Руководство Пользователя для Cisco Cisco Email Security Appliance C170

$envelopefrom

or

$envelopesender

Replaced by the Envelope Sender (Envelope 
From, <MAIL FROM>) of the message.

$EnvelopeRecipients

Replaced by all Envelope Recipients 
(Envelope To, <RCPT TO>) of the message. 

$filenames

Replaced with a comma-separated list of the 
message’s attachments’ filenames.

$filesizes

Replaced with a comma-separated list of the 
message’s attachment’s file sizes.

$filetypes

Replaced with a comma-separated list of the 
message's attachments' file types.

$FilterName

Replaced by the name of the filter being 
processed. 

$GMTimeStamp

Replaced by the current time and date, as 
would be found in the Received: line of an 
email message, using GMT.

$Group

Replaced by the name of the sender group 
the sender matched on when injecting the 
message. If the sender group had no name, 
the string “

>Unknown<

” is inserted.

$Policy

Replaced by the name of the HAT policy 
applied to the sender when injecting the 
message. If no predefined policy name was 
used, the string “

>Unknown<

” is inserted.

$MatchedContent

Replaced by the value (or values) that 
triggered a content-scanning filter. Matched 
content can be a content dictionary match, a 
smart identifier, or a match to a regular 
expression.

$Header['string']

Replaced by the value of the quoted header, 
if the original message contains a matching 
header. Note that double quotes may also be 
used.

$Hostname

Replaced by the hostname of the Email 
Security appliance.

$MID

Replaced by the Message ID, or “MID” used 
internally to identify the message. Not to be 
confused with the RFC822 “Message-Id” 
value (use $Header to retrieve that).

$RecvListener

Replaced by the nickname of the listener 
that received the message.

$RecvInt

Replaced by the nickname of the interface 
that received the message.