Jump to content


Photo

Block Sender Using From Name


  • Please log in to reply
2 replies to this topic

#1 Andrew Warren

Andrew Warren
  • Members
  • 1 posts

Posted 25 February 2020 - 08:20 AM

We are receiving a large number of phishing emails where the sender name is changed to match a VIP in the org but the email address is external. Is there a way to block external emails with a specific from name using content policy? We are not concerned with the side effect of blocking legitimate messages from the user's personal email accounts.



#2 Jaybone

Jaybone
  • Members
  • 123 posts

Posted 10 March 2020 - 11:10 AM

Not aware of a way to to this on the Barracuda - we ended up setting up rules on our mail server to handle this scenario.



#3 Michelle Exner

Michelle Exner

    BSF / BESS Moderator

  • Moderators
  • 409 posts

Posted 10 March 2020 - 12:20 PM

Andrew,

you can make a HEADER content filter on the ESG like this

    from: .*andrew warren

That will catch any email that comes in with a from line in the header that has your name

Please note however that if they use encoding in the FROM line to mask the content this will not work but it should catch the normal spoofer.

 


Michelle Exner
Product Lead Support Engineer
Barracuda Email Security
(408) 342-5300