Preview Tool

Cisco Bug: CSCzv20587 - $MatchedContent is not working for rcpt-to-dictionary or mail-from-d...

Last Modified

Oct 19, 2020

Products (1)

  • Cisco IronPort Email Security Appliance Software

Known Affected Releases

10.0.2-020 6.1.0-000 6.1.0-beta1-093 6.4.0-000 6.5.0-000 7.0.0-000 7.5.0-000 8.0.0-000

Description (partial)

When using the action variable $MatchedContent within a filter action to display the header content which triggered the filter rule, the corresponding matched content is not displayed. 

Example 1: when using filter action"log-entry", the matched content will not be inserted into the mail_logs:
Tue May 10 08:15:42 2014 Info: MID 123 Custom Log Entry:

Example 2: when using a quarantine action, the matched content will not be visible when viewing the message details in the system quarantine.

The matched content feature was intended to work with filters that involve the message body or attachments, but it does not work for matches against any header, for example when using rcpt-to-dictionary-match, mail-from-dictionary-match, subject-dictionary-match, other header-dictionary-match rules as well as the rcpt-to, mail-from, subject in the filter rule.
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.