Custom content

Administrator Help | TRITON AP-EMAIL | Version 8.2.x

Use a custom content filter to allow message analysis based on conditions you configure. Add or modify a custom content filter on the Main > Policy Management > Filters > Add (or Edit) Filter page. The Email module does not provide a default custom content filter.

You can choose to trigger your filter on the match of a single condition or the match of all defined conditions by selecting 1 of the following options in the Filter Properties section:

Match all conditions

Match any condition

Specify the conditions of your custom filter from a selection of criteria, including message attributes and operators, by clicking Add in the Filter Conditions box. In the Add Condition dialog box, select from among the following message attributes and operators to configure your custom filter (all message attributes except DKIM verification include a user-configurable Filtering criteria entry field):


Message Attribute	Operator Options	Additional Options
Sender IP address	Is, Is not	None
Envelope sender	Contains, Does not contain, Matches regular expression, Does not match regular expression	None
Envelope recipient	Contains, Does not contain, Matches regular expression, Does not match regular expression	None
Number of envelope recipients	Equals, Does not equal, Is less than, Is greater than	None
From field address	Contains, Does not contain, Matches regular expression, Does not match regular expression	None
To field address	Contains, Does not contain, Matches regular expression, Does not match regular expression	None
Cc field address	Contains, Does not contain, Matches regular expression, Does not match regular expression	None
Message subject	Contains, Does not contain, Matches regular expression, Does not match regular expression	Match case
Message header: partial	Contains, Does not contain, Matches regular expression, Does not match regular expression	Message attribute text (user configured), Match case
Message header: complete	Contains, Does not contain, Matches regular expression, Does not match regular expression	Match case
Message body text	Contains, Does not contain, Matches regular expression, Does not match regular expression	Match case
Message size	Equals, Does not equal, Is less than, Is greater than	Filtering criteria is in KB
DKIM verification result	DKIM verification is successful, DKIM verification failed	None
True Source IP	Is, Is not	None
Digital Fingerprinting analysis result	Is spam, Is clean	None
LexiRules analysis result	Is spam, Is clean	None
Heuristics analysis result	Equals, Is less than, Is greater than	Enter a floating-point value from 0 - 25. For example, the value 6 corresponds to a heuristics analysis level of Medium.
Email hybrid service analysis result (available only when your subscription includes the Email Hybrid Module)	Equals, Is less than, Is greater than	Enter a floating-point value from 0 - 25. For example, the email hybrid service uses a threshold value of 6 to designate a message as spam.

You can change the order of your filter conditions by marking the check box next to the filter in the Filter Conditions list and clicking Move Up or Move Down.

Delete a set of filter conditions from the list by marking the check box next to the filter and clicking Remove.


	Note You can use the Add (or Edit) Rule page to add a rule for a custom content filter. You must have already defined a custom content filter before you attempt to add a custom content rule. See Adding a rule for information.