<p>Hello Jerry,</p><p>Transaction filtering supports the "M" command which checks the Mail From field of the header. I use commands like this to filter unwanted "From" domains</p><p>M, "*.magix.net*", BS, "554 Sender MAGIX.NET is sending unsolicited email - connection dropped."</p><p>For instance,</p><p>Hope this helps</p><p>John. </p>

<p><span style="font-size: 10pt;">Hello, </span></p><p>I get a lot of spam from fake TLDs like .info, .biz, .space, .null, .whatever (yes, that one as well). Over the years I've added rules in the transaction filtering file and have had great success this way. Every so often, they change their TLD and I have to add another but no big deal.  I only get a few if I catch it in time when they change the TLD and it might last a few months.</p><p> Recently though, I started receiving emails from for example, asdfasdf.asdfasdf@something.com but from a user named asdfasdf.asdfasdf@something.info.  I can't find a transaction filter that works on these emails as they are on the header of "mail from:".  I've not had a lot of success with global filtering for some reason.  This server supports only a few users and is running on a netbook so it doesn't have much horsepower.  Using the transaction filter along with Barracuda has worked great for year and seems to be pretty lightweight.</p><p> So do I have to use global filtering or can I use transaction filtering in a different way?</p><p> </p><p><span style="font-size: 10pt;">Thanks,  Great product and I really appreciate it.</span></p><p><span style="font-size: 10pt;">Jerry </span></p>