Introduction
This document describes how to exclude words when using dictionary Message Filters.
On the Cisco Email Security Appliance (ESA), when using a dictionary match filter, you may need to exclude certain phrases that contain words in the dictionary.
The solution is to set up a message filter as follows:
if (dictionary-match("dictionary1") AND (not(dictionary-match("exclude_dictionary2"
)))) {quarantine('Policy');
}
The effect of this message filter is that it will catch any words that are listed in 'dictionary1' but it will deliver any message that contains words in 'exclude_dictionary2'.
The only drawback to this is if a message contains words in both dictionaries, then the message will get delivered.
Related Information