Cisco Cisco Email Security Appliance X1070 Troubleshooting Guide

Page of 1
Question:
Attachments are not being dropped as expected as one of the following:
Message Filter using drop−attachments−by−mimetype.
Content Filter using Drop_Attachments_By_Mimetype_Action.
Answer:
The "Drop Attachments by MIME Type" action finds the attachment MIME type by examining the MIME
header data.  The common causes an attachment not being detected and dropped by MIME type is that there
was a scan error on the message or that the detected MIME type is configured to be skipped.  To find out the
exact cause for a given message, search the mail logs using grep from the CLI.  When you search on the MID,
any scan issues will be reported on their own line.  Here is an example:
Tue Aug 3 16:36:29 2004 Warning: MID 256, Message Scanning
 Problem: Continuation line seen before first header
Updated: Aug 20, 2014
Document ID: 118310