Try a validation rule of:
Is Null Or ((Like "*?@?*.?*") And (Not Like "*[ ,;]*"))
That specifies:
- at least one character;
- the @ sign;
- at least one character;
- the dot;
- at least one character;
- no space, comma, semicolon (or whatever other characters you wish to add
to the exclude list.)