Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 1185
 
9-47
Cisco AsyncOS 8.5.6 for Email User Guide
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Rules
Filter syntax when using a 
url-no-reputation
 rule is: 
<msg_filter_name>: 
if url_no_reputation('<whitelist>') 
{<action>} 
URL Category Rule 
Use URL categories to define message actions based on the category of URLs in the message. For 
important details, see 
 
in 
 
Filter syntax when using a 
url-category
 rule is: 
<msg_filter_name>: if url-category ([‘<category-name1>’,’<category-name2>’,…, 
‘<category-name3>’],’<url_white_list>’)
{
<action>
}
Where: 
msg_filter_name
 is the name of this message filter. 
action
 is any Message Filter action. 
category-name
 is the URL category. Separate multiple categories with commas. To obtain correct 
category names, look at a URL Category condition or action in a Content Filter. For descriptions and 
examples of the categories, see 
url_white_list
 is the name of a defined URL list (via the 
urllistconfig
 command.)
Corrupt Attachment Rule
The Corrupt Attachment rule evaluates to 
true
 if a message contains corrupt attachment. A corrupt 
attachment is an attachment that the scanning engine cannot scan and identified as corrupt.
Related Topics
Example
In the following example, if the filter detects a corrupt attachment in a message, the message is 
quarantined to Policy Quarantine.
quar_corrupt_attach: if (attachment-corrupt) { quarantine("Policy"); }