Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 568
6-53
Cisco IronPort AsyncOS 7.5 for Email Advanced Configuration Guide
OL-25137-01
Chapter 6      Using Message Filters to Enforce Email Policies
SPF-Passed Rule
The following example shows an 
spf-passed
 rule used to quarantine emails that 
are not marked as spf-passed:
Note
Unlike the 
spf-status 
rule, the 
spf-passed
 rule reduces the SPF/SIDF 
verification values to a simple Boolean. The following verification results are 
treated as not passed in the 
spf-passed
 rule: None, Neutral, Softfail, TempError, 
PermError, and Fail. To perform actions on messages based on more granular 
results, use the 
spf-status
 rule. 
Workqueue-count Rule
The 
workqueue-count
 rule checks the workqueue-count against a specified value. 
All the comparison operators are allowed, such as 
>
==
<=,
 and so forth. 
         # permanent error - stamp message subject
         strip-header("Subject");
         insert-header("Subject", "[POTENTIAL PHISHING] $Subject"); }
.
quarantine-spf-unauthorized-mail:
    if (not spf-passed) {
        quarantine("Policy");
    }