Block Email with Layer7

Dear all,

I’m facing problem with multiple spam mail for example 545353456@qq.com, the number 545353456 is always change but the domain qq.com are remain, so how can i block for that kind of email ? I cant block based on domain name because some of email is a valid email, what i need to block if start with numeric as mentioned, so is it possible to make a rule with Layer7 and how?

Please help. TQ

Do you have the Mail Server inside your network?

This spam is from your account or this is from outside to your account?

Best regards.

gamba47

Two ways.

You can look in your mailserver log if the source IP is the same for each spam address. If that is the case the you can block that IP in the firewall.

If you have valid e-mail addresses on that domain then you can refuse addresses that are not valid.