This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 35%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMR%3C/text%3E%3C/svg%3E)
Hello, I am Rubiat.
I need to masking some card data through exchange server 2013
Total digit 16: First 6 digit (fixed) + 6 digit (fixed) + 4 digit (any combination)
Example: data will be quarantine to review/monitor or sender getting messges.
123456******____(any 4 digit)
123478******____(any 4 digit)
Without this pattern data will be quarantine to review/monitor or sender getting messges.
How to do this configuration through exchange server 2013.
Thank you
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 22%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKY%3C/text%3E%3C/svg%3E)
Hi Rubiat,
Did you mean you would like to only let emails which contain this pattern 123456(any 4 digit) to be sent to recipients directly, and the other ones would be quarantined and waiting for review/approval?
If I misunderstood it, please feel free to correct me.
If this is the case, I suppose you may create a mail flow rule and use regular expression to match this pattern.
It would be like:
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
I am writing here to confirm with you how thing going now?
Please let us know if you would like further assistance.
Hello @Kael Yao-MSFT ,
Thanks for your response and extremely sorry for my late acknowledgement. I just want to do the following:
If anyone send me a mail which header or body contains 123456******3221 where 1st 6 digit is always fixed (123456), middle 6 digit can be any number which will be masked by '*' and the last 4 digit could be any number. If this policy doesn't match then the mail goes to quarantine or need to approval from my administrator or someone. If this policy match then the mail can deliver. But one question is if I apply this to all message then other normal mail would be faced any problem or not?
Hi,
Thanks for your update!
But one question is if I apply this to all message then other normal mail would be faced any problem or not?
Yes.
If the condition in the mail flow rule is configured to apply to all messages like in the screenshot, the other normal messages would also be affected.
To avoid this, you may need to configure the appropriate conditions.
I am a little confused with the scenario.
Do you mean the rule should only apply to a message which contains this pattern in header or body:
123456(six digit fixed) + (random six digit which is supposed to be masked by ", however actually it wasn't masked) + (random 4 digit which doesn't need to be masked)
For example, original text is 123456 654321 1111.
The expected text should be 123456 """""" 1111.
So the message would be quarantined and waiting for approval.
Other normal messages, which don't have this pattern, should not be quarantined and should be sent and received normally.
If I misunderstood it, please feel free to correct me.
Hi @Kael Yao-MSFT ,
Thanks for your update. Yes, you understood properly. I want to send all normal mail but only except this type digit. So, how can I do this? Can you suggest me the full procedure?
Hi,
Please access Exchange Admin Center>mail flow>rules and create a new rule.
I suppose the rule would be like:
Please replace the detailed pattern in conditions and exceptions and test if it can work for you.
You may also refer to this link for more information on mail flow rules: Mail flow rules in Exchange Server
Below are some screenshots in my lab:
Subject: 1234569999991234 quarantined
Subject 123456""""""1111 received directly
@Kael Yao-MSFT Thanks a lot to you. I will let you know after the test
Hello @Kael Yao-MSFT ,
Thanks a lot for your super assistance. The rule is working properly but one requirement is needed. I want to set first 6 digit as fixed and if 1st 6 digit is not match then it will also go for approval but In this testing I can be able to send mail which not contain 1st six fixed digit.
Hi,
Thanks for the update.
So I suppose it is required to also add the six fixed digit to the condition.
Then the rule would be like:
It would apply to messages which have 16 digit in subject or body, or which have 6 digit+6 "+4 random digit in subject or body.
Only messages which match this pattern (123456""""+random 4 digit) can be sent directly, other messages would be quarantined.
Example:
Subject 654321""""""1111 would also be quarantined
Hello @Kael Yao-MSFT ,
Thanks for your support but the rule is actually not working properly. I also want to block those type of mail which contain 16+ digit. For example: It working for 16 digit credit card no, but I can send 17 digit credit card no which I also want to block and another thing is that I don't want to approval, I want to if someone can not send the mail to follow this rule, the mail will be blocked and also send a notify mail to sender that "Please follow the credit card no. rule". How, I do this? Please assist me and again thanks for your support.
Hello @Kael Yao-MSFT ,
This is my rule
But, I can able to send mail with no 123456******4449 that was not blocked. I can also be able to send mail with 17 digit. Please give me suggestion
Hello @Kael Yao-MSFT , please response. It's urgent
Hi,
Sorry for the delay.
But, I can able to send mail with no 123456**4449 that was not blocked. I can also be able to send mail with 17 digit.
123456**4449
Is this a 12 digit?
The conditions in the rule would be really complex if the numbers aren't certain.
Should 12 digit also be rejected? Or just 16 digit and 17 digit?
And also what are the formats of the 17 digit you would like to allow and reject?
Example:
reject: 123456 123456 11111
allow: 123456 """""" 11111
Please provide more detailed information.
Thanks for your understanding.
Thanks for your feedback. Actually I have done all the conditions but still have some confusing tasks. I can able to send 12/13/14 digit with numeric and non numeric digit. But I also want to reject this. I just want to accept 16 digit and only 16 digit number. For example: 123456""""""4499. And another thing is that I don't want to deploy approval action. I want, If a sender not send mail with 16 digit number then reject his/her mail and also send a mail to the sender where mention that "Please follow the rule". But, When I configured action with "reject the mail with the explanation" then only an error code sent to the sender not my explanation message.
I can able to send 12/13/14 digit with numeric and non numeric digit. But I also want to reject this.
I want, If a sender not send mail with 16 digit number then reject his/her mail and also send a mail to the sender where mention that "Please follow the rule".
I think it may also affect normal emails.
For example, if an email doesn't contain any digit/credit card info, does it also need to be rejected?
Or, it contains a date format, 2022/2/22, should it also be rejected?
(This is to say, every allowed email needs to be in the format 123456""""""1111, others would all be rejected)
If yes, then the condition of the rule should be "applied to all messages" as mentioned in former reply. (However it affects all emails)
If not, there should be a minimum length of the digit (ten or more digit), otherwise I suppose there aren't ways to judge whether the rule should apply to the emails.
And another thing is that I don't want to deploy approval action. I want, If a sender not send mail with 16 digit number then reject his/her mail and also send a mail to the sender where mention that "Please follow the rule".
From your screenshot, it seems you are using Exchange Online(https://outlook.office365.com/ecp), but in the post you mentioned you are using Exchange 2013(Exchange On-premises).
So I would also like to confirm with you, are you using Exchange Online(Office 365) or Exchange 2013 On-premises or you have a hybrid deployment?
Thanks for your reply. Yes, I have an exchange online environment for testing purpose and I will deploy it on an Exchange 2013 environment. Is it possible to send a notify mail to the sender after reject the mail in Exchange 2013?
Yes. The action (reject the message with the explantion) should work for you.
NDR:
Ok, I will update you on tomorrow. Thanks
Hi @Kael Yao-MSFT ,
I am glad to inform you that, the issue has been resolved and thanks for great assistance.
Glad to hear that!
If the suggestions above helped with this issue, please feel free to accept the helpful ones as the answer to the question.
It would help other community members as well.
Thanks for your understanding.