01-06-2014 07:55 AM
Hi All,
My Companies email disclaimer has the word 'confidential' in it twice which triggers a Low event.
When a conversation goes back and forth - the number of instances if this word increases, and ultimately pushes the scoring up into Medium, high and Critical.
Does anyone know of a way to configure Ironport to ignore a given body of text?
Thanks All!
Stuart
01-06-2014 09:01 AM
Not exactly what you are looking for, but another approach would be not to add the disclaimer to messages that already contain it, replies and forwarded emails for example. You could do this by looking for a string in your disclaimer in the body text and only adding the disclaimer if that text is not there. There was another question about this late last year which has more details.
01-07-2014 08:26 AM
Stuart,
Here's what we do to get around the same problem. Create a CLI filter rule similar to this:
Don't add disclaimer if it already exist and bypass adding for specific addresses:
no_duplicate_disclaimer: if sendergroup == "RELAYLIST" {
if NOT
(mail-from-dictionary-match("Dictionary-NoDisclaimer", 1)) {
if NOT (only-body-contains("keyword", 1)) {
add-footer("Disclaimer");
}
}
}
The dictionary match contains a list of email addresses that we don't want the disclaimer added to. These are text notifications sent to phones.
We have been using this since day 1 with our Ironport devices and have not had any problems with it.
Doug
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide