How to block all IP's from certain countries which use .EU extension?

[toplisek]

How to block all IP's from certain countries which use .EU extension?

I have seen massive spam messages using .EU extension and certain countries (outside EU...).

How to block inside Accounting filtering?
Is this technically possible?

 

[Infopro]

See if this post is helpful:
Re: Spam bypassing account level and user-level filters - cPanel Forums

 

[toplisek]

So, I should put for all discarded messages the following:
Rules: From, Matches regex
\.link(\>)?$
\.us(\>)?$

Is this correct?

 

[jayharland]

Here is what I use to block all foreign or country specific domains.

From --- Matches Regex
.*@.*\.(?!(.*\.)?(com|net|org|int|edu|gov|biz|mil|coop|us))

This will only let through emails coming from .com, .net, .org, etc.

The downside is that the web is changing, there are now .ws and other domains that are legit and not top level country domains. I've had to tweak this filter a lot by combining it with other filters using AND.

 

[toplisek]

I'm new to this.

1. Is there official website and article to use Regex syntax?
2. You use actually ALLOW. How to BLOCK ONLY EU and additionally
3. How to block .EU ONLY from outside Europe? We have seen many SPAM using .EU and outside Europe.


Is this possible?

 

[lorio]

I'm new to this.
3. How to block .EU ONLY from outside Europe? We have seen many SPAM using .EU and outside Europe.
Is this possible?

How do you currently recognize that the SPAM mail with a .EU email adress is from outside of Europe?
How do you define outside of Europe technically?

Via IP-adress from the sending server? From other IP-Adresses inside the mailheader? Or something else?

I would resist implementing such a rule if you offer email services to paying customers.
Emails with .EU TLD outside of Europe is NO reliable indicator for SPAM.

 

[toplisek]

How do you currently recognize that the SPAM mail with a .EU email adress is from outside of Europe?
How do you define outside of Europe technically?

I see Message preferences. It shows me an IP outside EU using .EU extension.

In the start I will block .US domains.

How to change this: From --- Matches Regex into disallow .US?
.*@.*\.(?!(.*\.)?(com|net|org|int|edu|gov|biz|mil|coop|us))

 

[cPanelMichael]

Hello

You could update "eu" with "us" in the thread referenced earlier:

Account Level Filters for .eu

Thank you.