Message filter rule to catch all domain hostnames

[JJ Johnson]

I've been using message filters for quite a while, but never quite figured out a good way to create a single filter rule to handle all email from a domain. The problem is what to do about host names in the FROM header. For example, I might receive email from all of the following addresses within a domain:

support@domain.com
orders@email.domain.com
offers@e.domain.com

When I want to create a message filter for that, I find myself always creating two rules:

@domain.com
.domain.com

I can't just use the plain "domain.com" because I want to avoid catching, for instance, "spamdomain.com".

Is there a way to do this with just one rule?

[tanstaafl]

Some email providers use a version of SpamAssassin configured to add X-Resolved-to: and X-Delivered-to: headers. If yours adds something like that see if that custom header always mentions or always omits a host name.

[JJ Johnson]

No, unfortunately, there's nothing like that in the headers.