Cisco Cisco Email Security Appliance C190 Guía Del Usuario
9-113
User Guide for AsyncOS 9.8 for Cisco Email Security Appliances
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Examples
Another Drop Spoofed Domain Filter
Summary: Anti domain spoof filter:
Detect Looping Filter
This filter is used to detect, stop, and determine what is causing, a mail loop. This filter can help
determine a configuration issue on the Exchange server or elsewhere.
determine a configuration issue on the Exchange server or elsewhere.
archive('domain_spoof');
drop ();
}
reject_domain_spoof:
if (recv-listener == "MailListener") {
insert-header("X-Group", "$Group");
if ((mail-from == "@test\\.mycompany\\.com") AND (header("X-Group") != "RELAYLIST")) {
notify("me@here.com");
drop();
strip-header("X-Group");
}
External_Loop_Count:
if (header("X-ExtLoop1")) {
if (header("X-ExtLoopCount2")) {
if (header("X-ExtLoopCount3")) {
if (header("X-ExtLoopCount4")) {
if (header("X-ExtLoopCount5")) {
if (header("X-ExtLoopCount6")) {
if (header("X-ExtLoopCount7")) {
if (header("X-ExtLoopCount8")) {
if (header("X-ExtLoopCount9")) {
notify ('joe@example.com');
drop();