Cisco Cisco Email Security Appliance C190 Guia Do Utilizador

every-attachment-contains(<r

egular expression>)

Do all of the attachments in this message contain 
text that matches a specific pattern? The text 
must exist in all attachments and the action 
performed is, in effect, a logical AND operation 
of an '

attachment-contains()

' for each 

attachment. The body is not scanned. Does the 
pattern occur the minimum number of times you 
specified for the threshold value? 

.

attachment-size

Does the message contain an attachment whose 
size is within some range? This rule is similar to 
the 

body-size

 rule, but it attempts to avoid 

scanning the entire “body” of the message. That 
is, it attempts to scan only that which the user 
would view as being an attachment. The size is 
evaluated prior to any decoding. See 

dnslist(<query server>)

Does the sender’s IP address appear on a public 
blacklist server (RBL)? See 

reputation

What is the sender’s SenderBase Reputation 
Score? See 

no-reputation

Used to test if SenderBase Reputation Score is 
“None.” See 

dictionary-match(<dictionary

_name>)

Does the message body contain any of the 
regular expressions or terms in the content 
dictionary named dictionary_name? Does the 
pattern occur the minimum number of times you 
specified for the threshold value? See 

attachment-dictionary-match(

<dictionary_name>)

Does the attachment contain any of the regular 
expressions in the content dictionary named 
dictionary_name? Does the pattern occur the 
minimum number of times you specified for the 
threshold value? See 

subject-dictionary-match(<di

ctionary_name>)

Does the Subject header contain any of the 
regular expressions or terms in the content 
dictionary named dictionary name? See 

.