efa-project.org

Our Payroll system is a thirdparty and statrted using sendgrid.net to send out related email. I had to whote list @sendgrid.net to allow the emails in. With doing that now I am getting a ton of spam and fishing attempts from people relaying through sendgrid.net Sendgrid does not seem to use RFC standard email addresses so I am not sure how to handle this.

This is the format of the email address as shown in the raw postfix logs and in the MailScanner web gui,

ounces+3270116-1ce9-username=ourdomain.com@sendgrid.net
Username is the username of our user and the ourdomain is our FQDN.

How would I go about whitelist just what I need from our payroll system and let the rest of that crap get marked as spam?

Corey

Try whitelisting like this

(user portion, just your domain)
example.com

(domain)
sendgrid.net

iirc, it should do a partial match. Worth a shot, anyway. If this doesn't work, let me know and we can try something different.