Cisco Cisco Email Security Appliance X1070 Guía Del Usuario
Chapter 6 Using Message Filters to Enforce Email Policies
6-36
Cisco IronPort AsyncOS 7.5 for Email Advanced Configuration Guide
OL-25137-01
As a convenience, the size measurement may be specified with a suffix:
Remote IP Rule
The
remote-ip
rule tests to see if the IP address of the host that sent that message
matches a certain pattern. The IP address pattern is specified using the allowed
hosts notation described in “Sender Group Syntax” in the Cisco IronPort
AsyncOS for Email Configuration Guide, except for the
hosts notation described in “Sender Group Syntax” in the Cisco IronPort
AsyncOS for Email Configuration Guide, except for the
SBO
,
SBRS
,
dnslist
notations and the special keyword
ALL
.
The allowed hosts notation can only identify sequences and numeric ranges of IP
addresses (not hostnames). For example, the following filter bounces any message
not injected from IP addresses of form
addresses (not hostnames). For example, the following filter bounces any message
not injected from IP addresses of form
10.1.1.
x where
X
is
50
,
51
,
52
,
53
,
54
, or
55
.
body-size == 10M
Equal
body-size != 10M
Not equal
Quantity
Description
10b
ten bytes (same as 10)
13k
thirteen kilobytes
5M
five megabytes
40G
40 gigabytes (Note: The Cisco IronPort appliance cannot accept
messages larger than 100 megabytes.)
messages larger than 100 megabytes.)
notMineFilter:
if (remote-ip != '10.1.1.50-55')
{
bounce();
}