cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1474
Views
0
Helpful
1
Replies

Filters Ironport "rcpt-to =="

sgarayes
Level 1
Level 1

Hi guys,

 

It is necessary for a certain destination to only allow the entry of messages that come from a limited list of senders.

 

Contact_example: if (rcpt-to == "(? I) contact @ example \\. Net") AND (mail-from-dictionary-match ("example_Dict", 1)) {

                 skip-filters ();

             } else {

                 quarantine ("Policy");

}

 

- If the recipient is only the box contact@example.net the filter work


- If it contains two or more recipients in any of the target fields (TO, CC) the mail goes even when the origin is NOT in the example_Dict dictionary.

 

I can not find the sentence indicating that it only contains the  recipient.

 

someone could support me, thank you very much for your support.

1 Reply 1

Libin Varghese
Cisco Employee
Cisco Employee

The rcpt-count filter condition can help validate if there is a single recipient in the email or multiple.

 

if (rcpt-count > 1)

 

Filters cannot split emails based on recipients so it would be expected for the filter to match even when a single recipient matches the condition.