Email Appliance - Blocking Top Level Domains

Hi Caninus,

I'm afraid you can't block a top level domain at the moment.  You can only block individual domains.

What you could do is use a regular expression to evaluate the 'From' header.  This is done in 'Configuration > Policy > Additional Policy' using a 'Message attributes' rule type.

But obviously bear in mind that the 'From' header can be spoofed and isn't necessarily the same as the envelope sender.

If you're having problems with Spam I'd suggest the first step is to submit samples and call our support guys:

http://www.sophos.com/en-us/support/knowledgebase/23113.aspx

Hope this helps,
Tom.

The policy rule approach does not seem to work but that could be because I am not writing the regular expression correctly.

Blocking connections or redirecting messages from top level domain country codes would be extremely useful in cutting down spam for organizations that do not do business outside of their own country or region. Sophos should look into adding this feature.

It looks like rules like Header matches regular expression: 'From: \.in\b' do work for blocking ccTLDs.