cancel
Showing results for 
Search instead for 
Did you mean: 

Filtering E-Mails with double Addresses in the "From" field

Hello! Smiley Wink

Is there a way to use MSME 8.6 to filter emails with more than one address in the "From" field?

Example:
From: <employee@mydomain.com>, Name <chyepez@lanecuadorsa.com>

The first address should imply that the e-mail comes from an employee. The second address is the real sender address of the spammer.

Normal mails always have only one address in the "From" field, so it is a good idea to filter them and intercept dangerous mails.

I think it would work with regex. Can MSME do this?

Many thanks in advance!

3 Replies
Highlighted
McAfee Employee anuraj_s
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Filtering E-Mails with double Addresses in the "From" field

Hi,

As you described generally FROM field contains only one email entry and IF the spammer is adding 2 entries on from field then we can block only using the SPAM module by SPAM submission. Using regex in MSME, we can not block such emails.

 

-Anuraj

Re: Filtering E-Mails with double Addresses in the "From" field

Hi, thanks for your answer.


Do you mean the "Gateway" option in the Policy Manager? There are a lot of rules like "FROM_EMPTY", "FROM_DRUG_USER" etc., but which one is the right one? And with that I can only increase the spam factor, but not blocking a mail, right?

McAfee Employee anuraj_s
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: Filtering E-Mails with double Addresses in the "From" field

Hi,  

 

True, We can not block the email using that option.

 

-Anuraj

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center