Cisco Cisco Email Security Appliance C680 Betriebsanweisung

Message Filters to Enforce Email Policies” chapter of the Cisco IronPort 
AsyncOS for Email Advanced Configuration Guide for more information about 
dictionary matching.

In the following example, a new message filter using the 

dictionary-match()

 

rule is created to blind carbon copy the administrator when the IronPort appliance 
scans a message that contains any words within the dictionary named 
“secret_words” (created in the previous example). Note that because of the 
settings, only messages that contain the whole word “

codename

” matching the 

case exactly will evaluate to true for this filter. 

In this example, we send the message to the Policy quarantine:

dictionary-match(<dict

ionary_name>)

Does the message contain a word 
that matches all the regular 
expressions listed in the named 
dictionary?

bcc_codenames:  

   if (dictionary-match ('secret_words')) 

       {

       bcc('administrator@example.com');

       }

quarantine_codenames:  

   if (dictionary-match ('secret_words')) 

       {

       quarantine('Policy');

       }