Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1212
 
9-25
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Rules
Note
This filter returns true for empty Subject and To headers, but it also returns true for missing headers. If 
the message does not contain the specified headers, the filter still returns true. 
Envelope Recipient Rule
The 
rcpt-to
 rule selects those messages where any Envelope Recipient matches the given regular 
expression. For example, the following filter drops all messages sent with an email address containing 
the string “scarface.”
Note
The regular expression for the 
rcpt-to
 rule is case insensitive.
Note
The 
rcpt-to
 rule is message-based. If a message has multiple recipients, only one recipient has to match 
the rule for the specified action to affect the message to all recipients. 
Envelope Recipient in Group Rule
The 
rcpt-to-group
 rule selects those messages where any Envelope Recipient is found to be a member 
of the LDAP group given. For example, the following filter drops all messages sent with an email address 
within the LDAP group “ExpiredAccounts.”
Note
The 
rcpt-to-group
 rule is message-based. If a message has multiple recipients, only one recipient has 
to match the rule for the specified action to affect the message to all recipients. 
scarfaceFilter:
   if (rcpt-to == 'scarface')
   {
        drop();
   }
expiredFilter:
   if (rcpt-to-group == 'ExpiredAccounts')
   {
        drop();
   }