IronPort - advanced configuration guide

Alter SRBS Filter
6-100
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Chapter 6 Using Message Filters to Enforce Email Policies
Alter the (SenderBase Reputation Score) SBRS threshold for certain domains:
mod_sbrs:
Filename Regex Filter
This filter specifies a range of size for the body of the message, and looks for an attachment that matches
the regular expression (this matches files named “readme.zip”, “readme.exe”, “attach.exe”, and so
forth.):
Show SenderBase Reputation Score in Header Filter
Insert Policy into Header Filter
if ( (rcpt-count == 1) AND (rcpt-to == "@domain\\.com$") AND (reputation < -2) ) {
}
drop ();
filename_filter:
if ((body-size >= 9k) AND (body-size