Hi,
I searched but didn't find much. I'm working on a content filter based on the email address not being what is expected and sending it to quarantine.
I did search here but didn't see anything on this. Apologies if this has been answered already.
Here's an example of what I want. Say the person emailing with the legitimate address is bob@bob.com and the person emailing with the illegitimate address is anything else. So if the email says it's this:
From: "Bob Parkins"<bob@bob.com>
Then it should not be quarantined. But if it is this:
From: "Bob Parkins"<bobparkins@gmailoryahoooraol.com>
Then it should be quarantined. Bonus points for if I can use a dictionary. I have tried a number of filter combinations for this, but so far I've not had a rule which works. Any ideas on what to try would be great. Thanks for reading.