Cisco Cisco Email Security Appliance C170 Guía Del Usuario
9-3
Cisco AsyncOS 8.0.1 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Processing
Message Filter Example Syntax
The intuitive meaning of a filter specification is:
if the message matches the rule, then apply the actions in sequence. If the
else
clause is present, the
actions within the
else
clause are executed in the event the message does not match the rule.
The name of the filter you specify makes it easier to manage filters when you are activating, deactivating,
or deleting them.
or deleting them.
Message filters use the following syntax:
Note that you can omit any alternative actions:
You can combine several filters in sequence within a single text file, one following the other.
You must enclose the values in filters in either single or double quotation marks. Single or double
quotation marks must be equally paired on each side of the value; for example, the expressions
quotation marks must be equally paired on each side of the value; for example, the expressions
notify('customercare@example.com')
and
notify("customercare@example.com")
are both legal, but
the expression
notify("customercare@example.com')
causes a syntax error.
Lines beginning with a ‘
#
’ character are considered comments and are ignored; however, they are not
preserved by AsyncOS as can be verified by viewing a filter via
filters -> detail
.
Message Filter Processing
When AsyncOS processes message filters, the content that AsyncOS scans, the order of the processing,
and the actions taken are based on several factors:
and the actions taken are based on several factors:
Example Syntax
Purpose
expedite:
filter name
if (recv-listener == 'InboundMail' or recv-int == 'notmain')
rule specification
{
alt-src-host('outbound1');
skip-filters();
}
action specification
else
{
alt-src-host('outbound2');
}
optional alternative action
specification
specification
Example Syntax
Purpose
expedite2:
filter name
if ((not (recv-listener == 'InboundMail')) and
(not (recv-int == 'notmain')))
rule specification
{
alt-src-host('outbound2');
skip-filters();
}
action specification