Cisco Cisco Email Security Appliance C190 Guía Del Usuario
Chapter 6 Using Message Filters to Enforce Email Policies
6-404
Cisco IronPort AsyncOS 7.3 for Email Advanced Configuration Guide
OL-23081-01
them based on the fingerprint of the file, and not just the three-letter filename
extension. Note also that you can specify a single filetype (“mpeg”) or you can
refer to all of the members of the filetype (“Media”):
extension. Note also that you can specify a single filetype (“mpeg”) or you can
refer to all of the members of the filetype (“Media”):
strip_all_exes: if (true) {
drop-attachments-by-filetype ('Executable', “Removed
attachment: $dropped_filename”);
}
In the following example, the same “executable” group of attachments (
.exe
,
.dll
, and
.scr
) are stripped from messages whose Envelope Sender is not within
the domain
example.com
.
strip_inbound_exes: if (mail-from != "@example\\.com$") {
drop-attachments-by-filetype ('Executable');
}
In the following example, a specific member of a file type (“wmf”) as well as a
the same “executable” group of attachments (
the same “executable” group of attachments (
.exe
,
.dll
, and
.scr
) are stripped
from messages whose Envelope Sender is not within the domain
example.com
.
strip_inbound_exes_and_wmf: if (mail-from != "@example\\.com$") {
drop-attachments-by-filetype ('Executable');
drop-attachments-by-filetype ('x-wmf');
}