Cisco IronPort AsyncOS 7.5 for Email Configuration Guide
Chapter6 Email Security Manager
Envelope Recipient. Does the Envelope Recipient, (i.e.
the Envelope To, <RCPT TO>) match a given pattern?
Matches LDAP group. Is the Envelope Recipient, (i.e.
the Envelope To, <RCPT TO>) in a given LDAP group?
Contains term in content dictionary. Does the envelope
recipient contain any of the regular expressions or terms
in the content dictionary named <dictionary name>?
To search for dictionary terms, the dictionary must already
have been created. See Content Dictionaries, page14-2.
Note: The Envelope Recipient rule is message-based. If a
message has multiple recipients, only one recipient has to
be found in a group for the specified action to affect the
message to all recipients.
Is the Envelope Sender (i.e., the Envelope From, <MAIL
FROM>) in a given LDAP group?
Did the message arrive via the named listener? The
listener name must be the name of a listener currently
configured on the system.
Was the message sent from a remote host that matches a
given IP address or IP block? The Remote IP rule tests to
see if the IP address of the host that sent that message
matches a certain pattern. The IP address pattern is
specified using the allowed hosts notation described in
Sender Group Syntax, page 5-27, except for the SBO,
SBRS, dnslist notations and the special keyword ALL.
What is the sender’s SenderBase Reputation Score? The
Reputation Score rule checks the SenderBase Reputation
Score against another value.
Content Filter Conditions (Continued)