policy creation with only allow list

[Sona T]

Hello ,

Please let me know can we create a policy only with allow list where the rest of the domains should be blocked by default ,only the domains in the allow list should bypass,please note that i don't want to create a deny list,please let me know if it is possible ,can we add a wildcard to deny list?

Kindly help me with a resolution

[alexander-smg]

Give an example of what u want pls.

[Sona T]

Hello Alexander,

For example, [e-mail] ,xyz@​allowed.com are allowed in the allow list , i want my sender group only to be allowed to sent mails to these two and automatically block when the sender group is trying to send mails other than this allowed list,kindly help me know to implement that can we create a deny list with a wildcard excepting these two domains so that all the domain will be automatically blocked

[alexander-smg]

So you only want emails to be accepted from the internet for ONLY: [e-mail] ,[e-mail] ???? Are you sure.

[Sona T]

yes ,this is just an example , similarly i just have a set of domains in the allow list , i just want my users to sent mails to only that domains , if they are trying to sent to a different domain other than in the allowed list smg should block it or bounce that email,is it possible?

[alexander-smg]

So this is mostly for outbound to internet email?

[Sona T]

yes

[Thomas Anderson]

The logic is kind of convoluted, but I think the following will do the trick (or at least get you started, you probably have to tune it up a bit).
Create a policy group that contains the "approved" recipients e.g. policy group with members joe@domain1, fred@domain2, etc)
Create a dictionary of your restricted senders.  E.g. dictionary name "floor-traders" that contains [e-mail], [e-mail], etc.

Create an outbound policy for the default group that says "if sender is in floor-traders dictionary then delete message"

If the recipient is in the approved group, then it is NOT in the default group, so the default group outbound policy will not be executed for that recipient.

[alexander-smg]

That is dicey at best