Messaging Gateway

Hi,

I'm trying to block inbound email with a certain link to a website.
I have added the name of this website in a custom dictionary, but the emails are still going through.
Tried both the name, and www.name.com,  
How can I make this work?

S.Manshanden

Not if the inbound mail is HTML formatted.  SBG (v8 anyway) does not check the content of HTML tags.  See this item I posted in 2009.  Add your vote to getting this fixed.  It also affect content policies (like checking for credit card data).

https://www-secure.symantec.com/connect/idea/compliance-rules-should-work-text-within-html-markup

What kind of emails are you trying to block? Spam messages typically use disposable domains or web shortening services and don't reuse the same urls. Unwanted newsletters using the same urls are probably also being sent by the same sender, so you could block the from domain or IP instead.

Are you trying to block spam, or access to a site you management doesn't want employee's visiting for other reasons?

I hope this would help!!

http://support.veritas.com/docs/322195 - About content filtering

OR

If you want to stop the access to that website then you can configure your internal DNS to resolve www.name.com to a non-existent IP address (such as 127.0.0.1).

Thanks,
Arjun Shelke

Hi phhowe17,

I'm trying to block spam that is currently not blocked by brightmail.
All these spam messages have different content, and seem to come from different senders, but they all have one thing in common:  a link to www.weleadyou.com
So I thougt of checking for that link, I don't have much alternatives here.
But it's not going to work if text in html is ignored....

Thanks for your information.

S.Manshanden
 

Hi Amanda,
I'm trying to block spam with different content from different senders, but they all point to www.weleadyou.com
See my reply to phhowe17

S. Manshanden

Hi Arjun,
I'm trying to block spam, but content filtering doesn't seem to work on url links unfortunally.

S.Manshanden

Hi,

I'd suggest submitting these messages to Symantec for review and possible filter creation (procedure: http://service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2005012415180263) or if you're on version 9, enabling the Probe Participation feature to automatically provide Symantec analysts with localised spam attacks.

Best regards,
Amanda

i want to block spam

[URL="http://www.freshcrop.com"]Data Recovery[/URL] !!!   [URL="http://www.freshcrop.com"]Image Recovery[/URL]  !!!  [URL="http://www.freshcrop.com"]Photo Recovery[/URL]

SBG does not support checking of HTML tag content using content filters.  Use your edge web security to block access (e.g. proxy server setttings, firewall IP rules, or a local DNS change.

Add the sending IP to your local bad sender/IP list in SBG.  I notice that www.freshcrop.com's IP 174.143.202.244, is already listed in SBG reputation database.  E-mail should already being blocked if you have Symantec Global Bad Senders  policy enabled and rejecting connections..