
I need to block the sending domains (gmail.com is a domain) of spammers, not the email addresses only.
Amazing that there is no topic for Spam, the most hated aspect of email. Mozilla, wake up!
Anyway, I want to be able to highlight a bunch of spam emails, then block all the domains they are being sent from, first checking to make sure nothing was sent from a legit domain like Gmail or Hotmail. Because the smart spammers acquire domains from which they can generate an untold number of email addresses from and they can just a different one every day so blocking an individual email address from someone like this is useless. They'll never use the same one twice because it's so easy to use another one. They own the domain so they control everything at that domain.
I've never heard of any email program offering this which is perplexing as this is the only logical solution to the vast majority of spam we are plagued with in 2025.
We really need an Add-On for Thunderbird as it appears Thunderbird doesn't seem to care.
All Replies (16)
First, it's not that Thunderbird "doesn't care"; it's that what you want is not an email application, but a spam application. Knowing which domains are good is virtually impossible, since new domains are created hourly. Your best bet will be to work with tools from your email provider and to then possibly consider third-party tools such as Mailwasher. Thunderbird's filter can be powerful when you narrow down some common aspects. Also, Thunderbird's spam filter is useful, but needs routine maintenance of periodically identifying both good and bad messages. Good luck.
David is right. I use tools in webmail to block messages by domain.
In Thunderbird, you could use message filters to filter messages by domain.
> it's that what you want is not an email application, but a spam application.
As spam is a part of email, the worst part, you'd think they would try harder and devise a system that is more effective as I suggested. Blocking by domain is the only way to combat spam effectively. Not perfect but far better than what is currently used which fails miserably with innumerable false positives and negatives.
> Knowing which domains are good is virtually impossible, since new domains are created hourly.
I guess you didn't read what I wrote. With my suggestion the user sees the return email address and highlights those that considered spam as long as it's not from a major provider like Gmail which they rarely are. Highlight spam, block domains of those spammers. That's it. The user chooses not the program. Getting software to discern something is laughable.
> Your best bet will be to work with tools from your email provider and to then possibly consider third-party tools such as Mailwasher. Thunderbird's filter can be powerful when you narrow down some common aspects. Also, Thunderbird's spam filter is useful, but needs routine maintenance of periodically identifying both good and bad messages. Good luck.
Tools don't work. With my way there are no tools to fail. Now of course you can make up rules but this takes forever and nobody that gets lots of spam would bother. it has to be quick and easy. Highlight, block domain. That's it. It's almost as if people are so used to spam they've given up and not stepped back to see a clear solution to the problem.
> I use tools in webmail to block messages by domain.
Webmail? So if you have several email accounts which most people do that use an email program, you have to log into each one to set up a filter rule. Now imagine doing that 1000 times. How great would that be? C'mon, please think.
> In Thunderbird, you could use message filters to filter messages by domain.
True but that is doing something individually with each message. It would take at least 30 seconds a message. Many of us get thousands of emails a month that are spam. Are you really going to spend so much time making up filtering rules to block the domain for each email message? A thinking person would do it right from the top. Highlight message, block domain of sender. That's it. Hey, if I've missed something please let me know. I can't believe Thunderbird hasn't woken up to this yet or someone else hasn't devised an add-on.
I personally use Mailwasher and it does what you speak of. Once I identify a domain or a sender, they are permanently blocked. There are other tools as well. And Mailwasher (and other products I would guess) does this outside of thunderbird. I agree with your statements that there is no quick fix to this.
> I personally use Mailwasher and it does what you speak of. Once I identify a domain or a sender, they are permanently blocked. There are other tools as well. And Mailwasher (and other products I would guess) does this outside of thunderbird. I agree with your statements that there is no quick fix to this.
So how long does it take to block a domain for one spam message? Whenever I've done it I've found it is not a very fast process. I'd say 30 seconds for most people. Now imagine doing that 1000 times a month or more. That's not going to happen, right? Nobody is going to do that. But if we could just highlight the messages all together and click a " Block Sender's Domain" that would be done fast. We could do a whole page at a time easily. Because for some email accounts almost everything receive is spam. For anyone that can write this they could make a lot of money by selling the add-on. I wish I had the skills. It doesn't really sound very difficult.
re : Blocking by domain is the only way to combat spam effectively.
You have be clear about terminology. Only a server can 'block' a sender.
So I have added a few of the worst in the webmail account filter and I never see them.
