In discussion with the client, it seemed very unlikely that any of the businesses' they would be working with would be using a .ninja domain name. For this reason, we decided the most effective solution would be to look into completely blocking the server from receiving from this domain name. To do this, we performed the following steps on their Exchange server.
- Open EMC (Exchange management Console)
- Go to Organization Configuration and select Hub Transport
- Select the Transport Rules Tab
- On the right hand side, select New Transport Rule
- In the new rule, give a name and comment. Then click next.
- In the conditions page, select the option When the from address matches text pattern
- In step 2, click on text patterns, highlighted in blue. In here, we will enter the text pattern to filter.
- Enter the text pattern as @*.ninja$ and click Add
- You can edit this pattern to block any domain name, as an example, the pattern follows the code @*.[domaintoblock]$, so to block all .com domains, you would use @*.com$
- Click OK to exit out of the text patterns box.
- Click Next to move on to the actions page where we will set the action to apply to the filtered emails.
- In the action to perform, I have selected to Delete the message without notifying anyone
- In Step 2, you can see the complete steps to the rule.
- When done, select Next and Finish to set the rule.
Congratulations, you should now be blocking the TLD .ninja from sending emails to your Exchange server.