Several users wanted to block the top-level EU domain.
95% of my spam is coming from the EU TLD, but I can't find any way to block this stuff in Outlook's 'Junk E-mail Options'. For some reason "EU" isn't among the TLD's listed in International - Blocked Top-Level Domain List. I haven't found any way to add at TLD to the list.I've also experimented with trying to catch these EU emails with a filter, but with no success. Is there any documentation about the use of wildcards ('*') in the search words of Rules (e.g. in Sender Address)
Correct, EU isn’t on the Blocked Top-Level Domain List; .EU was launched in 2005, the International filter was added to Outlook 2003 in SP1, circa 2004. (UK is not on the list either, only GB.)
EU was added to the Blocked Top-Level Domain List in Outlook 2016.
Search doesn’t support wildcards, so while you could look for .EU using a rule that looks for words in the header, there is a risk that it will trap legitimate email that just happens to have .EU in the header. You can also filter for sender domain, see Create rules that apply to an entire domain for the instructions. (EU is not used in many words so the damage such a rule may do shouldn’t be too great for most people.)
Filter EU using the International blocked list
Note: this adds EU to the Junk mail filtering capability, it does not add EU to the list of domains in the Blocked Top-Level Domain List. Only Microsoft can add EU to the dialog.
The International TLD’s you select in the Junk Email filter are stored in the registry under the profile key and you can add EU to the filter's blocked list by editing the registry. (The value name is not added to the registry until you block at least one International TLD.)
If you’re using Outlook 2013, the profile is stored at HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\<profile name>\. The International blocked domains list is stored in a separate key for each email account in the profile. Search for 001f0424, you’ll find this value name under a different key for each email account that blocking at least one TLD.
Outlook 2010 users will find their profile at HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\<profile name>\. As with Outlook 2013, the International blocked domains list is stored in a separate key for each email account in the profile and it's easier to find it by searching for 001f0424.
Outlook 2010, 2007, and 2003 profiles are stored at HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\<profile name>\. The International domains list is stored in the 0a0d020000000000c000000000000046 key, under value 001f0424.
This is a binary value and while it is editable, it’s not as simple as just typing in EU in the edit dialog. The easiest way to edit it is to add a TLD to the list that you don’t want blocked (such as ES) then select the individual letters to change them. Remove the letter by backspacing over it then type in E or U. For example: if you replace ES, select the S and type U. If you need to replace both letters, replace one letter at a time, you cannot select both letters in a TLD and type "EU".
If you want to block all domains, or you just want to be geeky, you can type the binary values in on the left. Click after a 00 and type 45 00 55 00 3B 00.
If you later edit the list using the Junk Email Option's Blocked Top-Level Domain List dialog, EU will be removed and you’ll need to re-edit the registry.
Add EU to the International Blocked TLD List Tutorial
If you want to block all UK messages (which I don’t recommend), you’ll need to add UK to the list as the GB selection does not block UK. (I also tested this with the INFO TLD and it didn’t work, you'll need to use a rule to block domains.)
Remember, if you have more than one account in Outlook 2010 or 2013, you’ll need to edit the registry key for each account, as each account has it's own junk mail options (and blocked/safe lists). The value won't be created for an account if you don't enable international filtering for that account.
More Information
How to check Junk Email settings for each account in Outlook 2010 and up: If you are using separate data files, select a message and look at the Junk, Junk Email Options, International tab. If you are delivering to one pst, open a message from each non-default account and choose Junk, Junk Email Options. Repeat for each account. The title bar on the dialog will show the name of the account whose junk settings you are looking at. For more information and screen shots, see Using Outlook's Junk Mail filter.
- Automatically Cleanup Outlook's Deleted Item and Junk Email Folders
- Blocking Mail From New Top-Level Domains
- Bulk Add Addresses to Safe and Blocked Senders Lists
- Don't Get Caught In a Phishing Hack
- Empty Multiple Deleted Items Folders using a Macro
- How to Block Foreign Spam
- Icon is not correct on the Junk Mail Folder
- Junk Email Filtering isn't Working in Outlook
- Junk Mail Filtering in Outlook
- Office 365 Fraud Detection Checks
- Outlook's "Not Junk" option isn't available
- Samsung smartphones move email to the Junk folder
- Sending Autoreplies to Spammers
- Should You Respond to Junk Mail?
