Nearby Domain Rule
This Rule compares domains in the email header to your configured domains. It will trigger when domains in the header are very similar to (but not identical to) your configured domains. For example, a spam email delivered to clouduss.com may contain headers from clouduus.com.
You can use this Rule to catch spam emailed that are designed to appear on casual inspection as if they originate from your domain.
To set up this Rule:
- Visit your USS Dashboard and click Products ⟶ E-mail Security ⟶ Message Rules.
- Click
to create a new Rule. - Give the Rule a sensible name, like "Nearby domains", and click
. - Add a Direction Condition, with the logic set to Matches: Inbound.
- Add a Nearby Domains Condition, with the logic set to Less Than: 3
- Add a Nearby Domains Condition, with the logic set to Greater Than: 0
- Add an Add to Spam Score Action. Set the value to 108. This will digest the message, should other Rules not detect it.
- Do not add a Final Action.
- Make sure that the Active checkbox is enabled.
- Click
. - Drag the new Rule to a sensible place in your Message Rules list. If your Service Provider has configured a set of sensible default Rules, placing this new Rule above the Confirmed Phishing Rule is a good choice.
The completed Rule should look like this:
