Cisco Cisco Email Security Appliance C680 Betriebsanweisung
5-297
Cisco IronPort AsyncOS 7.1 for Email Advanced Configuration Guide
OL-22164-02
Chapter 5 Using Message Filters to Enforce Email Policies
Each message injected into the IronPort appliance is processed through all
message filters in order, unless you specify a final action, which stops the message
from being processed further. (See
message filters in order, unless you specify a final action, which stops the message
from being processed further. (See
.) Filters
may also apply to all messages, and rules may also be combined using logical
connectors (AND, OR, NOT).
connectors (AND, OR, NOT).
Envelope Sender
Dictionary Match
Dictionary Match
mail-from-dictionary-match(<
dictionary_name>)
Does the envelope sender contain any of the
regular expressions or terms in the content
dictionary named dictionary name? See
regular expressions or terms in the content
dictionary named dictionary name? See
SMTP
Authenticated User
Match
Authenticated User
Match
smtp-auth-id-matches(<target
> [, <sieve-char>])
Does the address of the Envelope Sender and the
address in message header match the
authenticated SMTP user ID of the sender? See
address in message header match the
authenticated SMTP user ID of the sender? See
True
true
Matches all messages. See
Valid
valid
Returns false if the message contains
unparsable/invalid MIME parts and true
otherwise. See
unparsable/invalid MIME parts and true
otherwise. See
.
Signed
signed
Is the message is signed? See
Signed Certificate
signed-certificate(<field>
[<operator> <regular
expression>])
Does the message signer or X.509 certificate
issuer match a certain pattern? See
issuer match a certain pattern? See
a.Attachment filtering is discussed in detail in the section
b.Content Dictionaries are discussed in the detail in the “Text Resources” chapter in the Cisco IronPort
AsyncOS for Email Configuration Guide
AsyncOS for Email Configuration Guide
.
Table 5-2
Message Filter Rules
Rule Syntax
Description