30.15 Flag and status filter

30.15.1 Overview

Flag and status filters check Boolean properties of the message: Is the mail read? Has it been replied to? Does it carry a flag? Are attachments present? Is it signed or encrypted? They limit the processing scope to specific mail states.


30.15.2 Available status properties

Property Description
Read status Whether the mail is marked as read
Replied status Whether the mail has already been replied to
Flag status Whether the mail carries the standard flag
Has attachments Whether the mail has at least one attachment
Signed Whether the mail is S/MIME-signed
Encrypted Whether the mail is S/MIME-encrypted
Signature valid Whether the S/MIME signature is valid
Trust chain Whether the signature’s certificate chain is trusted

30.15.3 Operators

Operator Description
is Yes Status is set
is No Status is not set

30.15.4 Use case

Process only unread messages

Read status is No

Useful for auto-reply profiles that should no longer trigger after manual reading.


30.15.5 S/MIME properties in detail

Property Meaning
Signed The mail carries a signature (presence only, not validity)
Signature valid The signature is valid - the mail has not been modified since signing. Requires Signed is Yes
Trust chain The sender’s certificate originates from a trusted source. Requires Signature valid is Yes
Encrypted The mail is encrypted

Note: If any of the three stages Signed/Valid/Trust chain fails, the mail is technically suspicious - a dedicated processing rule can, for example, forward it to a security distribution list.


30.15.6 Tip

  • The Replied status is only set when the reply is sent via the email client’s reply function - a separate mail with the original subject does not count