SPAM from .ICU and .XYZ

[cabacognan]

We receive a high quantity of spam from these domains .ICU,.XYZ.  We use postfix to filter the mail and send to our exchange server.  It would be nice if I could use a wild-card @*.icu to block but this does not seem to work, the nearest is maybe @company.icu but this is useless as so many domains being used.  They are also not being flagged as SPAM.

tambac@monkeysunday.icu
shout@beginsense.icu
riel@factorbelief.icu
shout@decayadd.icu
endorse@likelyscream.icu

[fabian]

flagging as spam can be done via rspamd. It is not done by postfix.

Postfix (I don't know if the plugin has an UI for that), can do that via a sender map.

[cabacognan]

The rspamd is enable, but I see no where on any of the Tabs where I can block a list of senders.  The only place I can see is in the Services: Postfix: Senders, where you can add a list of senders to Reject.  However, wildcards do not seem to work at this level i.e. @*.icu. -> REJECT

[cabacognan]

Hi, I was hoping I could get some further help on this.

[mimugmail]

I think you can edit the config files of rspamd by hand to include this stuff.
Currently lack of time to add this to the UI.

Perhaps admin UI also allows blacklisting via file input (if file permissions are correct)