Video Screencast Help

Can I block people whose email addresses don't match their name?

Created: 10 Mar 2013 • Updated: 10 Mar 2013 | 3 comments

Hello,

I get about 20 emails a week from people  whose names I know but these aren't coming from them.   The real email address these fake emails are coming from changes nearly every other day as well as the domain so I can't block domains as those change and sometimes are from legit domains.

I know their real addresses so I'd like to make a rule of some kind.   For example I know John Doe and I know his email address is jdoe@acme.com  I'd like to block any emails coming from John Doe that aren't originating from jdoe@acme.com  so if I get a email from jdoe@acme.com and I look at the originating email address and it is billybob@hotmail.com or mary@gmail.com   - I want it blocked.

I'm using exchange 2013 on Windows 2012 with SMSE 7   I have the antispam enabled.  My firewall is blocking emails on the spamhaus list and other known spam offenders.

Operating Systems:

Comments 3 CommentsJump to latest comment

toby's picture

What you would need to do is to compare the envelope from or to with the data envelope from/to.

With SMSMSE you cant get into the mail header, but you might be able to get a solution using Exchange Transport Rules or having a mail gateway with an MTA that is able to work with header.

Hope this helps,

cheers, toby

------------------------------------------------------------------

Best regards!

toby

CISSP / STS / MCP 

boe1's picture

I'm hoping Symantec considers adding features like that.  Seems pretty silly to pay for Symantec antispam if the solution is to use Exchange's antispam because it is more capable.

toby's picture

You asked whether you can block addresses(envelope mail header) that doesnt match their name (display name data section of mail)

This feature is only possible right now via Exchange transport rules to take advantage of the Mail Header, or you can do it via our mail gateway solution. (http://www.symantec.com/messaging-gateway)

If it is spam related it might be interested in terms of why this mails were not detected by the antispam filter. In this case, could you please submit the spam samples? (http://www.symantec.com/business/support/index?pag...)

Thanks!

 

 

------------------------------------------------------------------

Best regards!

toby

CISSP / STS / MCP