Google Message Security for Google Apps Administration Guide - Manual (Page 213)

Content Manager 213
Attachment of any type Match: Any Rule
Select Location: Header
Select Filter Type: contains text
Value: Content-Disposition: attachment;
filename=
Note: The header for attachments appears in
messages only if the sender’s or recipient’s
email client supports attachment headers.
Sender address from one or
more specific domains Match: Any Rule
Select Location: Sender
Select Filter Type: contains text
Value: Domain of sender, such as
badsender.com
Note: Use the more general contains text as
opposed to equals to allow for variations in the
From syntax employed by different mail
servers and clients.
Tip: To enter another domain, create another
rule. Alternatively, enter a list of several
domains by selecting matches regex and
entering regular expression. For details, see
“Examples of Regular Expressions” on
page 225.
Two specific words, but
only if they both appear
anywhere in the message
body Match: All Rules
Rule 1:
Select Location: Body
Select Filter Type: matches regex
Value: Enter the word in the following regex
syntax:
\Wword\W
Rule 2:
Select Location: Body
Select Filter Type: does not contain
Value: Word or phrase that appears in the
message body
To capture messages that
contain this content:
Enter the following: