ACL objects for Artica Milter allow you to fine-tune your SMTP rules to filter messages.
A rule fires only when all of its linked objects match the message (logical AND). Each object can be negated ("does not match"), which lets you express exceptions such as "all recipients except this domain". To combine alternatives (logical OR), create several rules.
Important: a rule without any object never evaluates — the rules list displays "Please, specify at least one object" until you link at least one object (use the All object to match every message).
¶ ACLS objects
- All:
Matches anything
- Source IP address:
Corresponds to the IP address of a 1.2.3.4 connection or a network by its CIDR notation ( 1.2.3.0/24).
- Recipient:
The aim here is to detect a signature on the whole recipient addresses in messages.
The records can be a regular expression or a simple search with the "*" jocker character.
- Sender Address:
Detects a signature in the message sender's address.
The records can be a regular expression or a simple search with the "*" jocker character.
- Sender Active Directory account
Checks that the user's SMTP email address is stored in the user's Active Directory account
- SMTP Header:
Detects presence or value in SMTP header fields.
- Active Directory group sender:
Verify if the sender is a member of an ActiveDirectory Group.
- Active Directory group recipients
This acls object lets you add Active Directory groups. If all recipients are part of a listed Active Directory group, it will return the value TRUE.
- Attachments:
This object will search the file names of attachments and also attachments in rar,tar,zip compressed format.
- URLs in messages
This object searches Web links in the body text or HTML of messages.
- Artica Deny reputations
Artica deny reputation is a service offered by Artica Tech to check email senders IP addresses reputation.
- SPF result:
Matches the SPF evaluation of the sending server (pass, fail, softfail, none...). Lookups are cached and time-bounded: on a DNS timeout the object simply does not match — it never blocks mail by itself.
- DMARC result:
Matches the sender domain's DMARC evaluation. Combine it with the reject action to enforce policy, or with the greylisting bypass to fast-track authenticated senders.
- Spamassassin Connector:
Scores the message with the local SpamAssassin daemon; the object matches when the score reaches the configured threshold (default 5). If SpamAssassin is unreachable the object does not match — it never blocks mail by itself.