Thunderbird cannot block anything being received onto a server because Thunderbird is an email client not a server. Thunderbird has no control over what is received onto a server. That means Thunderbird merely downloads what has already been received by the server whether that is good, bad or ugly emails.
Otherwise, you are talking about 'filtering' - not blocking. Filtering by a domain is only useful if the spammer owns the domain and the domain is included in the From email address, but that's not always the case.
There are specific programs that can 'filter' emails such as Mailwasher - mentioned by david - they can also 'filter' a load of emails prior to emails being passed onto Thunderbird. Some people find them very effective.
In Thunderbird you can set up 'Message Filters' which auto filter on incoming mail that arrives in the 'Inbox'. You can set up a filter that searches on 'domain' and set it up to 'mark as Junk' and put into the relevant account Junk/Spam folder. You can also set up Thunderbird to auto empty the Junk/Spam or do it manually OR as many servers auto empty the Spam periodically, you just forget about it. A single filter can have several conditions and you can set it up if ANY of those conditions applies then do the action. You can then add a condition to that filter as required.
re : Many of us get thousands of emails a month that are spam. Are you really going to spend so much time making up filtering rules to block the domain for each email message?
No, as stated above - once filter is created you can easily add additional conditions, but seriously that is still a bit cumbersome .
re: But if we could just highlight the messages all together and click a " Block Sender's Domain" that would be done fast. We could do a whole page at a time easily.
I use that type of method already - it's been in Thunderbird for ages.
- Right click on a batch of Highlighted emails and choose 'Mark' > 'as Junk'
That's why Thunderbird has it's own built in filter using a Bayes algorithm plus training data supplied by your actions. The best way to deal with the majority of junk is to enable and train the built in Junk Control filter to recognise any email in address book is good/whitelist and mark as junk specific emails or blocks of emails so it learns. I've done this and it works very well. After the first couple of weeks, it was doing a grand job. Barely any real junk or spam land in my Inbox making life so much easier. If you have not set up your Junk Controls nor trained them it might explain why you are getting so much rubblish in the Inbox.
I only have a couple of filters that pick up a few specific variants of junk because I also get spammers and scammers falsely setting up the 'from' as if from myself as I have a website. You can see in the headers that it did not originate from my address or server, but the part seen in the From in the Message List says it's me. Now, for obvious reasons, I do not want to label those as spam, so I search on a specific content and just delete - send to TRash rather than 'mark as junk' or put in 'Junk/Spam'.
Bare in mind that there is a huge different between those who are acting fraudulently- aka scammers and those who are just sending unwanted mail aka spammers chucking out a load of constant nuisance mail and genuine people just touting for business but not of interest to yourself.
Remember - some nefarious people abuse other peoples email addresses and send emails pretending to be from a real good sender email. I would ask you to never set those as junk because the real owner could end up being blocked from using their own account - not funny. They tend to get bored after a while if no one responds and then mess about with someone elses email address.
Modified
I wonder if your e-mail service provider has better options, e.g., increase the aggressiveness of their junk filter. In thirty years of using e-mail, I have never had a service provider who let many junk messages through.
I get about one junk message per month now. I do a few things on my own to minimize junk that few people do.
The problem with junk filters is not their ability to filter spam. The problem is they also filter so many legit emails. Their problem is false positives. It's always been that problem. You always have to check your spam folder for legit email so why bother at all? The best solution is to filter nothing because filters are useless except for the most obvious like: Ciallis, Viagra, "Make money", "Fast money" or anything with Trump or Crypto....sure they work and we would obviously use them. But smart spammers don't do stupid things like that. They're clever. They are the problem. The emails that could be legit, until you look deeper. Gaze at your page of emails and read/delete the legit ones. Once that is done highlight all, block sender's domain. That is the solution to the present day spam problem for almost all your spam.
To Todd - you made some good points and I wanted to address each individually. Here we go!
> Otherwise, you are talking about 'filtering' - not blocking. Filtering by a domain is only useful if the spammer owns the domain and the domain is included in the From email address, but that's not always the case.
I'm not sure I see the difference if an email is blocked or filtered. The end result is I don't see it. But yes, terminology is important and I'll make note of that. It should have been 1: Highlight offending messages. 2: Filter sender's domain.
> You can set up a filter that searches on 'domain' and set it up to 'mark as Junk' and put into the relevant account Junk/Spam folder.
Yes but the problem is the time needed to set up that filter for each email. At least 30 seconds I think. If you have thousands?
