Hack The Sec-Leading Resource Of Linux Tutorial: TLDs

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="font-family: inherit; font-size: x-large;"><b><u>Block Email from certain TLDs (Top Level Domains) in ISPConfig</u></b></span><span style="font-family: "times" , "times new roman" , serif; font-size: large;">Spam is an annoyance and there's a multitude of ways to counteract it. However spammers also get smarter and try to bypass filters and stuff. In addition, ICANN has lately approved a great mean gTLDs (generic Top Level Domains), like .biz, .info etc. Some of those gTLDs are, in my opinion, exclusive used by spammers. Lately, I have gotten a lot of spam from the .xyz gTLD. So the question was, how to block email coming from such domains using that gTLD.</span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">ISPConfig offers some global filters and they can be used to block all such emails and I'll show you how to do that.</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIJWQ3LnvWCsgMo0Zo7-ukbmX3P0GQXSRL4rxc8EBm4iLa8DMEA9cYYVEKMr9KNBjXykaGjWMQFHNNjC5LNHPvn0084fkzE15mB0rQO2_H98gbgNoRO7L2rCllZoelB1JNOiFN6fz5_oeG/s1600/how_to_block_emails_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIJWQ3LnvWCsgMo0Zo7-ukbmX3P0GQXSRL4rxc8EBm4iLa8DMEA9cYYVEKMr9KNBjXykaGjWMQFHNNjC5LNHPvn0084fkzE15mB0rQO2_H98gbgNoRO7L2rCllZoelB1JNOiFN6fz5_oeG/s1600/how_to_block_emails_www.hackthesec.co.in.jpg" /></a></div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;"><br /></span>
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><u><b>Log into ISPConfig as Administrator</b></u></span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">The first thing you have to do is to login into ISPConfig with an admin account. The reason for this is that the global filters are being modified.</span><br />
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u>Go to the Global Content Filters</u></b></span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">Once you've logged in as administrator, go click on the Email tab in the top navigation menu and then from the left-hand menu select the Content Filter entry in the Global Filters section.</span><br />
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u>Add new Content Filter</u></b></span><br />
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u></u></b></span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">Once the Postfix Header and Body Checks page is loaded, click on the button to Add new Content Filter</span><br />
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u>Fill in the Filter form and submit</u></b></span><br />
<div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">Now the Mail Content Filter form has been opened and you can set various things there.</span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">1. You need to select the server.</span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">2. Make sure to set Filter to Header Filter.</span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">3. The Pattern: The Regexp. Pattern. This form field is actually used to check if the header contents of an email that contains the unwanted TLD. For the TLD .xyz you'll have to enter the following pattern:</span></div>
</div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 18.5667px; margin-bottom: 10px; overflow: auto; padding: 9.5px; white-space: pre-wrap; word-break: break-all; word-wrap: break-word;">/<.+?@.+?\.xyz>/</pre>
</div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">Let's split this up a bit. The forward slashes "/" are the limiters for the pattern. The "<" and ">" are literal strings. Email addresses are always enclosed in those brackets in the mail header. After the opening "<" the pattern looks for any number of characters, followed again by an "@". After the "@" it looks again for any number of characters until the literal string of ".xyz". The "." in that literal string is escaped, since a "." in regular expressions has a special meaning. By escaping it, we tell the parser, that it's a literal character and not the special regexp one. Finally, it looks for the closing bracket after the TLD. For those proficient with globs, one could say that this pattern is like "<*@*.xyz>"</span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif; font-size: large;"><br /></span></div>
<div>
<span style="font-size: large;"></span><br />
<div>
<span style="font-size: large;"><span style="font-family: "times" , "times new roman" , serif;">The Data field can be left empty. However it will be logged into the mail log and also it can tell other mailservers why their email is being rejected. For this, it's a good thing to give it a meaningful entry, e.g. "No mail from .xyz gTLD allowed". By providing meaningful text it will make your life easier to figure out which filter rule is responsible for blocking an email. If someone complains about email not receiving, check the mail log and you'll see the reason (=Data field) for it.</span></span></div>
<span style="font-size: large;">
<div>
<span style="font-family: "times" , "times new roman" , serif;"><br /></span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif;">4. you can set which Action to take if the pattern matches. The recommendations here are either Reject or Discard. Reject means, the mail won't be accepted by the mail server and the sending mail server will be informed about it with the Data form field given as reason as well. If you chose to use Discard, then the mail server will just delete the email.</span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif;"><br /></span></div>
<div>
<span style="font-family: "times" , "times new roman" , serif;">5. Of course, Activate check box also needs to be checked. Otherwise this filter pattern isn't being processedand also press the Save button.</span></div>
</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPN-pMoVsFqRDFlFBDy1wR_oZwSQYjNsEm84iUudctpAJ1cRec5ydriWYQaUaViRB1-M3rdQsy0QNelpGKr31pSiUDXFkQlBfd-LmB7RKQlUnWsdhtdWkxAJ-goVnN8wpi0yckqxmfoEwP/s1600/spam_block_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPN-pMoVsFqRDFlFBDy1wR_oZwSQYjNsEm84iUudctpAJ1cRec5ydriWYQaUaViRB1-M3rdQsy0QNelpGKr31pSiUDXFkQlBfd-LmB7RKQlUnWsdhtdWkxAJ-goVnN8wpi0yckqxmfoEwP/s1600/spam_block_www.hackthesec.co.in.png" /></a></div>
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u><br /></u></b></span>
<span style="color: #0b5394; font-family: "georgia" , "times new roman" , serif; font-size: large;"><b><u>Repeat this for other TLDs</u></b></span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;">Repeat the above steps for other TLDs you want to have blocked. Since you already have one entry, you can just easily copy the Regexp. Pattern and adjust the according tld text string there.</span><br />
<span style="font-family: "times" , "times new roman" , serif; font-size: large;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span><br />
<br /></div>