How to block spam coming from range of IP addresses

How to block spam coming from range of IP addresses

Spammer can send you spam starting from a certain IP address and send bulk of spam and move on to the next IP within the same range to send you another set of spam.

Policy filter is the most effective way to block these kind of spam.

1. Login to ES as admin
2. Click on Policy and Compliance --> Filters-- Add New Filter
3. Set the policy Filter to Select: Message Headers , Matching: Contains, Search Value: 208.75.123. ( add first 3 octate of the IP range in question)
4. Action: "Store in Junk Box"
5. Give a name to the Filter and save this filter

Once this filter is saved, any email that arrives from source IP 208.75.123.X will get junked as per the policy filter.

Note: To get the spammers range of IP addresses, check few spam example emails and see if the source IP shows within the same range of IP.