Cisco Cisco Email Security Appliance C160 Guía Del Usuario
11-15
Cisco AsyncOS 9.1 for Email User Guide
Chapter 11 Content Filters
How Content Filters Work
Envelope Sender
$envelopefrom
or
$envelopesender
Replaced by the Envelope Sender (Envelope
From, <MAIL FROM>) of the message.
From, <MAIL FROM>) of the message.
Envelope Recipients
$EnvelopeRecipients
Replaced by all Envelope Recipients
(Envelope To, <RCPT TO>) of the message.
(Envelope To, <RCPT TO>) of the message.
File Names
$filenames
Replaced with a comma-separated list of the
message’s attachments’ filenames.
message’s attachments’ filenames.
File Sizes
$filesizes
Replaced with a comma-separated list of the
message’s attachment’s file sizes.
message’s attachment’s file sizes.
File Types
$filetypes
Replaced with a comma-separated list of the
message's attachments' file types.
message's attachments' file types.
Filter Name
$FilterName
Replaced by the name of the filter being
processed.
processed.
GMTimeStamp
$GMTimeStamp
Replaced by the current time and date, as
would be found in the Received: line of an
email message, using GMT.
would be found in the Received: line of an
email message, using GMT.
HAT Group Name
$Group
Replaced by the name of the sender group
the sender matched on when injecting the
message. If the sender group had no name,
the string “
the sender matched on when injecting the
message. If the sender group had no name,
the string “
>Unknown<
” is inserted.
Mail Flow Policy
$Policy
Replaced by the name of the HAT policy
applied to the sender when injecting the
message. If no predefined policy name was
used, the string “
applied to the sender when injecting the
message. If no predefined policy name was
used, the string “
>Unknown<
” is inserted.
Matched Content
$MatchedContent
Replaced by the value (or values) that
triggered a content-scanning filter. Matched
content can be a content dictionary match, a
smart identifier, or a match to a regular
expression.
triggered a content-scanning filter. Matched
content can be a content dictionary match, a
smart identifier, or a match to a regular
expression.
Header
$Header['string']
Replaced by the value of the quoted header,
if the original message contains a matching
header. Note that double quotes may also be
used.
if the original message contains a matching
header. Note that double quotes may also be
used.
Hostname
$Hostname
Replaced by the hostname of the Email
Security appliance.
Security appliance.
Internal Message ID
$MID
Replaced by the Message ID, or “MID” used
internally to identify the message. Not to be
confused with the RFC822 “Message-Id”
value (use $Header to retrieve that).
internally to identify the message. Not to be
confused with the RFC822 “Message-Id”
value (use $Header to retrieve that).
Receiving Listener
$RecvListener
Replaced by the nickname of the listener
that received the message.
that received the message.
Receiving Interface
$RecvInt
Replaced by the nickname of the interface
that received the message.
that received the message.
Table 11-3
Action Variables (continued)
Variable
Syntax
Description