Cisco Cisco Email Security Appliance C160 Mode D'Emploi
9-57
Cisco AsyncOS 8.0.1 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Actions
In the following example, the message is sent to the Policy quarantine if the message contains any words
within the dictionary named “secret_word.”
within the dictionary named “secret_word.”
In the following example, suppose a company has an official policy to drop all .mp3 file attachments. If
an inbound message has a .mp3 attachment, the attachment is stripped and the remaining message
(original body and remaining attachments) is sent to the original recipient. Another copy of the original
message with all attachments will be quarantined (sent to the Policy quarantine). If it is necessary to
receive the blocked attachment(s), the original recipient would then request that the message be released
from the quarantine.
an inbound message has a .mp3 attachment, the attachment is stripped and the remaining message
(original body and remaining attachments) is sent to the original recipient. Another copy of the original
message with all attachments will be quarantined (sent to the Policy quarantine). If it is necessary to
receive the blocked attachment(s), the original recipient would then request that the message be released
from the quarantine.
Alter Recipient Action
The
alt-rcpt-to
action changes all recipients of the message to the specified recipient upon delivery.
The following filter sends all messages with an Envelope Recipient address that contain
.freelist.com
and changes all recipients for the message to
system-lists@myhost.com
:
Alter Delivery Host Action
The
alt-mailhost
action changes the IP address for all recipients of the selected message to the numeric
IP address or hostname given.
quarantine_codenames:
if (dictionary-match ('secret_words'))
{
quarantine('Policy');
}
strip_all_mp3s:
if (attachment-filename == '(?i)\\.mp3$') {
duplicate-quarantine('Policy');
drop-attachments-by-name('(?i)\\.mp3$');
}
freelistFilter:
if(rcpt-to == '\\.freelist\\.com$')
{
alt-rcpt-to('system-lists@myhost.com');
}