Exchange forward mail if term(s) appear in message body but not the email signature.

[pete]

I need to look through inbound mail for particular keywords and if they're found in the message body, the email needs to be forwarded to a distribution list.

 

Except if the words are in the email signature:

 

Blah blah blah keyword blah blah blah

 

--

E Wimp, 29 Acacia Road, blah...

 

but not this:

 

Blah blah blah

 

--

Bob Bobblington. 123 Fake Street keyword

 

Any ideas?

[Soulfish]

Normally I'd say you could do this with Exchange transport rules fairly easily, however an email signature makes up part of the email body so there's no simple/easy way to separate it especially since there's no common delimiter for the start of email signatures.

 

If you want to be able to search just the body realistically you're looking at passing the message to a third party program that you've bought/built to process and forward the message when required.

[pete]

Yeah, I was hoping something like "ignore content after "-- ", but that falls over for email chains.

 

The TLDR is we have a transport rule that helps grab FOIA requests and ensure the right people see them ASAP. The problem is now that people are putting FOIA-related disclaimers in their automated* email signatures that mess with the signal to noise ratio.

 

*tagged on by the outgoing mailserver, independent of the person sending the email.

 

I could just look at the subject line, but that assumes a sane correspondent who want to make their query easy to identify.

 

I've already got a "ignore it if you're triggering on 'The information contained in theis email may be subject to public disclosure under the freedom of information act' or 'FOIA@*'" rule, but it's a bit unwieldy handling all the possible variations.