cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Cisco Secure Email Support Community

Product Support Talos Support Cisco Support Reference + Current Release
Gateway Reputation Lookup Open a support case Secure Email Guided Setup
Gateway: 14.0.1-033
Cloud Gateway Email Status Portal Support & Downloads docs.ces.cisco.com
Email and Web Manager: 14.0.0-418
Email and Web Manager Web & Email Reputation Worldwide Contacts Product Naming Quick Reference
Reporting Plug-in: 1.1.0.136
Encryption Bug Search
Encryption Plug-in: 1.2.1.167
Cloud Mailbox Notification Service
Outlook Add-in(s): More info

317
Views
15
Helpful
3
Replies
Vinay babu
Beginner

Message filter syntax question (header-dictionary-match)

I would like to know does the below message filter looks for Display email address or Envelope email address ? 

I have added few email addresses in the Whitelist dictionary.

 

Whitelist: if (header-dictionary-match("Whitelist","From", 1))
{
skip-bulkcheck();
}

1 ACCEPTED SOLUTION

Accepted Solutions
charella
Cisco Employee

Vinay babu

The from indicates the friendly “From” or outlook client from value.

Whitelist: if (header-dictionary-match("Whitelist","From", 1))

The envelope sender|responsible sender|mail-from, as determined within the message tracking would look like this: (mail-from-dictionary-match("skipmacro", 1))

Thank you,
Chris A.

View solution in original post

3 REPLIES 3
Ken Stieers
Advocate

That is the display name header.

charella
Cisco Employee

Vinay babu

The from indicates the friendly “From” or outlook client from value.

Whitelist: if (header-dictionary-match("Whitelist","From", 1))

The envelope sender|responsible sender|mail-from, as determined within the message tracking would look like this: (mail-from-dictionary-match("skipmacro", 1))

Thank you,
Chris A.

View solution in original post

Vinay babu
Beginner

Many thanks Ken and Chris.