How to create a bypass rule to exclude valid emails from another rule that filters fishing emails based on social engineering key words?

[JuanCAguilar]

Hi to everyone

I need the advice to create a bypass rule that identify valid emails and avoid the filtering from another one that is based on the most used key words by the phishing emails; I mean even about how to create it with the finest tuning to do the override the scope of that rule for the whitelist or else other object with the using of "!" character; I think so that It could be even possible through the use of the cli only. May you give me some advice or clue about to how to do it?

Thanks a lot, in advance for your support.


Juan Carlos