>> re: But if we could just highlight the messages all together and click a " Block Sender's Domain" that would be done fast. We could do a whole page at a time easily.
> I use that type of method already - it's been in Thunderbird for ages.
I think you mean you are filtering or blocking the individual email addresses. Not effective if the spammer owns the domain and is generating new email addresses all the time.
> If you have not set up your Junk Controls nor trained them it might explain why you are getting so much rubbish in the Inbox.
I've tried Junk filtering and am bewildered at how poorly it works as I end up with so many false positives. As I have repeatedly said, Junk Controls work great for filtering spam. The problem is they also filter many legit emails. So I have to continually check the Junk folder for legit emails.
> I only have a couple of filters that pick up a few specific variants of junk because I also get spammers and scammers falsely setting up the 'from' as if from myself as I have a website.
Yes that is a problem but it is rare and I'll handle that myself. Also it's easy to see the from field and if it's you then obviously it's spam. Unless you regularly email yourself to test things. For that you can disable that filter temporarily.
> Bare in mind that there is a huge difference between those who are acting fraudulently- aka scammers and those who are just sending unwanted mail aka spammers chucking out a load of constant nuisance mail and genuine people just touting for business but not of interest to yourself.
I find the majority of my spam are not fraudsters, just people sending marketing junk. But hey, they all waste our time. Of course some you can unsubscribe from but is anyone ever going to unsubscribe from thousands of emails individually? Probably not! We only do that from legit sources because we know it will work. And remember, tomorrow they may send out even more because by unsubscribing me you have proven to them it arrived and was read. I'd rather be unresponsive.
> Remember - some nefarious people abuse other peoples email addresses and send emails pretending to be from a real good sender email.
Very true but it is far less common and can be dealt with individually as they come in.
> I would ask you to never set those as junk because the real owner could end up being blocked from using their own account - not funny.
Agreed.
moz2u said
The problem with junk filters is not their ability to filter spam. The problem is they also filter so many legit emails. Their problem is false positives. It's always been that problem. You always have to check your spam folder for legit email so why bother at all? The best solution is to filter nothing because filters are useless except for the most obvious like: Ciallis, Viagra, "Make money", "Fast money" or anything with Trump or Crypto....sure they work and we would obviously use them. But smart spammers don't do stupid things like that. They're clever. They are the problem. The emails that could be legit, until you look deeper. Gaze at your page of emails and read/delete the legit ones. Once that is done highlight all, block sender's domain. That is the solution to the present day spam problem for almost all your spam.
The only problem with your suggestion is that real scammers don't provide their domain, the 'From' is often one they have abused and indeed it might even be your own email address. Many scammers use a legit vps so IP is hidden as well. Your solution regarding 'block a domain' will not work for all of the worst kind of 'Spam/junk' .
As you insist you want to do your own batch select and choose what you want to do - mark it as junk or delete it. Personally, I don't have the time to do that on a constant ongoing daily basis, but if that's what you want to do then you can do it. It's your choice. highlight your batch and select 'Mark' - 'As Junk' Or select 'Delete' etc and those options can already be done on a highlighted batch. But I would advise you set up where to put emails that are marked as junk, so you also set up to auto empty the junk assuming your server does not do it automatically or use use Pop.
There is no point is discussing 'Block domain' because only a server can block a domain and you would have set it up in the webmail account. You would also need to be certain the domain in question was from the real sender.
If you select an email to read - clickon 'More' and select 'View Source' The top 'Received ' will be the last server and it will the one that receives your emails for you to read. Scroll down to the first 'Received' which is usually just above the 'FROM, TO, Subject, Date section and you can locate the initial server and sender.
Such as : Received: from wkgrand.com (unknown [103.146.122.55]) That was 'from' the domain mentioned - registered in hong kong, IP in Vietnam and all links in email go a russian .ru link. So a load of crap and a domain you could block on server. But as I have enabled the adaptive junk mail controls and trained Thunderbird a long time ago - it recognises this as junk - marks as junk and put's it in the Junk folder automatically.
But you might discover something that does not show who sent it - example of one I had below. In this instance, it was appearing to be 'From' the company who host my website. It was not. It's not set as junk as the 'from' is a legit company email address which is whitelisted - so Thunderbird did the correct action. It's up to me to realise it's bogus and just delete it - this is an example of what it says in the View Source. A scammer using a vps.
