Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 1094
 
9-48
Cisco AsyncOS 8.0.1 for Email User Guide
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Actions
Action Variables
The 
bcc()
bcc-scan()
notify()
notify-copy()
add-footer()
add-heading()
, and 
insert-headers() 
actions have parameters that may use certain variables that will be automatically 
replaced with information from the original message when the action is executed. These special variables 
are called action variables. Your Cisco appliance supports the following set of action variables:
Table 9-7
Message Filter Action Variables
Variable
Syntax
Description
All Headers
$AllHeaders
Returns the message headers.
Body Size
$BodySize
Returns the size, in bytes, of the message.
Certificate Signers
$CertificateSigners
Returns the signers from the 
subjectAltName
 element of a signing 
certificate. See 
 for more information.
Date
$Date
Returns the current date, using the format 
MM/DD/YYYY.
Dropped File Name
$dropped_filename
Returns only the most recently dropped 
filename. 
Dropped File Names
$dropped_filenames
Displays list of dropped files (similar to 
$filenames
.
Dropped File Types
$dropped_filetypes
Displays list of dropped file types (similar to 
$filetypes)
.
Envelope Sender
$EnvelopeFrom
Returns the Envelope Sender (Envelope 
From, <MAIL FROM>) of the message.
Envelope Recipients
$EnvelopeRecipients
Returns all Envelope Recipients (Envelope 
To, <RCPT TO>) of the message. 
File Names
$filenames
Returns a comma-separated list of the 
message’s attachments’ filenames.
File Sizes
$filesizes
Returns a comma-separated list of the 
message’s attachments file sizes.
File Types
$filetypes
Returns a comma-separated list of the 
message's attachments' file types.
Filter Name
$FilterName
Returns the name of the filter being 
processed. 
GMTimeStamp
$GMTimeStamp
Returns the current time and date, as would 
be found in the Received: line of an email 
message, using GMT.
HAT Group Name
$Group
Returns the name of the sender group the 
sender matched on when injecting the 
message. If the sender group had no name, 
the string “
>Unknown<
” is inserted.
Matched Content
$MatchedContent
Returns the content that triggered a scanning 
filter rule (including filter rules such as 
body-contains
 and content dictionaries).