All the pieces of the puzzle are there, every option is there in the rule creation to achieve my objective, but I am not getting the results I need.
I just need to be able to deny any member of a particular distribution group from sending emails outside of the organization, unless the member is sending an attachment with a particular name.