IronPort - advanced configuration guide

Chapter 6 Using Message Filters to Enforce Email Policies
OL-25137-01
Note The regular expression for the mail-from rule is case insensitive. Note that the period character is
escaped in the following example.
Envelope Sender in Group Rule
Sender Group Rule
kremFilter:
if (mail-from == '^admin@yourdomain\\.com$')
{
skip_filters();
}
The mail-from-group rule selects those messages where the Envelope Sender is found to be in an LDAP
group given on the right side of the operator (or, in the case of inequality, where the sender’s email
address is not in the given LDAP group). For example, the following filter immediately delivers any
message sent by someone whose email address is in the LDAP group “KnownSenders.”
SenderLDAPGroupFilter:
if (mail-from-group == 'KnownSenders')
{
skip_filters();
}
The sendergroup message filter selects a message based on which sender group was matched in a
listener's Host Access Table (HAT). This rule uses '==' (for matching) or '!=' (for not matching) to test
for matching a given regular expression (the right side of the expression). For example, the following
message filter rule evaluates to true if the sender group of the message matches the regular expression
Internal, and, if so, sends the message to an alternate mail host.
senderGroupFilter:
if (sendergroup == "Internal")
{
}
alt-mailhost("[172.17.0.1]");
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
6-23