Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 1212
 
9-39
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Rules
SPF-Passed Rule
The following example shows an 
spf-passed
 rule used to quarantine emails that are not marked as 
spf-passed:
             quarantine("Policy");
           }
         }
     } else {
       if(spf-status("pra") == "SoftFail"){
         if (spf-status("mailfrom") == "Fail"
                 or spf-status("mailfrom") == "SoftFail"){
             # malicious mail, but tempting
             quarantine("Policy");
         }
       }
     }
stamp-mail-with-spf-verification-error:
     if (spf-status("pra") == "PermError, TempError"
             or spf-status("mailfrom") == "PermError, TempError"
             or spf-status("helo") == "PermError, TempError"){
         # permanent error - stamp message subject
         strip-header("Subject");
         insert-header("Subject", "[POTENTIAL PHISHING] $Subject"); }
.
quarantine-spf-unauthorized-mail:
    if (not spf-passed) {
        quarantine("Policy");
    }