How to block Azure Cloud spam?

[puzzel76]

Hello!

Is there any way of blocking mails from azure cloud servers? I’m getting massive spam from those hosts for days now. The only thing they have in common is the azure cloud domain in the host information.

Thank you very much
Mario

[magicspam]

Hello puzzel76

Thank you for your post.

The option to block entire top level domains is at the moment only available
in MagicSpam PRO:

Anti-Spam >> Exemptions >> Sender From Black List

where you can use '*' Wildcard to specify the top level domain you want to block:

e.g.
*@*.tld
*@domain.tld

The 'Sender From Black List' option matches the sender's email address used
during the SMTP transaction. This might be different from what you see in the
'From' field of the message in your inbox.

The MagicSpam logs can help you identify the sender's original email address
(noted in the “MAIL FROM:” header during the SMTP transaction or in MagicSpam
logs search results under the “Sender” field).

Please note that MagicSpam PRO version also has an advanced "Replay" feature
that can help you identifying which policies should be enabled to block
certain uncaught spam in your system. For more information about the "Replay"
feature, please see the following forum post:

viewtopic.php?f=55&t=237202

We hope this information helps.

Please feel free to let us know if you have any further questions.

[puzzel76]

Hello!

No, this information does not help.
As I have stated, the "host" information contains the azure cloud domain. Not the FROM: field.

See the attached image:

Bildschirmfoto 2021-03-22 um 21.30.46.png (92.46 KiB) Viewed 20251 times

Any means of blocking this by chance?

kind regards
Mario

[magicspam]

Hello Mario,

Thank you for the information provided.

At this moment we do not have an option to blacklist a domain based on the
Hostname field.

You may block the sender or domain (return@when.com or *@when.com) as mentioned
above.

Do you have SpamAssassin enabled in your system?

We recommend you to enable SpamAssassin in your system which can help
with filtering messages based on the content. Furthermore, MagicSpam PRO
version has it's own custom SpamAssassin rules, specifically tailored
for our MagicSpam customers.

To enable these custom rules, simply enable "MagicSpam Enhanced
SpamAssassin Rules" in the:

Anti-Spam >> SpamAssassin

tab in MagicSpam admin-interface panel.

Also if you are still having an issue with uncaught spam on your system, could
you please send us your MagicSpam logs for analysis at:

support@magicspam.com

To retrieve MagicSpam logs, you can use the MagicSpam interface and access the
"Logs" tab.

In the log search result output, you have the option to export/save the log
search results to a CSV file. Once you have the CSV file, you can email that as
an attachment to us for examination using your email client.

Please make sure that you remove entries where mua=yes and highlight only HAM
entries that are spam.

Also, can you please send us screenshots of the following two tabs in your
MagicSpam control panel:

Settings / Server Policies
and
Settings / IP Reputation

With the requested information, we will be able to provide better suggestions
for addressing the uncaught spam issue.

Thank you.