IronPort Content Filter (If Not Statement)

[anotthak8]

Is it possible to create a if not statement in the conditions of a content filter within the IronPorts?

For example, if message body or attachment does not contain "009", continue action.

Thank you in advance!

[exMSW4319 · Accepted solution]

If the rule you are hoping to enforce can go last in the list of rules, one way to do it is to have two new rules at the end:

last-but-one: if message body contains "009" skip-filters

last-rule: if true take action

If you don't put any conditions in then a rule always takes effect, hence the "if true".

Another way might be to have a rule put a header in the message if the condition is true, and then later check to see if the header does not contain the flagged value. However, I haven't tried that myself and the manual doesn't make it plain how the Other Header rule would react if the header in question simply isn't present.

[Mathew Huynh · Accepted solution]

Hello Anotthak,

From content filters it would not allow the "if not" rule.

From the message filters though you may be able to meet this requirement with

If NOT rule

Or If and Else syntax

Regards,

Matthew