IronPort - advanced configuration guide

6-22
Note The regular expression for the rcpt-to rule is case insensitive.
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Chapter 6 Using Message Filters to Enforce Email Policies
Note The rcpt-to rule is message-based. If a message has multiple recipients, only one recipient has to match
the rule for the specified action to affect the message to all recipients.
Envelope Recipient in Group Rule
Envelope Sender Rule
scarfaceFilter:
if (rcpt-to == 'scarface')
{
}
drop();
The rcpt-to-group rule selects those messages where any Envelope Recipient is found to be a member
of the LDAP group given. For example, the following filter drops all messages sent with an email address
within the LDAP group “ExpiredAccounts.”
expiredFilter:
if (rcpt-to-group == 'ExpiredAccounts')
{
}
drop();
Note The rcpt-to-group rule is message-based. If a message has multiple recipients, only one recipient has
to match the rule for the specified action to affect the message to all recipients.
The mail-from rule selects those messages where the Envelope Sender matches the given regular
expression. For example, the following filter immediately delivers any message sent by
admin@yourdomain.com.
OL-25137-01