Video Screencast Help
Scheduled Maintenance: Symantec Connect is scheduled to be down Saturday, April 19 from 10am to 2pm Pacific Standard Time (GMT: 5pm to 9pm) for server migration and upgrade.
Please accept our apologies in advance for any inconvenience this might cause.

Using wildcard for Custom filtering

Created: 30 Jan 2013 • Updated: 18 Feb 2013 | 2 comments
This issue has been solved. See solution.

Is there anyway that I can use a wildcard for the email address in the Default Filter Rules.xml?  For example,

<EA>noreply.*@Domain.local</EA>.

It didn't work when I tried it.  Is there any other way to include one statement instead of adding like ~20 email address per lines?

Discussion Filed Under:

Comments 2 CommentsJump to latest comment

Rob.Wilcox's picture

You can't do that..  but you could create a DL, and then do this:

 

 

<RECIPIENTS>
    <DL>ALL SALES</DL>
</RECIPIENTS>

would match any message sent to any member of the distribution list, ALL SALES.

For this matching to work, ensure that expansion of distribution lists is enabled in the Administration Console (in the "Archiving General" settings on the "Advanced" tab of the Exchange journal policy). Also, the distribution list must not be included in the Agents registry setting, BlacklistedDLs.

You can specify distribution lists and groups using the <EA>, <DISPN> and <DOMAIN> message attributes. However, only messages with the specified string will match; no attempt is made to compare message recipients with individual members in the specified distribution list.

For example, the members of an Exchange Server distribution list called ALL SALES are:

john.doe@ourcompany.com
ken.brookes@ourcompany.com
len.scott@ourcompany.com
In the ruleset file, the following message attribute filter is specified in a rule:

<RECIPIENTS>
    <DISPN>ALL SALES</DISPN>
</RECIPIENTS>

If a message has the display name ALL SALES in the recipient list, the message will satisfy the attribute filter above. If the message does not have the display name ALL SALES in the recipient list, it will not match the attribute filter, even if the recipient list does include the email address of a member of the distribution list. 

 

SOLUTION
jdewing's picture

Would it be easier to configure Outlook Rule for Journal mailbox to delete any alert notification instead of using Selective Journaling?