Exchange Online 中的邮件流规则条件和例外（谓词）Mail flow rule conditions and exceptions (predicates) in Exchange Online

发件人 >是此人The sender > is this person

有关使用此条件Microsoft 365组的信息，请参阅"属性类型"部分中的"地址"条目。For more information about using Microsoft 365 groups with this condition, see the Addresses entry in the Property types section.

发件人 >是外部/内部The sender > is external/internal

发件人 >是此组的成员The sender > is a member of this group

有关使用此条件Microsoft 365组的信息，请参阅"属性类型"部分中的"地址"条目。For more information about using Microsoft 365 groups with this condition, see the Addresses entry in the Property types section.

发件人 >address 包含以下任何词语The sender > address includes any of these words

发件人 >address 匹配这些文本模式中的任意一种The sender > address matches any of these text patterns

发件人 >位于收件人的监督列表中The sender > is on a recipient's supervision list

发件人 >具有特定属性，包括以下任何词语The sender > has specific properties including any of these words

第二个属性： WordsSecond property: Words

请注意 ，Country 属性需要两个字母的国家/地区代码值 (，例如，DE 表示德国) 。Note that the Country attribute requires the two-letter country code value (for example, DE for Germany).

发件人 >具有与这些文本模式匹配的特定属性The sender > has specific properties matching these text patterns

第二个属性： PatternsSecond property: Patterns

发件人 >已覆盖策略提示The sender > has overridden the Policy Tip

注意：此条件/例外在独立 EOP Exchange Online Protection (中) 可用。Note: This condition/exception isn't available in standalone Exchange Online Protection (EOP) environments.

发件人 >IP 地址位于以下任一范围内或完全匹配The sender > IP address is in any of these ranges or exactly matches

发件人 >域为The sender > domain is

如果需要查找包含指定域 (例如，域) 的任何子域的发件人域，请使用与 ( FromAddressMatchesPatterns) 条件匹配的发件人地址，并使用语法指定域 '\.domain\.com$' ：。If you need to find sender domains that contain the specified domain (for example, any subdomain of a domain), use The sender address matches(FromAddressMatchesPatterns) condition and specify the domain by using the syntax: '\.domain\.com$'.

收件人 >是此人The recipient > is this person

注意：不能指定通讯组、已启用邮件的安全组或Microsoft 365组。Note: You can't specify distribution groups, mail-enabled security groups, or Microsoft 365 groups. 如果需要对发送到组的邮件采取操作，请改为使用"接收 (AnyOfToHeader) 条件。 If you need to take action on messages that are sent to a group, use the To box contains(AnyOfToHeader) condition instead.

收件人 >是外部/外部The recipient > is external/external

收件人 >是此组的成员The recipient > is a member of this group

有关使用此条件Microsoft 365组的信息，请参阅"属性类型"部分中的"地址"条目。For more information about using Microsoft 365 groups with this condition, see the Addresses entry in the Property types section.

收件人 >address 包含以下任何词语The recipient > address includes any of these words

注意：此条件不考虑发送到收件人代理地址的邮件。它只匹配发送到收件人主电子邮件地址的邮件。Note: This condition doesn't consider messages that are sent to recipient proxy addresses. It only matches messages that are sent to the recipient's primary email address.

收件人 >address 匹配这些文本模式中的任意一种The recipient > address matches any of these text patterns

注意：此条件不考虑发送到收件人代理地址的邮件。它只匹配发送到收件人主电子邮件地址的邮件。Note: This condition doesn't consider messages that are sent to recipient proxy addresses. It only matches messages that are sent to the recipient's primary email address.

收件人 >位于发件人的监督列表中The recipient > is on the sender's supervision list

收件人 >具有特定属性，包括以下任何词语The recipient > has specific properties including any of these words

第二个属性： WordsSecond property: Words

请注意 ，Country 属性需要两个字母的国家/地区代码值 (，例如，DE 表示德国) 。Note that the Country attribute requires the two-letter country code value (for example, DE for Germany).