- Understanding the Safe and Blocked Senders lists
- Using Outlook's Junk Filter with Multiple Accounts
- Using Outlook's Junk Mail filter
- What Moved a Message to the Junk E-mail Folder?
"You can use a rule that looks for words in the header, where the word is .in.net". This worked perfectly, thanks! I chose to automatically move to the junk folder any emails with ".in.net" in the sender's address. Go to (in Outlook 2007, anyway):
Tools
Rules & Alerts
New Rule
Move messages with specific words in the subject to a folder
click Next
click box "with specific words in recipient's address"
(unclick "with specific words in the subject")
click on link in dialog box "specific words" and type in .in.net in next dialog box
click on link in dialog box "specified" and select junk folder
click Finish
Good luck!
I have used your method to add .eu to my blocked domains list and it works well.
Suddenly over the last few days I have been inundated with emails from .in.net addresses, such as "healthcoverageupdate@neomde.in.net" and "michaelpwards@azon.in.net" and "craigcappetta@medore.in.net"
Is there a way to add .in.net to my blocked domains list? I don't want to block everything that ends in .net.
Thanks.
No, not using this method. You can use a rule that looks for words in the header, where the word is .in.net
Thanks! Especially for your prompt reply. I'll try this.
I have tried to block .us for years. I have tried everything to do it *.us @*.us @**+.us but nothing seems to work I have checked the .us box on rhe BLOCKED TOP_LEVEL DOMAIN list but nothing seems to work. Can you make another video for blocking .us domains please?
I could, but if us is on the top level list, selecting it should work. It might be better to use a rule to block the messages - can you post the internet header from a message and I'll take a look at it. (The header may also hold clues as to why blocking it isn't working for you.)
Diane,
Here's a snapshot of my accts..
I had .eu and .us also places as "Rules". They didn't work but I'm wondering if that could have anything to do with it. Unlikely since the US check in the TLD works fine.
Most of the EU spam comes in overnight. I'll see how it works then. I haven't figured out how you did that "mail test message".
R.
I have a pop account that lets me send mail with any From address as long as the domain is valid and i log into the smtp server when I send, so I changed the from address to use an EU TLD. Is the address you used here one that is set up in Outlook? I can send it as test message.
Junk filters kick in before rules, so the rule shouldn't affect it.
Ah, the Outlook Profile *0046. I see. That's where I've got the 001f0424 already set. It's identical to what you have int the Reg text file.
Here's a link to a snapshot.
It *should* work (and does here) - what type of email account?
BTW, I saw that comment about Outlook 2007...
I don't know if you intend that * as a wildcard or what but I don't find anything searching my Registry for *0046 nor any key in the MS Outlook section with 0046.
I'm using 2007 but I definitely have the 001f0424 key. It has been modified. It now reads in the key's letter display E.T.;.E.U.;.U.S.;... When I open Outlook though the TLD list only shows ET & US checked. Now that, I understand is normal, but it should work right?
Correct, the Blocked list in the junk mail options WILL NOT list the EU domain you added to the registry. The 0046 key is under your profile in the registry - the one with lots of 0's and ends in 0046.
Try this - download this text file: EU REG - if your profile is called Outlook, remove .txt from the filename and double click to run the reg and add it to your profile. If you profile name is different change it in the file before changing the extension. See if it works. If so, then you know the problem was with the edit.
Assuming you wanted those 3 TLD lines blocked, the string is below - edit the reg file and replace the line with this
"001f0424"=hex:45,00,54,00,3b,00,45,00,55,00,3b,00,55,00,53,00,3b,00,00,00
I followed the instructions and I've made the changes to key 001f0424. It has yet to properly block the eu domain. I'm using Outlook 2007. I searched in regedit for other instances of the key but there's only that one. I do have four accounts but not a single one seems to be filtering the euro spam.
What do you think?
It appears to me, this is Case Sensitive. As Caps and small gives you different number. i added both, keeping my hands crossed.
Couldn't find "001f0424" until I selected Inbox went to the Junk E-mail options for International blocked Top-Level Domain and cleared them all. Then, after setting the domains under individual email addresses, "001f0424" showed up in my profiles and I was able to use your wonderful information. Thanks, Thanks, Thanks.