Cisco Cisco Email Security Appliance C160 Mode D'Emploi

When you receive SPF/SIDF verified mail, you may want to take different actions 
depending on the results of the SPF/SIDF verification. You can use the following 
message and content filter rules to determine the status of SPF/SIDF verified mail 
and perform actions on the messages based on the verification results:

spf-status

. This filter rule determines actions based on the SPF/SIDF status. 

You can enter a different action for each valid SPF/SIDF return value.

spf-passed

. This filter rule generalizes the SPF/SIDF results as a Boolean 

value.

The 

spf-passed

 filter rule is only available in message filters.

You can use the 

spf-status

 rule when you want to address more granular results, 

and use the 

spf-passed

 rule when you want to create a simple Boolean.

If you use the 

spf-status

 filter rule, you can check against the SPF/SIDF 

verification results using the following syntax:

if (spf-status == "Pass")

If you want a single condition to check against multiple status verdicts, you can 
use the following syntax:

if (spf-status == "PermError, TempError")

You can also check the verification results against the HELO, MAIL FROM, and 
PRA identities using the following syntax:

if (spf-status("pra") == "Fail")