收件人 >具有与这些文本模式匹配的特定属性The recipient > has specific properties matching these text patterns

第二个属性： PatternsSecond property: Patterns

收件人 >域为The recipient > domain is

如果需要查找包含指定域 (例如，域) 的任何子域的收件人域，请使用与 ( RecipientAddressMatchesPatterns) 条件匹配的收件人地址，并使用语法 指定域 '\.domain\.com$' 。If you need to find recipient domains that contain the specified domain (for example, any subdomain of a domain), use The recipient address matches (RecipientAddressMatchesPatterns) condition, and specify the domain by using the syntax '\.domain\.com$'.

主题或正文 >subject 或 body 包含以下任何词语The subject or body > subject or body includes any of these words

主题或正文 >主题或正文匹配这些文本模式The subject or body > subject or body matches these text patterns

主题或正文 >subject 包含以下任何词语The subject or body > subject includes any of these words

主题或正文 >subject 与这些文本模式匹配The subject or body > subject matches these text patterns

任何附件 >内容包含以下任何词语Any attachment > content includes any of these words

任何附件 >内容与这些文本模式匹配Any attachment > content matches these text patterns

注意：仅扫描附件 (前) 150 KB。Note: Only the first 150 kilobytes (KB) of the attachments are scanned.

任何附件 >无法检查内容Any attachment > content can't be inspected

任何附件 >文件名与这些文本模式匹配Any attachment > file name matches these text patterns

任何附件 >文件扩展名包含以下词语Any attachment > file extension includes these words

任何附件 >size 大于或等于Any attachment > size is greater than or equal to

在 EAC 中，只能以千字节 (KB) 为单位指定大小。In the EAC, you can only specify the size in kilobytes (KB).

任何附件 >未完成扫描Any attachment > didn't complete scanning

任何附件 >具有可执行内容Any attachment > has executable content

任何附件 >受密码保护Any attachment > is password protected

任何附件 >具有这些属性，包括以下任何词语Any attachment > has these properties, including any of these words

第二个属性： WordsSecond property: Words

此条件可帮助您将邮件流规则与 SharePoint、Windows Server 2012 R2 或更高版本中的文件分类基础结构 (FCI) 或第三方分类系统集成。This condition helps you integrate mail flow rules with SharePoint, File Classification Infrastructure (FCI) in Windows Server 2012 R2 or later, or a third-party classification system.

可以从内置属性列表中选择，或指定自定义属性。You can select from a list of built-in properties, or specify a custom property.

任何收件人 >address 包含以下任何词语Any recipient > address includes any of these words

任何收件人 >address 匹配这些文本模式中的任意一种Any recipient > address matches any of these text patterns

邮件 >包含这些敏感信息类型中的任意一种The message > contains any of these types of sensitive information

使用“使用策略提示通知发件人”(NotifySender) 操作的规则需要此条件。This condition is required for rules that use the Notify the sender with a Policy Tip (NotifySender) action.

注意：此条件/例外在独立 EOP 环境中不可用。Note: This condition/exception isn't available in standalone EOP environments.

邮件 >"到"框包含此人The message > To box contains this person

邮件 >"To"框包含此组的成员The message > To box contains a member of this group

邮件 >"抄送"框包含此人The message > Cc box contains this person

邮件 >包含此组的成员The message > contains a member of this group

邮件 >"到"或"抄送"框包含此人The message > To or Cc box contains this person

邮件 >"到"或"抄送"框包含此组的成员The message > To or Cc box contains a member of this group

邮件 >size 大于或等于The message > size is greater than or equal to

在 EAC 中，只能以千字节 (KB) 为单位指定大小。In the EAC, you can only specify the size in kilobytes (KB).

注意：在确定邮件流规则之前将对邮箱的邮件大小限制进行评估。对于邮箱而言过大的邮件将被拒绝，然后此条件的规则才能对该邮件采取措施。Note: Message size limits on mailboxes are evaluated before mail flow rules. A message that's too large for a mailbox will be rejected before a rule with this condition is able to act on the message.

