How to block email from outlook.com servers?

[Jojo Tank]

I have exhausted my efforts to try & block spam and I simply cannot keep up anymore. Our mailbox is inundated with spam sent from outlook.com servers, but the sender's address is assumingly always randomized. I have reached the limit of available addresses to block on the blacklist which is capped at 500 entries. (hostH/hetzner/eggs-kneelo)

The sending server is always some form of _______.outbound.protection.outlook.com
(senders addresses randomized like [email protected] etc)

Of course I tried blocking outlook.com but there is no joy, the spam still flows through.

Should I transfer my domain to a host that uses Linux DirectAdmin instead? I think they don't have a limit on their blacklist filter.

I should also mention that I reported to [email protected], no response there.

Thanks

 

[Rackzar]

How many domains/mailboxes are affected?

If you want to retain your existing hosting try a 3rd Party inbound spam filtering service eg: SpamExperts etc. (Most offer a free trial) or consider an email-only service, Gsuite, Office365, Zoho, SYNAQ (SA Company)

 

[Sinbad]

How many domains/mailboxes are affected?

If you want to retain your existing hosting try a 3rd Party inbound spam filtering service eg: SpamExperts etc. (Most offer a free trial) or consider an email-only service, Gsuite, Office365, Zoho, SYNAQ (SA Company)

This. Sign up for some kind of service like mimecast.

There are many, many legitimate people using Microsoft email - just blacklisting them will cause major issues.

 

[neoprema]

I think what you need is better Spam detection and management. Who is your email provider?

Blocking a domain should be a last resort and Outlook.com is pretty "generic" almost like blocking Gmail.com.

.outbound.protection.outlook.com is Microsoft's primary SMTP for all their customers - Outlook.com, Office365 etc. I would not block that entire domain...

if you are running your own SMTP server is Greylisting turned on? Also force SPF, DMARC etc checks because the domains they're sending from should still have those records if they're legit. Less so if they're not...

Mimecast is good if you have insane amounts of money lying around you don't know what to do with. Otherwise much better is Microsoft's E1/E2 mail protection options and Gmail's suites..

 

[SauRoNZA]

if you are running your own SMTP server is Greylisting turned on? Also force SPF, DMARC etc checks because the domains they're sending from should still have those records if they're legit. Less so if they're not...

.

This! Will cut out most of the crap.

 

[Brian_G]

Maybe also look into https://www.spamcop.net for the deeper approach.

But it's a lot to learn. They have a forum to help.