cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Cisco Secure Email Support Community

Product Support Talos Support Cisco Support Reference + Current Release
Gateway Reputation Lookup Open a support case Secure Email Guided Setup
Gateway: 14.0.1-033
Cloud Gateway Email Status Portal Support & Downloads docs.ces.cisco.com
Email and Web Manager: 14.0.0-418
Email and Web Manager Web & Email Reputation Worldwide Contacts Product Naming Quick Reference
Reporting Plug-in: 1.1.0.136
Encryption Bug Search
Encryption Plug-in: 1.2.1.167
Cloud Mailbox Notification Service
Outlook Add-in(s): More info

289
Views
5
Helpful
0
Replies
Vinay babu
Beginner

Message filter isn't working.

Does the below syntax is correct? My requirement is that sending domain is example.com and DMARC authentication passes and the email sent one of the 4 IPs. Can I use | between the IPs, instead of using OR condition ? Any ideas. Thanks in advance.

 

Message_filter: if ((header("from") == "@example\\.com") AND (header("Authentication-Results") == "dmarc\\=pass")

{

(remote-ip == '16.13.28.6') OR ((remote-ip == '94.6.5.19') OR ((remote-ip == '98.129.16.1') OR (remote-ip == '11.78.1.3')))
{
log-entry("$filtername");
}

0 REPLIES 0