Cisco Cisco Email Security Appliance C190 User Guide

Page of 1196
 
9-40
Cisco AsyncOS 9.1 for Email 사용 설명서
 
     메시지 필터를 사용하여 이메일 정책 적용
  메시지 필터 규칙
다음 필터는 From 헤더의 주소와 봉투 발신자가 SMTP 인증 사용자 ID와 일치하는지 확인하기 위
해 인증된 SMTP 세션 동안 생성된 모든 메시지를 확인합니다. 주소와 ID가 일치하면 필터는 도메
인을 확인합니다. 주소와 ID가 일치하지 않으면 어플라이언스는 메시지를 격리합니다.
SomeUser
someuser@example.com
someuser
someuser+folder@example.com
아니요
someuser
+
someuser+folder@example.com
someuser@example.com
someuser@forged.com
아니요
someuser@example.com
someuser@example.com
SomeUser@example.com
someuser@example.com
SMTP 인증 ID
Sieve Char
비교 주소
일치 여부
Msg_Authentication:
if (smtp-auth-id-matches("*Any"))
{
    # Always include the original authentication credentials in a
    # special header.
    insert-header("X-Auth-ID","$SMTPAuthID");
    if (smtp-auth-id-matches("*FromAddress", "+") and
        smtp-auth-id-matches("*EnvelopeFrom", "+"))
    {
        # Username matches.  Verify the domain
        if header('from') != "(?i)@(?:example\\.com|alternate\\.com)" or
           mail-from != "(?i)@(?:example\\.com|alternate\\.com)"
        {
            # User has specified a domain which cannot be authenticated
            quarantine("forged");
        }
    } else {
        # User claims to be an completely different user
        quarantine("forged");