Cisco Cisco Email Security Appliance C680 User Guide

Envelope Recipient. Does the Envelope Recipient, (i.e. 
the Envelope To, <RCPT TO>) match a given pattern?

Matches LDAP group. Is the Envelope Recipient, (i.e. 
the Envelope To, <RCPT TO>) in a given LDAP group?

Contains term in content dictionary. Does the envelope 
recipient contain any of the regular expressions or terms 
in the content dictionary named <dictionary name>?

To search for dictionary terms, the dictionary must already 
have been created. See 

.

Note: The Envelope Recipient rule is message-based. If a 
message has multiple recipients, only one recipient has to 
be found in a group for the specified action to affect the 
message to all recipients.

Is the Envelope Sender (i.e., the Envelope From, <MAIL 
FROM>) in a given LDAP group?

Did the message arrive via the named listener? The 
listener name must be the name of a listener currently 
configured on the system. 

Was the message sent from a remote host that matches a 
given IP address or IP block? The Remote IP rule tests to 
see if the IP address of the host that sent that message 
matches a certain pattern. The IP address pattern is 
specified using the allowed hosts notation described in 

, except for the SBO, 

SBRS, dnslist notations and the special keyword ALL.

What is the sender’s SenderBase Reputation Score? The 
Reputation Score rule checks the SenderBase Reputation 
Score against another value.