How to whitelist domain address in PMG gateway

[jehchoi1]

If I want to whitelist all sub domains (example: sub1.domain.com, sub2.domain.com, and etc.), do I need to include the wildcard in front of the domain name in the Who Object > Whitelist > Typeomain?



Also, can someone explain how the whitelist by Domain works.
I have been told in the past that for the Whitelist by E-Mail, PMG checks the email header field "Return-Path<email_address>" for a match. If the same email address is found then the email is allowed in.

 

[dcsapak]

yes if you want to match all subdomains too you have to use a regex instead of the domain object and use a regex like '(.*\.)?foo\.com' to match foo.com and all subdomains (or use one domain object 'foo.com' and one regex '.*\.foo.com')

the who from objects in a rule match the envelope sender, not the 'From header' inside the email, if you want to match that, you have to use a 'match field' what object instead

 

[jehchoi1]

I have a question regarding the Mail Filter > What Objects > Match Field option




Is it correct for me to assume that a word followed by a " : " is a recognized as a field in the email header?
For Example: If this was the mail header, all text highlighted in red will be a field I can use in the PMG "Match Field" option

 

[dcsapak]

yes but also the other 'Received' headers and the Date, MIME-Version, Content-Type etc. too