Edit a condition in a Content Filter on IronPort CLI

[Victor Romero]

Hi friends, I have been following a procedure to edit a contente filter in a rule from CLI on IronPort, but I don't Know how to put the regular expression to add the new mail inside my denial condition.

xxxxx> policyconfig

Would you like to configure Incoming or Outgoing Mail Policies?

1. Incoming

2. Outgoing

[1]> 1

Choose the operation you want to perform:

- NEW - Create a new policy

- EDIT - Edit an existing policy

- DELETE - Remove a policy

- PRINT - Print all policies

- SEARCH - Search for a policy by member

- MOVE - Move the position of a policy

- FILTERS - Edit content filters

- CLEAR - Clear all policies

[]> FILTERS

Choose the operation you want to perform:
- NEW - Create a new filter
- EDIT - Edit an existing filter
- DELETE - Delete a filter
- PRINT - Print all filters
- MOVE - Reorder a filter
- RENAME - Rename a filter
[]> EDIT

Enter the filter to edit:
[]> 4 -----------------------------------> At this point, I choose the filter i want to edit

Filter Name:  Name_Rule_Filter_from_myCompany

Conditions:
mail-from !=
"@gggg.com.pe|@rrrrrr.com.pe|@mmmm.com.pe|@ppppp.cl"

Choose the operation you want to perform:
- RENAME - Rename this filter
- DESC - Edit filter description
- ADD - Add condition or action
- DELETE - Delete condition or action
- MOVE - Reorder the conditions or actions
[]> ADD

1. Condition
2. Action
[1]> 1--------------> here I don´t know how to do to add a new domain inside the condition "mail-from !="

I mean that i want the new list to be -->

mail-from !=

"@gggg.com.pe|@rrrrrr.com.pe|@mmmm.com.pe|@ppppp.cl|@jjjjjj.com.pe"....I have used th option ADD but this option just put a new condition

Suggest..please

[Doug Maxfield]

Victor,

Why can't you edit directly from the GUI?

Can you just delete the condition and readd the one you want. 

Doug

[Victor Romero]

Hi Doug . I know, but the browser is extremely slow. On the other side, the command line is very very fast for whatever you want . What i do in 10', I can do it in seconds on CLI

If you try, you'll see i have reason , but i need what I asked

I hope your answer

[Doug Maxfield]

Instead of trying to edit, can you delete the condition and readd it? 

[Victor Romero]

hi doug, what you mean with DEL. In fact there's an option to DEL the condition. I understand that after deleting the condition: mail-from !="@gggg.com.pe|@rrrrrr.com.pe|@mmmm.com.pe|@ppppp.cl", I'd have to copy and paste the new condition with the domain I want to include in the option ADD Condition.I'd have

mail-from !="@gggg.com.pe|@rrrrrr.com.pe|@mmmm.com.pe|@ppppp.cl|@egehg.org. Being |@egehg.org the new domain

regards