Cisco Cisco Email Security Appliance C160 Mode D'Emploi

dictionary-match(<dictionary

_name>)

Does the message body contain any of the 
regular expressions or terms in the content 
dictionary named dictionary_name? Does the 
pattern occur the minimum number of times you 
specified for the threshold value? See 

attachment-dictionary-match(

<dictionary_name>)

Does the attachment contain any of the regular 
expressions in the content dictionary named 
dictionary_name? Does the pattern occur the 
minimum number of times you specified for the 
threshold value? See 

subject-dictionary-match(<di

ctionary_name>)

Does the Subject header contain any of the 
regular expressions or terms in the content 
dictionary named dictionary name? See 

.

header-dictionary-match(<dic

tionary_name>, <header>)

Does the specified header (case insensitive) 
contain any of the regular expressions or terms in 
the content dictionary named dictionary name? 
See 

body-dictionary-match(<dicti

onary_name>)

This filter condition returns true if the dictionary 
term matches content in the body of the message 
only. The filter searches for terms within the 
MIME parts not considered to be an attachment. 
and it returns true if the user-defined threshold is 
met (the default threshold value is one). See 

.

rcpt-to-dictionary-match(<di

ctionary_name>)

Does the envelope recipient contain any of the 
regular expressions or terms in the content 
dictionary named dictionary name? See 

.

mail-from-dictionary-match(<

dictionary_name>)

Does the envelope sender contain any of the 
regular expressions or terms in the content 
dictionary named dictionary name? See 

.

smtp-auth-id-matches(<target

> [, <sieve-char>]) 

Does the address of the Envelope Sender and the 
address in message header match the 
authenticated SMTP user ID of the sender? See 

true

Matches all messages. See 

.

valid

Returns false if the message contains 
unparsable/invalid MIME parts and true 
otherwise. See 

signed

Is the message is signed? See