Several months ago we changed our company name and along with this, changed our public domain name. Since then, I've relied upon the end users to notify those who send us emails about the change along with some mass notifications. This has worked to get us mostly switched over at this point, but we still get a few emails addressed to the old domain each day.
Within the next couple of months, I'll be turning off the old domain name completely and need to put a bit more administrative effort into getting the remaining folks who send us emails "fixed".
What I'd like to do is use a regex entry in the expression filter to catch anything addressed to "olddomain.com" and hold it in the quarentine until reviewed. I tried using just "olddomain.com" as a string value, but that had the unintended effect of also catching addresses in the body of emails in long term "reply to" threads that have already changed to "newdomain.com".
Any chance somebody can help me come up with a regex that will only check the To: and CC: lines in the current header for *@olddomain.com.
Thanks.
This thread was automatically locked due to age.