邮件 >字符集名称包括以下任何词语The message > character set name includes any of these words

发件人和收件人 >发件人与收件人的关系是The sender and the recipient > the sender's relationship to a recipient is

发件人和收件人 >邮件位于这些组的成员之间The sender and the recipient > the message is between members of these groups

有关使用此条件Microsoft 365组的信息，请参阅"属性类型"部分中的"地址"条目。For more information about using Microsoft 365 groups with this condition, see the Addresses entry in the Property types section.

发件人和收件人 >发件人或收件人的经理是此人The sender and the recipient > the manager of the sender or recipient is this person

第二个属性： AddressesSecond property: Addresses

发件人和收件人 >sender 和 recipient 属性比较为The sender and the recipient > the sender and recipient property compares as

第二个属性： EvaluationSecond property: Evaluation

邮件属性 >包含邮件类型The message properties > include the message type

邮件属性 >包含此分类The message properties > include this classification

注意：此条件/例外在独立 EOP 环境中不可用。Note: This condition/exception isn't available in standalone EOP environments.

邮件属性 >不包括任何分类The message properties > don't include any classification

注意：此条件/例外在独立 EOP 环境中不可用。Note: This condition/exception isn't available in standalone EOP environments.

邮件属性 >包括重要性级别The message properties > include the importance level

邮件头 >包含以下任何词语A message header > includes any of these words

第二个属性： WordsSecond property: Words

页眉字段的名称和页眉字段的值始终一同使用。The name of the header field and the value of the header field are always used together.

邮件头 >匹配这些文本模式A message header > matches these text patterns

第二个属性： PatternsSecond property: Patterns

页眉字段的名称和页眉字段的值始终一同使用。The name of the header field and the value of the header field are always used together.

• 市/县City
• CompanyCompany
• 国家/地区Country
• CustomAttribute1 - CustomAttribute15CustomAttribute1 - CustomAttribute15
• DepartmentDepartment
• DisplayNameDisplayName
• EmailEmail
• FaxNumberFaxNumber
• FirstNameFirstName
• HomePhoneNumberHomePhoneNumber
• 缩写Initials
• LastNameLastName
• 经理Manager
• MobileNumberMobileNumber
• 备注Notes
• OfficeOffice
• OtherFaxNumberOtherFaxNumber
• OtherHomePhoneNumberOtherHomePhoneNumber
• OtherPhoneNumberOtherPhoneNumber
• PagerNumberPagerNumber
• PhoneNumberPhoneNumber
• POBoxPOBox
• StateState
• StreetStreet
• TitleTitle
• UserLogonNameUserLogonName
• ZipCodeZipCode

在 EAC 中，要为同一属性指定多个词语或文本模式，请使用逗号分隔这些值。In the EAC, to specify multiple words or text patterns for the same attribute, separate the values with commas. 例如 San Francisco,Palo Alto ，City 属性的值查找"City equals San Francisco"或 City equals Palo Alto"。For example, the value San Francisco,Palo Alto for the City attribute looks for "City equals San Francisco" or City equals Palo Alto".

在 Exchange Online PowerShell 中，使用语法 ，其中 是你想要匹配的单词 "AttributeName1:Value1,Value 2 with spaces,Value3...","AttributeName2:Word4,Value 5 with spaces,Value6..." Value 或文本模式。In Exchange Online PowerShell, use the syntax "AttributeName1:Value1,Value 2 with spaces,Value3...","AttributeName2:Word4,Value 5 with spaces,Value6...", where Value is the word or text pattern that you want to match. 例如， "City:San Francisco,Palo Alto" 或 "City:San Francisco,Palo Alto" "Department:Sales,Finance" 。For example, "City:San Francisco,Palo Alto" or "City:San Francisco,Palo Alto", "Department:Sales,Finance".

为同一属性指定多个属性或多个值时，使用 or 运算符。请勿使用具有前导或尾随空格的值。When you specify multiple attributes, or multiple values for the same attribute, the or operator is used. Don't use values with leading or trailing spaces.

注意，Country 属性要求使用两个字母的 ISO 3166-1 国家/地区代码值（例如，DE 代表德国）。Note that the Country attribute requires the two-letter ISO 3166-1 country code value (for example, DE for Germany). 有关详细信息，请参阅国家/地区代码 - ISO 3166。For more information, see Country Codes - ISO 3166.

