Cisco Cisco Email Security Appliance C170 Guía Del Usuario

rcpt-to-group

Is the Envelope Recipient, (i.e. the Envelope To, 
<RCPT TO>) in a given LDAP group? See 

.

Note: The

 rcpt-to-group

 rule is 

message-based. If a message has multiple 
recipients, only one recipient has to be found in 
a group for the specified action to affect the 
message to all recipients.

remote-ip

Was the message sent from a remote host that 
matches a given IP address or IP block? See 

recv-int

Did the message arrive via the named receiving 
interface? See 

recv-listener

Did the message arrive via the named listener? 
See 

.

date

Is current time before or after a specific time and 
date? See 

header(<string>)

Does the message contain a specific header? 
Does the value of that header match a certain 
pattern? See 

.

random(<integer>)

Is a random number in some range? See 

.

rcpt-count

How many recipients is this email going to? See 

.

addr-count()

What is the cumulative number of recipients? 

 This filter differs from the rcpt-count filter rule 
in that it operates on the message body headers 
instead of the envelope recipients. See 

.

spf-status

What was the SPF verification status? This filter 
rule allows you to query for different SPF 
verification results. You can enter a different 
action for each valid SPF/SIDF return value. See 

.

spf-passed

Did the SPF/SIDF verification pass? This filter 
rule generalizes the SPF/SIDF results as a 
Boolean value. See 

.

image-verdict

What was the image scanning verdict? This filter 
rule allows you to query for different image 
analysis verdicts. See