State

Inactive

By default, this option is inactive.

By activating the option, the rule remains inactive. This allows, for example, for a rule to be prepared for later use.

Policyname

Individual name of the rule that is assigned when the rule is created.

Policy Domains

The Managed Domains which are available for the rule and which can be selected as the source are listed here. Multiple selections are possible by clicking with the "CTRL" key pressed.

Generally, only Managed Domainswhich have not been assigned to a rule yet are available. In client-capable systems, only those Managed Domains which are also assigned to the client from which this menu was opened are visible.

Policy flag

If, by means of Custom commands, a flag() is set, for example by an LDAP query using ldap_compare(), this can also be used as a restricting criterion for triggering this policy here.

Encryption mode

The desired type of encryption is specified in the selection menu of this option:

Do not encrypt

Suppresses encryption (see Mail Processing Ruleset generator General settings Do not touch mails with the following text in subject:).

S/MIME-only

Enforces the user-related
S/MIME encryption..

Note:

Since Domain encryption is generally used, if available, it is enforced by the setup alone.

OpenPGP-only

Enforces the user-related
OpenPGP encryption..

GINA-only

Enforces the GINA encryption (see Mail Processing Ruleset generator Encryption Outgoing e-mails Always use GINA technology for mails with the following text in subject:).

S/MIME options

Allows setting the encryption algorithms and signature hash procedures to be used for S/MIME

S/MIME sign outgoing mails

By default, this option is inactive.

Enabling this option enforces S/MIME signing of outgoing emails.

Use opaque signature

By default, this option is inactive.

see Mail Processing Ruleset generator Signing Outgoing e-mails Use opaque signature

Use triple wrapping

(new in 12.1)

By default, this option is inactive.

see Mail Processing Ruleset generator Signing Outgoing e-mails Use triple wrapping

Use default digest for S/MIME signing:

see Mail Processing Ruleset generator Signing Outgoing e-mails Use default digest for S/MIME signing:

SHA-1

SHA-256

SHA-512

Prefer RSA-PSS for S/MIME signatures

see Mail Processing Ruleset generator Signing Outgoing e-mails Prefer RSA-PSS for S/MIME signatures

Prefer RSA-OAEP for S/MIME encryption

see Mail Processing Ruleset generator Encryption Outgoing e-mails Prefer RSA-OAEP for S/MIME encryption

Use default cipher for S/MIME encryption

see Mail Processing Ruleset generator Encryption Outgoing e-mails Use default cipher for S/MIME encryption

Triple DES

AES-128

AES-192

AES-256

OpenPGP options

Allows you to set the encryption methods to be used for OpenPGP.

OpenPGP sign outgoing mails when sender has a secret key

By default, this option is inactive.

see Mail Processing Ruleset generator Signing Outgoing e-mails OpenPGP sign outgoing mails when encrypting with OpenPGP and sender has a secret key

Use OpenPGP method for user encryption

see Mail Processing Ruleset generator Encryption Outgoing e-mails OpenPGP method for recipient encryption

PGP/MIME

Inline PGP

Use OpenPGP method for domain encryption

see Mail Processing Ruleset generator Encryption Outgoing e-mails OpenPGP method for domain encryption

PGP/MIME

Inline PGP

GINA options

Only relevant if, under Encryption mode "GINA-only" or "Any" has been selected.

[GINA Domain selection]

Selection of the GINA Domainto be used in this rule.

Use HIN Secure Mail GLOBAL instead of local GINA interface

By default, this option is inactive.

see Mail Processing Ruleset generator Advanced Options Use HIN Secure Mail GLOBAL instead of local GINA interface

[Email template selection]

By default, the selection is "bounce_policy".

Selection of a special template previously created via Mail System Edit mail templates.... This can be used to indicate to the sender that the sending of their email has failed due to this special rule/policy.

Allow default mail processing instead of bouncing if encryption was not immediately successful

By default, this option is inactive.

This option is used to decide whether an email for which this rule/policy could not be executed should first run through the global ruleset (see Ruleset generator).

Disclaimer

Individual disclaimer settings for this rule.

[Disclaimer template selection]

Option of selecting a disclaimer from LIST DISCLAIMER.

If no selection is made, or "[default]" is selected, the disclaimer specified in the Managed Domains of the sender will be used.

With the selection "-NONE-", the insertion of a disclaimer is suppressed.

Customer

(only in client-capable systems)

Client for which the policy has been created.

[Client selection]

Enables the allocation of the rule to a client.

Senders

Here, under New Domain/ Mailaddress, email addresses or email domains and/or wildcard domains can be inserted as string in the form john.doe@mycompany.tld, mycompany.tld or .mycompany.tld. The rule will then apply exclusively to these entries.

Optionally, in the field Comment: a custom comment can be added for each entry.

After entering an address, another input field is displayed by clicking on Add entry.

Any entries in this field must be a subset of the Managed Domains selected under Policy Domains.

Recipients