Received: by vps112560.serveur-vps.net (Postfix, from userid 33) id CB7161E1EEB; Sun, 1 Jun 2025 18:08:03 +0200 (CEST)
One can also take action to reduce the number of incoming junk/spam messages so that they don't have to be filtered and so that false positives and time to review the junk folder are less of a problem.
Some things that I do:
- Own my own domain.
- Have my registrar keep my contact information private.
- Use a service provider with excellent junk/spam blocking so that most junk/spam never reaches my in-box.
- Use e-mail aliases.
- Get off mailing lists aggressively.
- Block senders by domain on the server as needed. (I am blocking 29 right now.)
- Use Sieve code at the server to block senders that cannot be blocked by domain. (I am blocking only one sender that way right now.)
After all that, there is rarely anything for my e-mail client to filter.
Using this approach, I get about one junk message per month. Recently, I got a false positive. I cannot remember the last time I got a false positive.
Whether one wants to put effort into these tasks or into filtering or into both is, of course, a personal decision.
Good luck fighting spam.
to Todd > The only problem with your suggestion is that real scammers don't provide their domain, the 'From' is often one they have abused and indeed it might even be your own email address. Many scammers use a legit vps so IP is hidden as well. Your solution regarding 'block a domain' will not work for all of the worst kind of 'Spam/junk' .
Well it will help. Just looking for improvement.
> As you insist you want to do your own batch select and choose what you want to do - mark it as junk or delete it. Personally, I don't have the time to do that on a constant ongoing daily basis, but if that's what you want to do then you can do it. It's your choice. highlight your batch and select 'Mark' - 'As Junk' Or select 'Delete' etc and those options can already be done on a highlighted batch. But I would advise you set up where to put emails that are marked as junk, so you also set up to auto empty the junk assuming your server does not do it automatically or use use Pop.
I don't like auto emptying because spam filters may capture legit emails. And it's pretty easy spotting legit emails within all the spam.
> There is no point is discussing 'Block domain' because only a server can block a domain and you would have set it up in the webmail account. You would also need to be certain the domain in question was from the real sender.
I'll try to correct my terminology. 'Filter domain' is what I should always say.
> If you select an email to read - clickon 'More' and select 'View Source' The top 'Received ' will be the last server and it will the one that receives your emails for you to read. Scroll down to the first 'Received' which is usually just above the 'FROM, TO, Subject, Date section and you can locate the initial server and sender.
> Such as : Received: from wkgrand.com (unknown [103.146.122.55]) That was 'from' the domain mentioned - registered in hong kong, IP in Vietnam and all links in email go a russian .ru link. So a load of crap and a domain you could block on server. But as I have enabled the adaptive junk mail controls and trained Thunderbird a long time ago - it recognises this as junk - marks as junk and put's it in the Junk folder automatically.
OK you've convinced me to try it again!
> But you might discover something that does not show who sent it - example of one I had below. In this instance, it was appearing to be 'From' the company who host my website. It was not. It's not set as junk as the 'from' is a legit company email address which is whitelisted - so Thunderbird did the correct action. It's up to me to realise it's bogus and just delete it - this is an example of what it says in the View Source. A scammer using a vps.
Not that I think of it, it's not difficult to notice legit email in a page of spam. It's the one where the Title is not screaming at you. :)
To Scooter: > Use a service provider with excellent junk/spam blocking so that most junk/spam never reaches my in-box.
But you still have to check it to make sure there is no legit email there, right?
> Block senders by domain on the server as needed. (I am blocking 29 right now.)
We'll say "filter senders by domain". :) But this is time consuming as email programs don't seem to allow a quick 1: Highlight message. 2: Filter domain of sender. That's what I'm looking for. You have to set up a "Rule" and it takes about 30 seconds usually for each. I guess if I did it over and over it would be quite a bit faster. But you would think some tech person would wake up to the need of this feature of "filter domain of sender".
> Use Sieve code at the server to block senders that cannot be blocked by domain. (I am blocking only one sender that way right now.)
How do you filter someone if you're not filtering their domain or email address?
No, I mean that my service provider blocks and that I block at the server. Messages never end up in an IMAP folder and I never see them.
I understand what you want. I am just sharing with you what I do.
There was a pesky spammer that used different e-mail addresses and domains regularly but the same user name was always present in one or more headers. So I block based on three criteria, I think.
To Scooter: > There was a pesky spammer that used different e-mail addresses and domains regularly but the same user name was always present in one or more headers. So I block based on three criteria, I think.
Ha! Whatever works! I guess they all have different techniques in spreading their misery.