User Guide

11-8
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 11 Content Filters
How Content Filters Work
Envelope Sender
Envelope Sender. Does the Envelope Sender (i.e., the Envelope From,
<MAIL FROM>) match a given pattern?
Matches LDAP group. Is the Envelope Sender, i.e., the Envelope From,
<MAIL FROM>) in a given LDAP group?
Contains term in content dictionary. Does the envelope sender contain
any of the regular expressions or terms in the content dictionary named
<dictionary name>?
To search for dictionary terms, the dictionary must already have been
created. See Content Dictionaries, page 21-2.
Note The dictionary-related conditions are only available if you have
one or more dictionaries enabled. For information about creating
content dictionaries, see Content Dictionaries, page 21-2.
Envelope Recipient
Envelope Recipient. Does the Envelope Recipient, (i.e. the Envelope To,
<RCPT TO>) match a given pattern?
Matches LDAP group. Is the Envelope Recipient, (i.e. the Envelope To,
<RCPT TO>) in a given LDAP group?
Contains term in content dictionary. Does the envelope recipient contain
any of the regular expressions or terms in the content dictionary named
<dictionary name>?
To search for dictionary terms, the dictionary must already have been
created. See Content Dictionaries, page 21-2.
Note The dictionary-related conditions are only available if you have
one or more dictionaries enabled. For information about creating
content dictionaries, see Content Dictionaries, page 21-2.
Note: The Envelope Recipient rule is message-based. If a message has
multiple recipients, only one recipient has to be found in a group for the
specified action to affect the message to all recipients.
Is the Envelope Sender (i.e., the Envelope From, <MAIL FROM>) in a
given LDAP group?
Receiving Listener
Did the message arrive via the named listener? The listener name must be
the name of a listener currently configured on the system.
Table 11-1 Content Filter Conditions (continued)
Condition Description