Cisco Cisco Email Security Appliance C650 Guía Del Usuario
9-25
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Rules
Note
This filter returns true for empty Subject and To headers, but it also returns true for missing headers. If
the message does not contain the specified headers, the filter still returns true.
the message does not contain the specified headers, the filter still returns true.
Envelope Recipient Rule
The
rcpt-to
rule selects those messages where any Envelope Recipient matches the given regular
expression. For example, the following filter drops all messages sent with an email address containing
the string “scarface.”
the string “scarface.”
Note
The regular expression for the
rcpt-to
rule is case insensitive.
Note
The
rcpt-to
rule is message-based. If a message has multiple recipients, only one recipient has to match
the rule for the specified action to affect the message to all recipients.
Envelope Recipient in Group Rule
The
rcpt-to-group
rule selects those messages where any Envelope Recipient is found to be a member
of the LDAP group given. For example, the following filter drops all messages sent with an email address
within the LDAP group “ExpiredAccounts.”
within the LDAP group “ExpiredAccounts.”
Note
The
rcpt-to-group
rule is message-based. If a message has multiple recipients, only one recipient has
to match the rule for the specified action to affect the message to all recipients.
scarfaceFilter:
if (rcpt-to == 'scarface')
{
drop();
}
expiredFilter:
if (rcpt-to-group == 'ExpiredAccounts')
{
drop();
}