Cisco Cisco Email Security Appliance C190 Guía Del Usuario
9-14
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Rules
Each message injected into the Cisco appliance is processed through all message filters in order, unless
you specify a final action, which stops the message from being processed further. (See
you specify a final action, which stops the message from being processed further. (See
.) Filters may also apply to all messages, and rules may also be combined using logical
connectors (AND, OR, NOT).
Header Dictionary
Match
Match
header-dictionary-match(<dic
tionary_name>, <header>)
Does the specified header (case insensitive)
contain any of the regular expressions or terms in
the content dictionary named dictionary name?
See
contain any of the regular expressions or terms in
the content dictionary named dictionary name?
See
Body Dictionary
Match
Match
body-dictionary-match(<dicti
onary_name>)
This filter condition returns true if the dictionary
term matches content in the body of the message
only. The filter searches for terms within the
MIME parts not considered to be an attachment.
and it returns true if the user-defined threshold is
met (the default threshold value is one). See
term matches content in the body of the message
only. The filter searches for terms within the
MIME parts not considered to be an attachment.
and it returns true if the user-defined threshold is
met (the default threshold value is one). See
.
Envelope Recipient
Dictionary Match
Dictionary Match
rcpt-to-dictionary-match(<di
ctionary_name>)
Does the envelope recipient contain any of the
regular expressions or terms in the content
dictionary named dictionary name? See
regular expressions or terms in the content
dictionary named dictionary name? See
.
Envelope Sender
Dictionary Match
Dictionary Match
mail-from-dictionary-match(<
dictionary_name>)
Does the envelope sender contain any of the
regular expressions or terms in the content
dictionary named dictionary name? See
regular expressions or terms in the content
dictionary named dictionary name? See
.
SMTP
Authenticated User
Match
Authenticated User
Match
smtp-auth-id-matches(<target
> [, <sieve-char>])
Does the address of the Envelope Sender and the
address in message header match the
authenticated SMTP user ID of the sender? See
address in message header match the
authenticated SMTP user ID of the sender? See
True
true
Matches all messages. See
.
Valid
valid
Returns false if the message contains
unparsable/invalid MIME parts and true
otherwise. See
unparsable/invalid MIME parts and true
otherwise. See
Signed
signed
Is the message is signed? See
Signed Certificate
signed-certificate(<field>
[<operator> <regular
expression>])
Does the message signer or X.509 certificate
issuer match a certain pattern? See
issuer match a certain pattern? See
.
2.Content Dictionaries are discussed in the detail in the “Text Resources” chapter.
Table 9-2
Message Filter Rules
Rule Syntax
Description