Configuring message origin filtering in Symantec Protection Engine
This topic explains the options that are configured using the Core server with user interface mode. to work with the Core server only mode.
If your client uses the ICAP protocol or the Native protocol, you can configure Symantec Protection Engine to block mail messages from a specific domain or email address. The domain name search string that you enter is matched against the addresses in the From header of the email message. If the search string matches an address, the message is rejected.
The following table contains examples of the ways that you can define the email addresses and domains that you want to block:
Blocks mail from a single email address.
You can use the wildcard characters $ and * in the user portion of the name. The $ wildcard character matches a single character. The * wildcard character matches zero or more characters.
You cannot use both wildcard characters in the same entry. For example, *email@example.com is not supported.
You cannot use wildcard characters in subdomain or domain addresses. The subdomain and domain must match exactly.
Blocks all mail from a specific domain and subdomain address. For example, mail from firstname.lastname@example.org is allowed.
You must precede the address with an @ symbol to ensure that only mail from that specific address is blocked.
The use of wildcard characters in subdomain or domain addresses is not supported.
Blocks all mail from an entire domain, including any subdomains. For example, mail from example.symantecdomain.com or internet.symantecdomain.com would be blocked.
You must precede the domain address with a period to ensure that any subdomains are blocked.
You cannot use wildcard characters in subdomain or domain addresses.
From version 7.0, Native protocol has been deprecated. Symantec recommends the use of either ICAP or RPC protocol.
To configure message origin filtering in Symantec Protection Engine
In the console on the primary navigation bar, click Policies.
In the sidebar under Views, click Filtering.
In the content area on the Mail tab, under Blocked Senders, check Use the following domains.
In the blacklist text box, do any of the following tasks:
Add a domain address or email address to the list.
Type a domain address or email address. Type one per line. You can enter up to 5000 addresses. Search strings are not case-sensitive.
Remove a domain address or email address from the list.
Highlight the address that you want to remove, and press Delete.
On the toolbar, select one of the following options:
Saves your changes.
Use this option to continue making changes in the console until you are ready to apply them.
Applies your changes.
Your changes are not implemented until you apply them.