Jump to content


Photo

Need to filter email address that changes slightly - regex help needed

regex content filter from address

  • Please log in to reply
1 reply to this topic

#1 Sharon Guillory

Sharon Guillory
  • Members
  • 1 posts

Posted 21 April 2018 - 05:09 PM

We've been plagued with scammers using a form of CEO fraud. They are spoofing our Head of School. Emails are coming from HeadofSchool###@gmail.com where the ### can be any numbers or characters of any length. I can't block this address in the sender filter, so I'm assuming I need to use the content filter and filter on the heading? I cannot seem to figure out exactly what to use in this case. My attempts at creating a regex expression are not working. I've been banging my head on regex for hours. Can someone help me figure this out? I'm using Barracuda Spam & Virus Firewall 300. 

Thanks.



#2 John Scott

John Scott
  • Members
  • 3 posts

Posted 01 May 2018 - 04:49 AM

((\HeadofSchool)+(\w)+(@gmail)+(.co.uk|.net|.local|.ro|.de|.com)(\.|)(\W|))

 

It's "HeadofSchool" + a word + "@gmail" + any of "co.uk", ".net" ".local" ".ro "."de" ".com" 

 

 

I use the following sites to generate REGEX for my feeble mind:

https://regex101.com/- REGEX BUILDER AND TESTER 

https://regexr.com/- REGEX TESTER

https://regex.logxtender.net/%C2%A0 - REGEX BUILDER