Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

The following filter checks the workqueue count, and skips spamcheck if the 
queue is greater than the specified number.

 wqfull: 

if (workqueue-count > 1000) {

 skip-spamcheck();

}

For more information on SPF/SIDF, see 

If your IronPort appliance uses SMTP authentication to send messages, the 

smtp-auth-id-matches

 

(

<target> [, <sieve-char>]

)

rule can check a message’s 

headers and Envelope Sender against the sender’s SMTP authenticated user ID to 
identify outgoing messages with spoofed headers. This filter allows the system to 
quarantine or block potentially spoofed messages.

The 

smtp-auth-id-matches 

rule compares the SMTP authenticated ID against 

the following targets: 

*EnvelopeFrom

Compares the address of the 
Envelope Sender (also known as 
MAIL FROM) in the SMTP 
conversation

*FromAddress

Compares the addresses parsed 
out of the From header. Since 
multiple addresses are permitted 
in the From: header, only one has 
to match.

*Sender

Compares the address specified 
in the Sender header.