TextLab

⚡

Agari CDR Rule Builder

DSL Ref ↗ ✕

From / Sender

Also match reply_to field

ⓘ Wildcards (*) only permitted with the any operator on: from, from_domain, reply_to, subject, to.

Join values with AND into one query

Subject

Operator

Wildcards * and ? are auto-escaped to ^* / ^? for the ANY operator.
ⓘ Wildcards permitted on: from, from_domain, reply_to, subject, to — with any only.

Join values with AND into one query

URLs uri — exact match only

Exact match only — no wildcards or partial URLs

Join values with AND into one query

Attachments

Filename (exact)

Extension (no dot)

SHA256 hash

Join attachment values with AND

Recipients (To)

Join values with AND into one query

IP Addresses

Join values with AND into one query

Auth & Scores

DMARC result SPF result Domain rep ≤ Has attachment Has QR code Reply ≠ From

Generated Rule

Fill in the fields on the left and click ⚡ Build Rule.

Agari CDR Rule Builder

Join Lines with Delimiter

Split into Lines