在 Exchange Online PowerShell 中，用逗号分隔多个值。In Exchange Online PowerShell, separate multiple values by commas.

此条件不考虑发送到收件人代理地址的邮件。This condition doesn't consider messages that are sent to recipient proxy addresses. 它只匹配发送到收件人主电子邮件地址的邮件。It only matches messages that are sent to the recipient's primary email address.

EAC 中的收件人选取器不允许从收件人Microsoft 365选择组。The recipient picker in the EAC doesn't allow you to select Microsoft 365 groups from the list of recipients. 但是，您可以在"检查名称"旁边的框中输入 Microsoft 365 组的电子邮件地址，然后单击"检查名称"验证电子邮件地址，这将向添加框中 添加组。 But, you can enter the email address of a Microsoft 365 group in the box next to Check names, and then validate the email address by clicking Check names, which will add the group to the add box.

• Arabic/iso-8859-6
• Chinese/big5
• Chinese/euc-cn
• Chinese/euc-tw
• Chinese/gb2312
• Chinese/iso-2022-cn
• Cyrillic/iso-8859-5
• Cyrillic/koi8-r
• Cyrillic/windows-1251
• Greek/iso-8859-7
• Hebrew/iso-8859-8
• Japanese/euc-jp
• Japanese/iso-022-jp
• Japanese/shift-jis
• Korean/euc-kr
• Korean/johab
• Korean/ks_c_5601-1987
• Turkish/windows-1254
• Turkish/iso-8859-9
• Vietnamese/tcvn

在 Exchange Online PowerShell 中，可以指定用逗号分隔的多个域。In Exchange Online PowerShell, you can specify multiple domains separated by commas.

• 单个 IP 地址：例如， 192.168.1.1 。Single IP address: For example, 192.168.1.1.
• IP 地址范围：例如， 192.168.0.1-192.168.0.254 。IP address range: For example, 192.168.0.1-192.168.0.254.
• 无类别域际路由 (CIDR) IP 地址范围： 例如， 192.168.0.1/25 。Classless InterDomain Routing (CIDR) IP address range: For example, 192.168.0.1/25.

在 Exchange Online PowerShell 中，可以指定用逗号分隔的多个 IP 地址或范围。In Exchange Online PowerShell, you can specify multiple IP addresses or ranges separated by commas.

在 Exchange Online PowerShell 中，使用 Get-MessageClassification cmdlet 标识邮件分类。In Exchange Online PowerShell, you use the Get-MessageClassification cmdlet to identify the message classification.

例如，使用以下命令搜索具有分类的邮件，并使用值在邮件 Company Internal 主题前预置 CompanyInternal ： New-TransportRule "Rule Name" -HasClassification @(Get-MessageClassification "Company Internal").Identity -PrependSubject "CompanyInternal"For example, use the following command to search for messages with the Company Internal classification and prepend the message subject with the value CompanyInternal: New-TransportRule "Rule Name" -HasClassification @(Get-MessageClassification "Company Internal").Identity -PrependSubject "CompanyInternal"

• 自动答复 () OOFAutomatic reply (OOF)
• 自动转发 () AutoForwardAuto-forward (AutoForward)
• EncryptedEncrypted
• 日历Calendaring
• 权限控制 () PermissionControlledPermission controlled (PermissionControlled)
• 语音邮件Voicemail
• SignedSigned
• 审批请求 ApprovalRequest () Approval request (ApprovalRequest)
• 已读回 执 ReadReceipt () Read receipt (ReadReceipt)

注意：Outlook或Outlook转发邮件时 ，ForwardingSmtpAddress 属性将添加到邮件中。Note: When Outlook or Outlook on the web is configured to forward a message, the ForwardingSmtpAddress property is added to the message. 邮件类型不会更改为 AutoForward 。The message type isn't changed to AutoForward.

在 Exchange Online PowerShell 中，指定多个用逗号分隔的正则表达式，将每个正则表达式括在引号 (") 。In Exchange Online PowerShell, you specify multiple regular expressions separated by commas, and you enclose each regular expression in quotation marks (").

