Cisco Cisco Email Security Appliance C160 Betriebsanweisung

header-dictionary-match(<dic

tionary_name>, <header>)

Does the specified header (case insensitive) 
contain any of the regular expressions or terms in 
the content dictionary named dictionary name? 
See 

body-dictionary-match(<dicti

onary_name>)

This filter condition returns true if the dictionary 
term matches content in the body of the message 
only. The filter searches for terms within the 
MIME parts not considered to be an attachment. 
and it returns true if the user-defined threshold is 
met (the default threshold value is one). See 

.

rcpt-to-dictionary-match(<di

ctionary_name>)

Does the envelope recipient contain any of the 
regular expressions or terms in the content 
dictionary named dictionary name? See 

.

mail-from-dictionary-match(<

dictionary_name>)

Does the envelope sender contain any of the 
regular expressions or terms in the content 
dictionary named dictionary name? See 

.

smtp-auth-id-matches(<target

> [, <sieve-char>]) 

Does the address of the Envelope Sender and the 
address in message header match the 
authenticated SMTP user ID of the sender? See 

true

Matches all messages. See 

.

valid

Returns false if the message contains 
unparsable/invalid MIME parts and true 
otherwise. See 

signed

Is the message is signed? See 

signed-certificate(<field> 

[<operator> <regular 

expression>])

Does the message signer or X.509 certificate 
issuer match a certain pattern? See 

header-repeats (<target>, 

<threshold> [, <direction>])

Returns 

true 

if at a given point in time, a 

specified number of messages:

With same subject header are detected in 
last one hour.

From same envelope-sender are detected in 
last one hour.

See