I would like to create email rul on all incoming mail that if the from address contains .pw or .us that the message be sent to a quarantine mailbox for moderation.
This is because I am getting a lot of SPAM email coming from XX@xx.pw or yy@YY.us where XX and YY is something.
I have created a rule through the GUI for .pw email address and it does not work. Any reason why this is not working?
Apply rule to messages
from users that are 'Outside the organization
and when the From address contains '.pw'
forward the message to 'xx@domain.com' for moderation