How to block all IP's from certain countries which use .EU extension?

toplisek

Well-Known Member
Jan 7, 2010
262
20
68
How to block all IP's from certain countries which use .EU extension?

I have seen massive spam messages using .EU extension and certain countries (outside EU...).

How to block inside Accounting filtering?
Is this technically possible?
 

toplisek

Well-Known Member
Jan 7, 2010
262
20
68
So, I should put for all discarded messages the following:
Rules: From, Matches regex
\.link(\>)?$
\.us(\>)?$

Is this correct?
 

jayharland

Active Member
Apr 18, 2014
30
1
8
cPanel Access Level
Website Owner
Here is what I use to block all foreign or country specific domains.

From --- Matches Regex
.*@.*\.(?!(.*\.)?(com|net|org|int|edu|gov|biz|mil|coop|us))

This will only let through emails coming from .com, .net, .org, etc.

The downside is that the web is changing, there are now .ws and other domains that are legit and not top level country domains. I've had to tweak this filter a lot by combining it with other filters using AND.
 

toplisek

Well-Known Member
Jan 7, 2010
262
20
68
I'm new to this.

1. Is there official website and article to use Regex syntax?
2. You use actually ALLOW. How to BLOCK ONLY EU and additionally
3. How to block .EU ONLY from outside Europe? We have seen many SPAM using .EU and outside Europe.


Is this possible?
 

lorio

Well-Known Member
Feb 25, 2004
314
22
168
cPanel Access Level
Root Administrator
I'm new to this.
3. How to block .EU ONLY from outside Europe? We have seen many SPAM using .EU and outside Europe.
Is this possible?
How do you currently recognize that the SPAM mail with a .EU email adress is from outside of Europe?
How do you define outside of Europe technically?

Via IP-adress from the sending server? From other IP-Adresses inside the mailheader? Or something else?

I would resist implementing such a rule if you offer email services to paying customers.
Emails with .EU TLD outside of Europe is NO reliable indicator for SPAM.
 

toplisek

Well-Known Member
Jan 7, 2010
262
20
68
How do you currently recognize that the SPAM mail with a .EU email adress is from outside of Europe?
How do you define outside of Europe technically?
I see Message preferences. It shows me an IP outside EU using .EU extension.

In the start I will block .US domains.

How to change this: From --- Matches Regex into disallow .US?
.*@.*\.(?!(.*\.)?(com|net|org|int|edu|gov|biz|mil|coop|us))
 
Last edited: