Use mail flow rules to route email based on a list of words, phrases, or patterns

Exchange 2013

Applies to: Exchange Online, Exchange Online Protection, Exchange Server 2013

Topic Last Modified: 2017-10-30

To help your users comply with your organization's email policies, you can use Exchange transport rules to determine how email containing specific words or patterns is routed. For a short list of words or phrases, you can use the Exchange admin center. For a longer list, you might want to use the Exchange Module for Windows PowerShell to read the list from a text file.

If your organization uses Data Loss Prevention (DLP), see Data loss prevention for additional options for identifying and routing email that contains sensitive information.

If your list of words or phrases is short, you can create a rule using the Exchange admin center. For example, if you want to make sure no one sends email with bad words or with misspellings of your company name, internal acronyms or product names, you could create a rule to block the message and tell the sender. Note that words, phrases, and patterns are not case sensitive.

This example blocks messages with common typos.

Rule showing blocking a message based on text patterns

If your list of words, phrases, or patterns is long, you can put them in a text file with each word, phrase, or pattern on its own line. Use the Exchange Module for Windows PowerShell to read in the list of keywords into a variable, create a transport rule, and assign the variable with the keywords to the transport rule condition. For example, the following script takes a list of misspellings from a file called misspelled_companyname.txt.

$keywords=Import-Content  .\misspelled_companyname.txt
New-TransportRule -Name "Block messages with unacceptable words" -SubjectOrBodyContainsWords $keywords -SentToScope "NotInOrganization" -RejectMessageReasonText "Do not use internal acronyms, product names, or misspellings in external communications."

The text file can contain regular expressions for patterns. These expressions are not case-sensitive. Common regular expressions include:





Any single character


Any additional characters


Any decimal digit


Any single character in character_group.

For example, this text file contains common misspellings of Microsoft.

[mn]icro soft

To learn how to specify patterns using regular expressions, see Regular Expression Reference.