Cisco Cisco Email Security Appliance C160 Guía Del Usuario
9-13
Cisco AsyncOS 8.0.1 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Rules
Attachment
Scanning
Scanning
every-attachment-contains(<r
egular expression>)
Do all of the attachments in this message contain
text that matches a specific pattern? The text
must exist in all attachments and the action
performed is, in effect, a logical AND operation
of an '
text that matches a specific pattern? The text
must exist in all attachments and the action
performed is, in effect, a logical AND operation
of an '
attachment-contains()
' for each
attachment. The body is not scanned. Does the
pattern occur the minimum number of times you
specified for the threshold value?
pattern occur the minimum number of times you
specified for the threshold value?
.
Attachment Size
a
attachment-size
Does the message contain an attachment whose
size is within some range? This rule is similar to
the
size is within some range? This rule is similar to
the
body-size
rule, but it attempts to avoid
scanning the entire “body” of the message. That
is, it attempts to scan only that which the user
would view as being an attachment. The size is
evaluated prior to any decoding. See
is, it attempts to scan only that which the user
would view as being an attachment. The size is
evaluated prior to any decoding. See
Public Blacklists
dnslist(<query server>)
Does the sender’s IP address appear on a public
blacklist server (RBL)? See
blacklist server (RBL)? See
SenderBase
Reputation
Reputation
reputation
What is the sender’s SenderBase Reputation
Score? See
Score? See
No SenderBase
Reputation
Reputation
no-reputation
Used to test if SenderBase Reputation Score is
“None.” See
“None.” See
Dictionary
b
dictionary-match(<dictionary
_name>)
Does the message body contain any of the
regular expressions or terms in the content
dictionary named dictionary_name? Does the
pattern occur the minimum number of times you
specified for the threshold value? See
regular expressions or terms in the content
dictionary named dictionary_name? Does the
pattern occur the minimum number of times you
specified for the threshold value? See
Attachment
Dictionary Match
Dictionary Match
attachment-dictionary-match(
<dictionary_name>)
Does the attachment contain any of the regular
expressions in the content dictionary named
dictionary_name? Does the pattern occur the
minimum number of times you specified for the
threshold value? See
expressions in the content dictionary named
dictionary_name? Does the pattern occur the
minimum number of times you specified for the
threshold value? See
Subject Dictionary
Match
Match
subject-dictionary-match(<di
ctionary_name>)
Does the Subject header contain any of the
regular expressions or terms in the content
dictionary named dictionary name? See
regular expressions or terms in the content
dictionary named dictionary name? See
.
Table 9-2
Message Filter Rules
Rule Syntax
Description