Cisco Cisco Email Security Appliance C160 Guía Del Usuario
9-25
Cisco AsyncOS 8.5.6 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Rules
Envelope Recipient in Group Rule
The
rcpt-to-group
rule selects those messages where any Envelope Recipient is found to be a member
of the LDAP group given. For example, the following filter drops all messages sent with an email address
within the LDAP group “ExpiredAccounts.”
within the LDAP group “ExpiredAccounts.”
Note
The
rcpt-to-group
rule is message-based. If a message has multiple recipients, only one recipient has
to match the rule for the specified action to affect the message to all recipients.
Envelope Sender Rule
The
mail-from
rule selects those messages where the Envelope Sender matches the given regular
expression. For example, the following filter immediately delivers any message sent by
admin@yourdomain.com
.
Note
The regular expression for the
mail-from
rule is case insensitive. Note that the period character is
escaped in the following example.
Envelope Sender in Group Rule
The
mail-from-group
rule selects those messages where the Envelope Sender is found to be in an LDAP
group given on the right side of the operator (or, in the case of inequality, where the sender’s email
address is not in the given LDAP group). For example, the following filter immediately delivers any
message sent by someone whose email address is in the LDAP group “KnownSenders.”
address is not in the given LDAP group). For example, the following filter immediately delivers any
message sent by someone whose email address is in the LDAP group “KnownSenders.”
expiredFilter:
if (rcpt-to-group == 'ExpiredAccounts')
{
drop();
}
kremFilter:
if (mail-from == '^admin@yourdomain\\.com$')
{
skip-filters();
}
SenderLDAPGroupFilter:
if (mail-from-group == 'KnownSenders')