How to exempt a specific host only from dynamic screening using Sieve Print

If you have a specific host that you need to exempt from dynamic screening, but still have messages from it still go through other security tests such as Spam and Anti-Virus filtering (for instance a secondary mail server that needs to relay through SecurityGateway) this can be accomplished through a Sieve script.

1. Log into the SecurityGateway administration website with a global administrator account
2. Click on Security
3. Locate the Advanced section
4. Click on Sieve Scripts
5. Click New 
   
6. Enter a descriptive Script Name, such as 'Do not screen host 10.0.0.1'
7. Select Auth from the 'Mail Event' dropdown
8. The only choice in the Scope dropdown will be global - you cannot apply an AUTH level script to a specific domain
9. Specify the following for the Script Text, replacing 10.0.0.1 with the IP of machine which you wish to exempt from dynamic screening: require ['securitygateway']; if allof(not whitelisted 'ip,host',not auth 'succeeded',ip :is '10.0.0.1') { dynamicscreen 'disable'; }
10. Click Save & Close 
    
11. Ensure that this script is below the system generated 'Dynamic Screening' script in the list of scripts using the up or down arrows in the order column 

Additional Comments

More information on how to create new sieve-rules can be found in the SecurityGateway helpfile, which can be opened by clicking the 'Help' link in the upper-right corner of the SecurityGateway window.