Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
9-41
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Actions
The
$CertificateSigners
variable expands to:
Examples
The following example inserts a new header if the certificate issuer is from the US:
The following example notifies an administrator if the signer is not from example.com:
The following example adds a header if the message has an X.509 certificate:
The following example adds a header if the message’s certificate does not have a signer:
Message Filter Actions
The purpose of message filters is to perform actions on selected messages.
The two types of actions are:
•
Final actions — such as
deliver
,
drop
, and
bounce
— end the processing of a message, and permit
no further processing through subsequent filters.
•
Non-final actions perform an action which permits the message to be processed further.
"alice@example.com, al@private.example.com, bob@example.com, bob@private.example.com"
Issuer: if signed-certificate("issuer") == "(?i)C=US" {
insert-header("X-Test", "US issuer");
}
NotOurSigners: if signed-certificate("signer") AND
signed-certificate("signer") != "example\\.com$" {
notify("admin@example.com");
}
AnyX509: if signed-certificate ("issuer") {
insert-header("X-Test", "X.509 present");
}
NoSigner: if not signed-certificate ("signer") {
insert-header("X-Test", "Old X.509?");
}