Have you tried an Email Address filter?

You can specify a whole domain.

Connect it to the Block service.

That is exactly how I started.

After I saw e-mails no being blocked I removed the asterisk. Still no block.

I now have the at-sign instead of the asterisk and have to wait, if this does work.

The documentation does leave a lot of questions.

Regards

Karl

Karl67 said:

The documentation does leave a lot of questions.

Very true. The documentation leaves much to be desired.

The filters do accept wildcards, including the "*" but you need to understand how they work.

email@domain.tld

This will be triggered only for that exact email address.

*domain.tld

This will be triggered for any email address ending with domain.tld.

@domain.tld

This won't be triggered because no valid email addresses consist only of a domain.

*@domain.tld

This will be triggered for me@domain.tld and you@domain.tld but not for me@us.domain.tld.

 Karl67 There are some issues with your filter configurations.

You are (Admin) quarantining a virus. I understand why you might want to do this but it is dangerous because it could be accidently released.

You are blocking the virus. This is the correct action.

If the message triggers any of your other filters, it will be quarantined even if it contains a virus!

Kevin Boyle said:

*domain.tld

This is how I started when I pulled it from the old GWAVA.

I backrevved to this variant, will see the results and report here.

Regards

Karl

Kevin Boyle said:

If the message triggers any of your other filters, it will be quarantined even if it contains a virus!

As long as it stays in the admin-quarantine, I can take the risk. Or is the message stored somewhere else with user-access by my configuration?

Is there the possibility to adjust the order of the rules being processed?

Regards

Karl

Karl67 said:

Or is the message stored somewhere else with user-access by my configuration?

Yes, the quarantine.

Karl67 said:

Is there the possibility to adjust the order of the rules being processed?

No!

It's easy to configure filters; it's not so easy to get them right!

Here is something you can do to prevent a message from being quarantined.:

There are so many things that the documentation doesn't explain:

• Read through SMG Tips & Information.
• Read through all the posts in this forum because many good tips were posted here instead.
• Check out the excellent Secure Messaging Gateway videos on YouTube. 
• Search the Knowledge Base for SMG documents.

Kevin Boyle said:

*domain.tld

This will be triggered for any email address ending with domain.tld.

After redoing the list to this initial variant yesterday I see the filtering now working as intended.

Thanks

Karl