This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Keyword Blocking

Dear Community Members 

 

Could you please advise if Sophos UTM provides the keyword blocking or filtering for emails?

 

Many Thanks

 

Gohar Dar



This thread was automatically locked due to age.
Parents
  • Hi Gohar and welcome to the UTM Community!

    Yes, see the 'Expression Filter' on the 'Antispam' tab.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Hi Gohar and welcome to the UTM Community!

    Yes, see the 'Expression Filter' on the 'Antispam' tab.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • Hi Bob

     

    Thanks a lot for your guidance, could you please help to write down a few examples here? Like to block some uncouth email/s.

     

    Many Thanks

     

    Gohar Dar

  • Hello Gohar,

     

    1. From the help file:

    The expression filter scans messages' content passing through the SMTP proxy for specific expressions. Suspicious emails will be blocked. Expressions can be entered as Perl Compatible Regular Expressions (with max. 128 characters). Simple strings such as "online dating" are interpreted in a case-insensitive manner. Click Apply to save your settings.

    2. For RexEx I mainly use https://regexr.com/ here you can learn, build and test your RexEx expression.

    3. three examples i have:

    ^[13][a-zA-Z1-9]{25,34}
    ^bc1[a-zA-Z1-9]{23,32}
    invest in park gate

     
    SFVH (SFOS 20.0.0 GA-Build222) - Last (re)boot on November 6th  2023
    Asus H410i-plus - Pentium 6605 Gold - 250GB M.2 PCIe NVMe SSD - 8GB - 3 ports
    [If any of my posts are helpful to you please use the 'Verify Answer' link]
  • Hi Peter-Paul

     

    Thanks a lot for your help, this helped me.

     

    I tried to search but i couldn't find the answer if expression filtering is possible to set per SMTP profile?

     

    Many Thanks

     

    Gohar Dar

  • Well, yes and no, Gohar.  You can skip 'Expression blocking' in an Exception and base the Exception on the Recipient Addresses that a Profile handles.  It's all or nothing, you can't skip 'Expression blocking' for one expression and not others.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA