Regular Expressions In Black Or White List Entries; Email Security Technical Reference - ZyXEL Communications ZyWall ATP series User Manual

Table 226 Configuration > Security Service > Email Security > Black/White List > Black/White List > Add
LABEL
Mail Subject
Keyword
Sender or Mail Relay
IP Address
Sender or Mail Relay
IPv6 Address
Netmask
Sender E-Mail
Address
Mail Header Field
Name
Field Value
Keyword
OK
Cancel

32.4.2 Regular Expressions in Black or White List Entries

The following applies for a black or white list entry based on an email subject, email address, or email
header value.
• Use a question mark (?) to let a single character vary. For example, use "a?c" (without the quotation
marks) to specify abc, acc and so on.
• You can also use a wildcard (*). For example, if you configure *def.com, any email address that ends
in def.com matches. So "mail.def.com" matches.
• The wildcard can be anywhere in the text string and you can use more than one wildcard. You
cannot use two wildcards side by side, there must be other characters between them.
• The Zyxel Device checks the first header with the name you specified in the entry. So if the email has
more than one "Received" header, the Zyxel Device checks the first one.

32.5 Email Security Technical Reference

Here is more detailed email security information.
Chapter 32 Email Security
DESCRIPTION
This field displays when you select the Subject type. Enter up to 63 ASCII characters of text to
check for in email headers. Spaces are not allowed, although you could substitute a
question mark (?). See Section 32.4.2 on page 563
This field displays when you select the IP Address type. Enter an IP address in dotted decimal
notation.
This field displays when you select the IPv6 Address type. Enter an IPv6 address with prefix.
This field displays when you select the IP type. Enter the subnet mask here, if applicable.
This field displays when you select the E-Mail type. Enter a keyword (up to 63 ASCII
characters). See Section 32.4.2 on page 563
This field displays when you select the Mail Header type.
Type the name part of an email header (the part that comes before the colon). Use up to 63
ASCII characters.
For example, if you want the entry to check the "Received:" header for a specific mail
server's domain, enter "Received" here.
This field displays when you select the Mail Header type.
Type the value part of an email header (the part that comes after the colon). Use up to 63
ASCII characters.
For example, if you want the entry to check the "Received:" header for a specific mail
server's domain, enter the mail server's domain here.
See Section 32.4.2 on page 563
Click OK to save your changes.
Click Cancel to exit this screen without saving your changes.
ZyWALL ATP Series User's Guide
563
for more details.
for more details.
for more details.