Messaging Gateway

For Several weeks we have been receiving spam email messages that have a pattern to sender address.  We are running version 8.0.2.46

They always come from one of these senders  at a random domain, how do I write a rule to stop these..  eventually the spam defs do start catching them but not before we get 100's of them in



anargyros
anastasia
anastasios
andreas
angelos
aniketos
anna
apostolis
apostolos
argyris
athanasia
athanasios
chara
charalampos
chrysanthe
chrysanthos
chryssa
dareia
demetrios
demi
despina
despoina
diamanto
dimitrios
dimitris

I wouldn't be able to write you a rule, I'm not terribly familiar with RegEx.

I can make some suggestions though to try lowering your suspected spam threshold and make sure that when you look in the message audit log that the sender is not being whitelisted.

Could you take a screen shot of one of the messages from the message audit log and post it?

Hi Chuck,

I think writing regex rules to stop these randomized senders is going to block a lot of legitimate messages as well.  Here is a KB article that provides some useful suggestions to combat spam:

http://service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2008080612113754

Regards,

Adnan

Hi Chuck,

Did you find any of the suggestions useful?

Thanks

Adnan