Cisco Cisco Email Security Appliance C190 Guía Del Usuario
9-15
Cisco AsyncOS 9.5 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Rules
Dictionary
b
dictionary-match(<dictionary
_name>)
Does the message body contain any of the
regular expressions or terms in the content
dictionary named dictionary_name? Does the
pattern occur the minimum number of times you
specified for the threshold value? See
regular expressions or terms in the content
dictionary named dictionary_name? Does the
pattern occur the minimum number of times you
specified for the threshold value? See
Attachment
Dictionary Match
Dictionary Match
attachment-dictionary-match(
<dictionary_name>)
Does the attachment contain any of the regular
expressions in the content dictionary named
dictionary_name? Does the pattern occur the
minimum number of times you specified for the
threshold value? See
expressions in the content dictionary named
dictionary_name? Does the pattern occur the
minimum number of times you specified for the
threshold value? See
Subject Dictionary
Match
Match
subject-dictionary-match(<di
ctionary_name>)
Does the Subject header contain any of the
regular expressions or terms in the content
dictionary named dictionary name? See
regular expressions or terms in the content
dictionary named dictionary name? See
.
Header Dictionary
Match
Match
header-dictionary-match(<dic
tionary_name>, <header>)
Does the specified header (case insensitive)
contain any of the regular expressions or terms in
the content dictionary named dictionary name?
See
contain any of the regular expressions or terms in
the content dictionary named dictionary name?
See
Body Dictionary
Match
Match
body-dictionary-match(<dicti
onary_name>)
This filter condition returns true if the dictionary
term matches content in the body of the message
only. The filter searches for terms within the
MIME parts not considered to be an attachment.
and it returns true if the user-defined threshold is
met (the default threshold value is one). See
term matches content in the body of the message
only. The filter searches for terms within the
MIME parts not considered to be an attachment.
and it returns true if the user-defined threshold is
met (the default threshold value is one). See
.
Envelope Recipient
Dictionary Match
Dictionary Match
rcpt-to-dictionary-match(<di
ctionary_name>)
Does the envelope recipient contain any of the
regular expressions or terms in the content
dictionary named dictionary name? See
regular expressions or terms in the content
dictionary named dictionary name? See
.
Envelope Sender
Dictionary Match
Dictionary Match
mail-from-dictionary-match(<
dictionary_name>)
Does the envelope sender contain any of the
regular expressions or terms in the content
dictionary named dictionary name? See
regular expressions or terms in the content
dictionary named dictionary name? See
.
SMTP
Authenticated User
Match
Authenticated User
Match
smtp-auth-id-matches(<target
> [, <sieve-char>])
Does the address of the Envelope Sender and the
address in message header match the
authenticated SMTP user ID of the sender? See
address in message header match the
authenticated SMTP user ID of the sender? See
True
true
Matches all messages. See
.
Valid
valid
Returns false if the message contains
unparsable/invalid MIME parts and true
otherwise. See
unparsable/invalid MIME parts and true
otherwise. See
Signed
signed
Is the message is signed? See
Table 9-2
Message Filter Rules
Rule Syntax
Description