• 绕过垃圾邮件筛选 -1 () Bypass spam filtering (-1)
• 整数 0 到 9Integers 0 through 9

在 Exchange Online PowerShell 中，使用语法 @{<SensitiveInformationType1>},@{<SensitiveInformationType2>},... 。In Exchange Online PowerShell, use the syntax @{<SensitiveInformationType1>},@{<SensitiveInformationType2>},.... 例如，若要查找至少包含两个信用卡号和至少一个 ABA 路由号码的内容，请使用值 @{Name="Credit Card Number"; minCount="2"},@{Name="ABA Routing Number"; minCount="1"} 。For example, to look for content that contains at least two credit card numbers, and at least one ABA routing number, use the value @{Name="Credit Card Number"; minCount="2"},@{Name="ABA Routing Number"; minCount="1"}.

在 EAC 中，只能以千字节 (KB) 为单位指定大小。In the EAC, you can only specify the size in kilobytes (KB).

在 Exchange Online PowerShell 中，输入值时，使用下列单位之一限定该值：In Exchange Online PowerShell, when you enter a value, qualify the value with one of the following units:

• B (字节) B (bytes)
• KB (千字节) KB (kilobytes)
• MB (兆字节) MB (megabytes)
• GB (GB) GB (gigabytes)

例如，20 MB。For example, 20 MB. TB（兆兆字节）Unqualified values are typically treated as bytes, but small values may be rounded up to the nearest kilobyte.

• 发件人是存在于组织内部的邮箱、邮件用户、组或启用邮件的公用文件夹。The sender is a mailbox, mail user, group, or mail-enabled public folder that exists inside the organization.
• 发件人的电子邮件地址位于配置为权威域或内部中继域的接受域中， 并且 通过经验证的连接发送或接收邮件。The sender's email address is in an accepted domain that's configured as an authoritative domain or an internal relay domain, and the message was sent or received over an authenticated connection. 有关接受域详细信息，请参阅管理接受的域Exchange Online。For more information about accepted domains, see Manage accepted domains in Exchange Online.

如果满足下列任一条件，则认为发件人位于组织外部：A sender is considered to be outside the organization if either of the following conditions is true:

• 发件人的电子邮件地址不位于接受域中。The sender's email address isn't in an accepted domain.
• 发件人的电子邮件地址位于配置为外部中继域的接受域中。The sender's email address is in an accepted domain that's configured as an external relay domain.

注意：若要确定邮件联系人是位于组织内部还是外部，将发件人地址与组织的接受域进行比较。Note: To determine whether mail contacts are considered to be inside or outside the organization, the sender's address is compared with the organization's accepted domains.

• 组织内部 () InOrganizationInside the organization (InOrganization)
• 组织外部 () NotInOrganizationOutside the organization (NotInOrganization)

• 收件人是存在于组织内部的邮箱、邮件用户、组或启用邮件的公用文件夹。The recipient is a mailbox, mail user, group, or mail-enabled public folder that exists inside the organization.
• 收件人的电子邮件地址位于配置为权威域或内部中继域的接受的域中， 并且 通过经验证的连接发送或接收邮件。The recipient's email address is in an accepted domain that's configured as an authoritative domain or an internal relay domain, and the message was sent or received over an authenticated connection.

如果满足下列任一条件，则认为收件人位于组织外部：A recipient is considered to be outside the organization if either of the following conditions is true:

• 收件人的电子邮件地址不位于接受域中。The recipient's email address isn't in an accepted domain.
• 收件人的电子邮件地址位于配置为外部中继域的接受域中。The recipient's email address is in an accepted domain that's configured as an external relay domain.

但是，如果文本由其他字符围绕，则不会被视作匹配项。However, if the text is surrounded by other characters, it isn't considered a match. 例如，“contoso”并不匹配以下值：For example, "contoso" doesn't match the following values:

• AcontosoAcontoso
• ContosoaContosoa
• AcontosobAcontosob

星号字符 () 字面字符，不用作 * 通配符。The asterisk (*) is treated as a literal character, and isn't used as a wildcard character.