Enterprise Vault™ Setting up Exchange Server Archiving

Example ruleset file for custom filtering

The following shows the supplied example ruleset file, Default Filter Rules.xml (a renamed copy of Example Filter Rules.xml). If the registry keys have been set to enable custom filtering, this file will be used for filtering any archiving targets that do not have a named ruleset file.

<?xml version="1.0"?>
<RULE_SET xmlns="x-schema:ruleset schema.xdr">

<!-- Example Rule 1: This rule will exclude any email from archiving
if it originates from someone in the Employee Benefits distribution
list.-->

<RULE NAME="Benefits correspondence" ACTION="MARK_DO_NOT_ARCHIVE">
  <AUTHOR>
    <DISPN>HR Employee Benefits</DISPN>
  </AUTHOR>
</RULE>

<!--Example Rule 2: This rule will exclude any email from archiving
if it is sent to someone in the Employee Benefits distribution list.
-->
<RULE NAME="Benefits correspondence" ACTION="MARK_DO_NOT_ARCHIVE">
  <RECIPIENTS>
    <DISPN>HR Employee Benefits</DISPN>
  </RECIPIENTS>

</RULE>

<!--Example Rule 3: (Available for Exchange Server archiving only) 
This rule will move email to the wastebasket if it comes 
from any of the sources listed, and is about any of the 
subjects listed.-->
<RULE NAME="Newsletters" ACTION="MOVE_DELETED_ITEMS">
  <AUTHOR INCLUDES="ANY">
    <EA>icweek@ucg.com</EA>
    <EA>WebDirect@ACLI.com</EA>
    <DOMAIN>limra.com</DOMAIN>
  </AUTHOR>
  <SUBJECTS INCLUDES="ANY">
     <SUBJ MATCH="STARTS">Society SmartBrief</SUBJ>
     <SUBJ MATCH="EXACT">TaxFacts ENews</SUBJ>
     </SUBJECTS>
</RULE>

<!--Example Rule 4: Delete mail from known junk-mail sources, 
(and others), if it contains certain common spam subjects-->
<RULE NAME="Junk Mail" ACTION="HARD_DELETE">
  <AUTHOR INCLUDES="ANY" ALLOWOTHERS="Y">
    <DOMAIN>indiatimes.com</DOMAIN>
    <DOMAIN>websavings-usa.net</DOMAIN>
  </AUTHOR>
  <SUBJECTS INCLUDES="ANY">
    <SUBJ MATCH="CONTAINS">enlargement</SUBJ>
    <SUBJ MATCH="CONTAINS">weight loss</SUBJ>
  </SUBJECTS>
  <SUBJECTS INCLUDES="ALL">
    <SUBJ MATCH="CONTAINS">debt</SUBJ>
    <SUBJ MATCH="CONTAINS">consolidate</SUBJ>
    <SUBJ MATCH="CONTAINS">loan</SUBJ>
  </SUBJECTS>
</RULE>

<!--Example Rule 5: Take default action (ARCHIVE_ITEM) if the 
subject matches the composite rule:
Must start with "MEMO", contain "INTERNAL" 
and end in "OurCompany"
e.g. "MEMO : Contains information internal to OurCompany" 
would match, but "MEMO : do not distribute" would not match.
Also allocates the message to a content category "Memoranda"-->

<RULE NAME="Internal Memo" CONTENTCATEGORY="Memoranda">
  <SUBJECTS INCLUDES="ALL">
    <SUBJ MATCH="STARTS">Memo</SUBJ>
    <SUBJ MATCH="CONTAINS">Internal</SUBJ>
    <SUBJ MATCH="ENDS">OurCompany</SUBJ>
  </SUBJECTS>
</RULE>

<!--Example Rule 6: Take default action (ARCHIVE_ITEM) on any 
email from management members included here. Email from 
management will be categorized under "ManagementMail" 
and retained as "Important"-->
<RULE NAME="Management" CONTENTCATEGORY="ManagementMail"
RETENTION="Important">
  <AUTHOR INCLUDES="ANY">
    <EA>mike.senior@management.com</EA>
    <EA>jon.little@management.com</EA>
    <EA>jill.taylor@management.com</EA>
  </AUTHOR>
</RULE>

<!--Example Rule 7: Take default action (ARCHIVE_ITEM) if an email is
addressed to any of the managers AND NO ONE ELSE
The message will be archived in a special archive reserved only
for this kind of email - specified by the ARCHIVEID-->

<RULE NAME="Sent to Management ONLY"
  ARCHIVEID="16611B008A3F65749BC4118182E0021461110000evsite.
  ourcompany.com">
   <RECIPIENTS INCLUDES="ANY" ALLOWOTHERS="N">
     <EA>mike.senior@management.com</EA>
     <EA>jon.little@management.com</EA>
     <EA>jill.taylor@management.com</EA>
   </RECIPIENTS>
</RULE>

<!--Example Rule 8: Do not archive mail that was sent to someone
outside OurCompany-->

<RULE NAME="External Recipient" ACTION="MARK_DO_NOT_ARCHIVE">
  <RECIPIENTS INCLUDES="NONE">
    <DOMAIN>OurCompany.com</DOMAIN>
  </RECIPIENTS>
</RULE>

<!--Example Rule 9: Archive and give the existing Retention 
Category, Internal, to any email that was sent only to employees 
in OurCompany-->

<RULE NAME="Internal Recipient" ACTION="ARCHIVE_ITEM" 
RETENTION="Internal">
  <DIRECTION INTERNAL="Y"/>
</RULE>

<!--Example Rule 10: Use a special retention category for mail 
addressed to any members of the specified DL-->
<RULE NAME="On the VIP list" RETENTION="VeryImportant">
  <RECIPIENTS>
    <DL>TheVIPs</DL>
  </RECIPIENTS>
</RULE>

<!--Example Rule 11: (Available for Exchange Server archiving only) 
Delete MP3 attachments before archiving-->
<RULE NAME="DeleteMP3s" ATTACHMENT_ACTION="REMOVE">
  <FILES>
    <FILE FILENAME="*.MP3"/>
  </FILES>
</RULE>

<!--Example Rule 12: 
Match against named MAPI properties (defined in 
Custom Properties.xml), or named Domino properties (using
the Domino field name for a property on an item) -->
<RULE NAME="Category Match" ACTION="ARCHIVE_ITEM">
  <NAMEDPROP TAG="CaseAuthor" INCLUDES="ANY">
    <PROP VALUE="Engineering"/>
    <PROP VALUE="Support"/>
  </NAMEDPROP>
  <NAMEDPROP TAG="CaseStatus" INCLUDES="ANY">
    <PROP VALUE="Open"/>
    <PROP VALUE="Pending"/>
  </NAMEDPROP>
</RULE>
</RULE_SET>