Cisco Cisco Email Security Appliance X1070 Troubleshooting Guide
Replace a Stripped Attachment with a Text
Message on the ESA
Message on the ESA
Document ID: 117867
Contributed by Scott Roeder and Enrico Werner, Cisco TAC Engineers.
Jul 01, 2014
Jul 01, 2014
Contents
Introduction
Create a Message Filter
Create a Notification Message
Create a Message Filter
Create a Notification Message
Introduction
This document describes how to replace a stripped attachment with a text message on the Email Security
Appliance (ESA).
Appliance (ESA).
Create a Message Filter
Many sites wish to give additional information when they strip attachments. You can do this with a message
filter, which allows the inclusion of an optional comment field.
filter, which allows the inclusion of an optional comment field.
Here is an example message filter:
StripInboundMP3s:
if (recv−listener == "InboundMail") {
drop−attachments−by−filetype ('mp3', 'Corporate policy disallows mp3
attachments. Please contact the helpdesk at x411 for assistance in
transferring binary files.');
}
You can create this message filter in the CLI with the filters command:
smtp.example.com> filters
Choose the operation you want to perform:
− NEW − Create a new filter.
− DELETE − Remove a filter.
− IMPORT − Import a filter script from a file.
− EXPORT − Export filters to a file
− MOVE − Move a filter to a different position.
− SET − Set a filter attribute.
− LIST − List the filters.
− DETAIL − Get detailed information on the filters.
− LOGCONFIG − Configure log subscriptions used by filters.
− ROLLOVERNOW − Roll over a filter log file.
[]> new
Enter filter script. Enter '.' on its own line to end.
StripInboundMP3s:
if (recv−listener == "InboundMail") {
drop−attachments−by−filetype ('mp3', 'Corporate policy disallows mp3 attachments.
Please contact the helpdesk at x411 for assistance in transferring binary files.');
}