=39411, nrcpt=1 (queue active)
Apr 4 07:04:35 proxmox postfix/smtpd[8464]: disconnect from localhost.localdomain[127.0.0.1] ehlo=1 xforward=1 mail=1 rcpt=1 data=1 commands=5
Apr 4 07:04:35 proxmox pmg-smtp-filter[8042]: 10111E642B93C2EE56D: accept mail to <enkive@enkive.bin-drai.com> (16C2B101121) (rule: default-accept)
Apr 4 07:04:35 proxmox pmg-smtp-filter[8042]: 10111E642B93C2EE56D: processing time: 0.175 seconds (0, 0.081, 0)
Apr 4 07:04:35 proxmox postfix/lmtp[8457]: E14771009C6: to=<enkive@enkive.bin-drai.com>, relay=127.0.0.1[127.0.0.1]:10023, delay=0.24, delays=0/0/0.05/0.18, dsn=2.5.0, status=sent (250 2.5.0 OK (10111E642B93C2EE56D))
Apr 4 07:04:35 proxmox postfix/qmgr[1690]: E14771009C6: removed
Apr 4 07:04:35 proxmox postfix/smtp[8465]: 16C2B101121: to=<enkive@enkive.bin-drai.com>, relay=none, delay=0.08, delays=0.06/0/0.02/0, dsn=5.4.4, status=bounced (unable to look up host enkive.bin-drai.com: Name or service not known)
Apr 4 07:04:35 proxmox postfix/qmgr[1690]: 16C2B101121: removed

+++++++++++++++++++++++++++++++

 

[kalachev_89]

Hi.
How you can add who object with wildcard like ".*klaviyomail.com"?

For block mails from *klaviyomail.com you can:
1 create group "block" in what object
2 add "match field" object
Field: From
Value: klaviyomail\.com


3 add rule with high priority
Action Block
What object Block from step 1.