Cisco Cisco Email Security Appliance C160 Mode D'Emploi
9-17
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Rules
Each message injected into the Cisco appliance is processed through all message filters in order, unless
you specify a final action, which stops the message from being processed further. (See
you specify a final action, which stops the message from being processed further. (See
.) Filters may also apply to all messages, and rules may also be combined using logical
connectors (AND, OR, NOT).
Regular Expressions in Rules
Several of the atomic tests used to define rules use regular expression matching. Regular expressions can
become complex. Use the following table as a guide for the applying of regular expressions within
message filter rules:
become complex. Use the following table as a guide for the applying of regular expressions within
message filter rules:
Table 9-3
Regular Expression in Rules
Regular expression (
abc
)
Regular expressions in filter rules match a string if the sequence of
directives in the regular expression match any part of the string.
directives in the regular expression match any part of the string.
For example, the regular expression
Georg
matches the string
George
Of The Jungle
, the string
Georgy Porgy
, the string
La Meson
Georgette
as well as
Georg
.
Carat (
^
)
Dollar sign (
$
)
Rules containing the dollar sign character ($) only match the end of the
string, and rules containing the caret symbol (
string, and rules containing the caret symbol (
^
) only match the
beginning of the string.
For example, the regular expression
^Georg$
only matches the string
Georg
.
Searching for an empty header would look like this:
"^$"
Letters, white space and the at
sign (
sign (
@
) character
Rules containing characters, white space, and the at sign character (
@
)
only match themselves explicitly.
For example, the regular expression
^George@admin$
only matches the
string
George@admin
.
Period character (
.
)
Rules containing a period character (
.
) match any character (except a
new line).
For example, the regular expression
^...admin$
matches the string
macadmin
as well as the string
sunadmin
but not
win32admin
.
Asterisk (
*
) directive
Rules containing an asterisk (
*
) match “zero or more matches of the
previous directive.” In particular, the sequence of a period and an
asterisk (
asterisk (
.*
) matches any sequence of characters (not containing a new
line).
For example, the regular expression
^P.*Piper$
matches all of these
strings:
PPiper
,
Peter Piper
,
P.Piper
,
and
Penelope Penny Piper
.