Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1197
 
9-112
User Guide for AsyncOS 9.7 for Cisco Email Security Appliances
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Examples
Another Drop Spoofed Domain Filter
Summary: Anti domain spoof filter:
Detect Looping Filter
This filter is used to detect, stop, and determine what is causing, a mail loop. This filter can help 
determine a configuration issue on the Exchange server or elsewhere.
archive('domain_spoof');
drop ();
}
reject_domain_spoof: 
if (recv-listener == "MailListener") {
  insert-header("X-Group", "$Group");
  if ((mail-from == "@test\\.mycompany\\.com") AND (header("X-Group") != "RELAYLIST")) {
    notify("me@here.com");
    drop();
    strip-header("X-Group");
}
External_Loop_Count:
if (header("X-ExtLoop1")) {
  if (header("X-ExtLoopCount2")) {
    if (header("X-ExtLoopCount3")) {
      if (header("X-ExtLoopCount4")) {
        if (header("X-ExtLoopCount5")) {
          if (header("X-ExtLoopCount6")) {
            if (header("X-ExtLoopCount7")) {
              if (header("X-ExtLoopCount8")) {
                if (header("X-ExtLoopCount9")) {
                   notify ('joe@example.com');
                   drop();