Cisco Cisco Email Security Appliance C160 Mode D'Emploi
Chapter 5 Using Message Filters to Enforce Email Policies
5-312
Cisco IronPort AsyncOS 7.1 for Email Advanced Configuration Guide
OL-22164-02
As a convenience, the size measurement may be specified with a suffix:
Quantity
Description
10b
ten bytes (same as 10)
13k
thirteen kilobytes
5M
five megabytes
40G
40 gigabytes (Note: The IronPort appliance cannot accept messages
larger than 100 megabytes.)
larger than 100 megabytes.)
Remote IP Rule
The
remote-ip
rule tests to see if the IP address of the host that sent that message
matches a certain pattern. The IP address pattern is specified using the allowed
hosts notation described in “Sender Group Syntax” in the Cisco IronPort
AsyncOS for Email Configuration Guide, except for the
hosts notation described in “Sender Group Syntax” in the Cisco IronPort
AsyncOS for Email Configuration Guide, except for the
SBO
,
SBRS
,
dnslist
notations and the special keyword
ALL
.
The allowed hosts notation can only identify sequences and numeric ranges of IP
addresses (not hostnames). For example, the following filter bounces any message
not injected from IP addresses of form
addresses (not hostnames). For example, the following filter bounces any message
not injected from IP addresses of form
10.1.1.
x where
X
is
50
,
51
,
52
,
53
,
54
, or
55
.
notMineFilter:
if (remote-ip != '10.1.1.50-55')
{
bounce();
}
body-size == 10M
Equal
body-size != 10M
Not equal