Recently one of our clients had been receiving a lot of spam from .ninja domains into their server. We were tasked with trying to find the most effective solution.
In discussion with the client, it seemed very unlikely that any of the businesses' they would be working with would be using a .ninja domain name. For this reason, we decided the most effective solution would be to look into completely blocking the server from receiving from this domain name. To do this, we performed the following steps on their Exchange server.
In discussion with the client, it seemed very unlikely that any of the businesses' they would be working with would be using a .ninja domain name. For this reason, we decided the most effective solution would be to look into completely blocking the server from receiving from this domain name. To do this, we performed the following steps on their Exchange server.
The Fix
- Open EMC (Exchange management Console)
- Go to Organization Configuration and select Hub Transport
- Select the Transport Rules Tab
- On the right hand side, select New Transport Rule
- In the new rule, give a name and comment. Then click next.
- In the conditions page, select the option When the from address matches text pattern
- In step 2, click on text patterns, highlighted in blue. In here, we will enter the text pattern to filter.
- Enter the text pattern as @*.ninja$ and click Add
- You can edit this pattern to block any domain name, as an example, the pattern follows the code @*.[domaintoblock]$, so to block all .com domains, you would use @*.com$
- Click OK to exit out of the text patterns box.
- Click Next to move on to the actions page where we will set the action to apply to the filtered emails.
- In the action to perform, I have selected to Delete the message without notifying anyone
- In Step 2, you can see the complete steps to the rule.
- When done, select Next and Finish to set the rule.
Congratulations, you should now be blocking the TLD .ninja from sending emails to your Exchange server.
Did this guide help you out, or do you have any other tips or bits of advice to give? If so, leave a comment, we'd love to hear your feedback.