cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
127
Views
1
Helpful
1
Replies

How to combine White List Entry - Server AND Mailadress

cyberurmel
Level 1
Level 1

Hi all, 

i wonder if (and if yes how) its possible to combine a WhiteList Entry Server AND Mailadress. 

For example - we want to be sure that some mail adresses from a specific Server are whitelisted. Other Mails from this Server should be blocked and the mailadress also blocked when coming not from the Server which is whitelisted.

Thank you for help 

ps. i found currently only whitelist Server or Whitelist Mailadress but no combination 

 

1 Accepted Solution

Accepted Solutions

The only place to do both at the same time is with a message filter in an nested if... and you'll need 2 filters for your requirement...
Create a dictionary with the list of addresses that are allowed. ("AllowedAddresses")
Then create two message filters.

Filter1:
If remote-ip == 'x.x.x.x' {
If (mail-from-dictionary-match ('AllowedAddresses') ){
Quarantine('Policy');
}
Else
{
Drop();
}
}

Filter2:
If (mail-from-dictionary-match ('AllowedAddresses')) {
if remote-ip != 'x.x.x.x' {
quarantine('Policy');
}
}



There may be a cleaner way to do this, but this should work without quarantining all of your mail...
If this works the way you want, and you don't want to bother with the quarantine, you can change the those to drop();



________________________________

This email is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law. If the reader of this email is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited.
If you have received this communication in error, please immediately notify us by telephone and return the original message to us at the listed email address.
Thank You.

View solution in original post

1 Reply 1

The only place to do both at the same time is with a message filter in an nested if... and you'll need 2 filters for your requirement...
Create a dictionary with the list of addresses that are allowed. ("AllowedAddresses")
Then create two message filters.

Filter1:
If remote-ip == 'x.x.x.x' {
If (mail-from-dictionary-match ('AllowedAddresses') ){
Quarantine('Policy');
}
Else
{
Drop();
}
}

Filter2:
If (mail-from-dictionary-match ('AllowedAddresses')) {
if remote-ip != 'x.x.x.x' {
quarantine('Policy');
}
}



There may be a cleaner way to do this, but this should work without quarantining all of your mail...
If this works the way you want, and you don't want to bother with the quarantine, you can change the those to drop();



________________________________

This email is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law. If the reader of this email is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited.
If you have received this communication in error, please immediately notify us by telephone and return the original message to us at the listed email address.
Thank You.