There is no built in rule for this, rules that you could look into more are under Configuration | Policy | Additional policy | New rule, you could then look at customising these rules:
1) Keyword rule
2) Use only message attributes
3) Bulk rule
You can then set these rules to Quarantine.
Likewise if messages are coming from a specific domain you can add it to your blacklist.
If you think this is spam that is getting through please submit samples to our labs for analysis: www.sophos.com/.../23113.aspx
There is no built in rule for this, rules that you could look into more are under Configuration | Policy | Additional policy | New rule, you could then look at customising these rules:
1) Keyword rule
2) Use only message attributes
3) Bulk rule
You can then set these rules to Quarantine.
Likewise if messages are coming from a specific domain you can add it to your blacklist.
If you think this is spam that is getting through please submit samples to our labs for analysis: www.sophos.com/.../23113.aspx