IronPort - advanced configuration guide

Chapter 6 Using Message Filters to Enforce Email Policies
Subject Rule
OL-25137-01
The subject rule selects those messages where the value of the subject header matches the given regular
expression.
For example, the following filter discards all messages with subjects that start with the phrase Make
Money...
You can specify non-ASCII characters to search for in the value of the header.
When working with headers, remember that the current value of the header includes changes made
during processing (such as with filter actions that add, remove, or modify message headings). See
Message Header Rules and Evaluation, page 6-4 for more information.
The following filter returns true if the headers are empty or if the headers are missing from the message:
Note This filter returns true for empty Subject and To headers, but it also returns true for missing headers. If
the message does not contain the specified headers, the filter still returns true.
Envelope Recipient Rule
}
scamFilter:
drop();
if (subject == '^Make Money')
{
}
drop();
EmptySubject_To_filter:
if (header('Subject') != ".") OR
}
(header('To') != ".") {
drop();
The rcpt-to rule selects those messages where any Envelope Recipient matches the given regular
expression. For example, the following filter drops all messages sent with an email address containing
the string “scarface.”
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
6-21