Creating a Pattern Filter

Creating a Pattern Filter

Follow the steps below to create a new pattern filter in Z Services Cloud.

  1. Log into Z Services cloud as a Global Admin.

  2. Go to Filter Rules > Pattern Filtering and the Pattern Filters window displays:

    ST-pattern-filters.jpg

    You can use the filter bar at the top of the Pattern Filter list to view only one or a combination of filter types:

    ST-pattern-filters-filter.jpg

  3. Click Add... and the Pattern window displays:


  4. Using the table below as reference, complete the fields in the Pattern window.

  5. Click Save to save your pattern, or Cancel to discard it.

Note

If you want to create a Meta Pattern Filter, you must first create individual pattern filters using the Test Mode rule type that you can then combine to create a Meta pattern filter.
Pattern Settings

Field

Description




Filter Expression:

This is how the pattern filter will be evaluated. All expressions are case-insensitive.


Starts with

The body or header must start with this value.


Ends with

The body or header must end with this value.


Contains

The body or header must contain this value.


Equals

The body or header must be exactly equal to this value.


Matches any word in

Enter a list of words separated by a comma. If any word on the list is in the body or header, the pattern filter will trigger.


Matches regular expression

Enter a regular expression to match against the body or header. See https://www.regular-expressions.info/ for information on using regular expression.


Matches multiple rules

Select this option to match multiple rules you have already created using the Test Mode rule type. See Creating a Meta Rule Pattern Filter.


Apply to Body:

Check for this test to trigger on the body of an email.







Apply to Headers:

Check this to enter a header (one per line) for the pattern filter to trigger on. Leave empty to trigger on any header. 

Enter one header per line. Syntax is either From or From:.

Any email header can be entered here, e.g. To, From, Cc, Subject, ALL, X-Header-From-Another-Box, Received. See this wiki for a list of common headers.

Special header rules are as follows:


EnvelopeFrom

Triggers on the Envelope MAIL FROM instead of the From header.


ToCc

Triggers on both the To and Cc headers.


ALL

The rule will trigger on any header.


There are also three options available to append to a header:


:raw

Append to the end of a header to prevent decoding of quoted-printable or base64 encoded headers.


:addr

Append to the end of a From or To header to make the rule only trigger on the address in the header.


:name

Append to the end of a From or To header to make the rule only trigger on the name in the header.


Rule Type:

Determines how the test should be scored/treated.


Test Mode

Test Mode does not affect the score of the mail, it is used to create meta pattern filters with "Matches multiple rules".


Hard Blacklist

Adds a score of 100 to the email, causing it to be blacklisted.


Hard Whitelist

Subtracts a score of 100 from an email, causing it to be whitelisted.


Soft Blacklist

Adds a configurable positive score, between 0.01 and 99.99. Default is 5.


Soft Whitelist

Subtracts a configurable negative score, between -0.01 and -99.99. Default is -5.


Comment:

Add additional notes for the rule.

Disable Rule:

Check to prevent a rule from triggering without deleting the rule.


    • Related Articles

    • Z Services Pattern Filtering

      In Z Services cloud, pattern filters allow you to block or accept emails based on filter rules that can be applied to an email. Pattern filtering is generally not needed, but occasionally it may be necessary to define filters that block or accept ...

    • Creating a Meta Rule Pattern Filter

      A Meta Rule pattern filter allows you to create a filter that combines individual pattern filters that have already been created using the Test Mode rule type.  Therefore, before creating a Meta Rule pattern filter, you must firstly create the ...

    • Attachment Filtering

      The Attachment filter facility can reject or quarantine mails which contain certain types of files based on their extensions (e.g. executables) and/or their MIME types. If any mail part matches, the whole mail is rejected. Attachment Filtering ...

    • Filter Rules

      Go to the Filter Rules tab to: specify specific sender email addresses or domain names you want to blacklist or whitelist for your domain or domain group. set anti-spoofing settings for your domain or domain group. The Domain Group Administrator can ...

    • Filtering Mail History

      Go to Reporting > History > Mail Filters to filter the emails in your mail history. Filter using the follow criteria: Message Flow: view email that was sent (Outbound ), received (Inbound ) or both (Inbound and Outbound). Recipient email address: ...