Richard G
Verified User
Lately our customers are getting a lot of spam. Problem is that we can not block it the normal way, as they are coming via Google.
We report every instance, but they keep coming, it looks like this:
To me it seemed the best way to block was to block the sender, firebaseapp.com but that seems not to work for me or I'm doing something wrong.
In the /etc/virtual/blacklist_domains there firebaseapp.com is present.
In the /etc/virtual/blacklist_senders I did it like this (probably wrong) *@*.firebaseapp.com
So I guess I need to change the second one, because an asterisk is only to be used at the beginning/leading. And probably just firebaseapp.com won't work.
But I'm really not good with regular expressions and don't even understand the regex101.com tester how that works.
I could use
Can anybody help me with this or put me in the right direction or maybe a better way to block these spam mails coming via Google without blocking Google?
We report every instance, but they keep coming, it looks like this:
Code:
eceived: from server.mycompany.nl
by server.mycompany.nl with LMTP
id oRgGHvZkt2lEAwsAugeUdg
(envelope-from <[email protected]>)
for <[email protected]>; Mon, 16 Mar 2026 03:03:34 +0100
Received: from mail-oa1-x45.google.com ([2001:4860:4864:20::45])
by server.mycompany.nl with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.1)
(envelope-from <[email protected]>)
id 1w1xIk-00000004JP9-0jUe
for [email protected];
Mon, 16 Mar 2026 03:03:34 +0100
Received: by mail-oa1-x45.google.com with SMTP id 586e51a60fabf-40ee506cf49so36469725fac.2
for <[email protected]>; Sun, 15 Mar 2026 19:03:24 -0700 (PDT)
From: "Infinitizone Support" <[email protected]>
To: <[email protected]>To me it seemed the best way to block was to block the sender, firebaseapp.com but that seems not to work for me or I'm doing something wrong.
In the /etc/virtual/blacklist_domains there firebaseapp.com is present.
In the /etc/virtual/blacklist_senders I did it like this (probably wrong) *@*.firebaseapp.com
So I guess I need to change the second one, because an asterisk is only to be used at the beginning/leading. And probably just firebaseapp.com won't work.
But I'm really not good with regular expressions and don't even understand the regex101.com tester how that works.
I could use
^@*.firebaseapp.com but doubt this is good.Can anybody help me with this or put me in the right direction or maybe a better way to block these spam mails coming via Google without blocking Google?