Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

In the following example, a new message filter using the 

dictionary-match()

 rule is created to blind 

carbon copy the administrator when the appliance scans a message that contains any words within the 
dictionary named “secret_words” (created in the previous example). Note that because of the settings, 
only messages that contain the whole word “

codename

” matching the case exactly will evaluate to true 

for this filter. 

In this example, we send the message to the Policy quarantine:

bcc_codenames:  

   if (dictionary-match ('secret_words')) 

       {

       bcc('administrator@example.com');

       }

quarantine_codenames:  

   if (dictionary-match ('secret_words')) 

       {

       quarantine('Policy');

       }

Wildcard

*

Anchors

Ends with: foo

$

Begins with: 

^

foo

Email address
(Do not escape the period)

, 

 (ends with)

Subject

(keep in mind when using the 

^

 anchor in email subjects that 

subjects are often prepended with “RE:” or “FW:” and the like)