cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1268
Views
5
Helpful
1
Replies

Content-Filter Profanity

RomarRoca00954
Level 1
Level 1

Good Day gents,

 

Can someone help me clarify the settings for blocking with words from the profanity and sexual_content

Here is the config:

 

 

Order Condition Rule Delete

1Message Bodybody-dictionary-match("Sexual_Content", 1)
 

 

 

 

2
Message Bodybody-dictionary-match("Profanity", 1)

 

Order Action Rule Delete

1Quarantinequarantine("INAPPROPRIATE_CONTENT")
 

 

 

 

2
Add Log Entrylog-entry("INAPPRORIATE WORD")
 

 

 

 

3
Add/Edit Headeredit-header-text("Subject", "(.*)", "[INAPPROPRIATE-WORD]\\1")

 

Advanced Matching:

Match whole words

 

Both match whole words were also check and all words are weight value of "1" also the threshold is 1, now while reviewing the logs, one email was quarantined because of the link

"abcd.dickbucket.com/q/some_subdirectory_here" >> not actual link but the construction is the same

Match content is the word "d i c k" which confused me since it's not a match whole word.

 

Maybe I'm not understanding something

 

Thanks in Advance,

R

 

1 Reply 1

Libin Varghese
Cisco Employee
Cisco Employee

Testing in lab with the mentioned partial URL in email body and dictionary containing the d word.

 

With match whole words unchecked -> Email was quarantined

With match whole words checked -> Email was delivered

 

I tested it on Async OS 13.0, however expect this to be the behavior on newer releases too.

If you are seeing a deviation from this it might need to be investigated and tested further, could you put in a TAC case to have someone review the sample you are working with.

 

Regards,

Libin

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: