Forefront Server Security TechCenter > Forefront Server Security Forums > Antigen > Antigen 9 - Blocking All emails from Russia
Ask a questionAsk a question
 

AnswerAntigen 9 - Blocking All emails from Russia

  • Wednesday, October 07, 2009 9:32 AMBarb Playfoot Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Is it possible to block all emails from a specific country, if so can anyone tell me how to block all emails from .ru in Antigen9 rinning on Exchange 2003.

Answers

  • Wednesday, October 07, 2009 1:42 PMAndy S. Day Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi Barb,

    You have a few different options here. You can indeed block a sender's domain, if you wish, using sender-domains filtering. To block any mail coming from a sender address ending in .ru your filter would need to be *.ru for example. I would use this option with caution, however, in case your business does need to receive some mail from such a domain.

    You could also use Subject Line Filtering or Keyword Filtering to filter out specific ("Russian") characters / character strings. I believe that Russian uses Cyrillic character sets, so you would also be blocking other mail that contains those characters. Several eastern European countries use Cyrillic character sets as well. This method therefore isn't a great option, unless you know the exact characters/words that you need to block.

    If you are willing to look outside Antigen, you can also block entire character sets through Outlook (see International - Blocked Encodings List).
    I'm not 100% sure, but I think you can also use Group Policy Templates to implement this (per Outlook version), so that you don't have to configure each individual's PC.
    Kind Regards, Andy Day | CSS Security, Sr. Support Engineer (Antigen/Forefront Server Security)

All Replies

  • Wednesday, October 07, 2009 1:42 PMAndy S. Day Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi Barb,

    You have a few different options here. You can indeed block a sender's domain, if you wish, using sender-domains filtering. To block any mail coming from a sender address ending in .ru your filter would need to be *.ru for example. I would use this option with caution, however, in case your business does need to receive some mail from such a domain.

    You could also use Subject Line Filtering or Keyword Filtering to filter out specific ("Russian") characters / character strings. I believe that Russian uses Cyrillic character sets, so you would also be blocking other mail that contains those characters. Several eastern European countries use Cyrillic character sets as well. This method therefore isn't a great option, unless you know the exact characters/words that you need to block.

    If you are willing to look outside Antigen, you can also block entire character sets through Outlook (see International - Blocked Encodings List).
    I'm not 100% sure, but I think you can also use Group Policy Templates to implement this (per Outlook version), so that you don't have to configure each individual's PC.
    Kind Regards, Andy Day | CSS Security, Sr. Support Engineer (Antigen/Forefront Server Security)