Cisco Cisco Email Security Appliance C680 Mode D'Emploi
Chapter 6 Using Message Filters to Enforce Email Policies
6-44
Cisco IronPort AsyncOS 7.5 for Email Advanced Configuration Guide
OL-25137-01
Attachment Type Rule
The
attachment-type
rule checks the MIME types of each attachment in a
message to see if it matches the given pattern. The pattern must be of the same
form used in the
form used in the
scanconfig
command as described in
, and so may have either side of the slash (
/
) replaced by
an asterisk as a wildcard. If the message contains an attachment that matches this
specified MIME type, this rule returns “true.”
specified MIME type, this rule returns “true.”
Because this function requires the message to be scanned, it obeys all of the
options defined by the
options defined by the
scanconfig
command as described in
.
for more information on message filter rules
you can use to manipulate attachments to messages.
The following filter checks all email sent through the listener, and if a message
contains an attachment with a MIME type of
contains an attachment with a MIME type of
video/*
, the message is bounced:
Attachment Filename Rule
The
attachment-filename
rule checks the filenames of each attachment in a
message to see if it matches the given regular expression. This comparison is
case-sensitive. The comparison is, however sensitive to whitespace so if the
filename has encoded whitespace at the end, the filter will skip the attachment. If
one of the message’s attachments matches the filename, this rule returns “true.”
case-sensitive. The comparison is, however sensitive to whitespace so if the
filename has encoded whitespace at the end, the filter will skip the attachment. If
one of the message’s attachments matches the filename, this rule returns “true.”
Please note the following points:
•
Each attachment’s filename is captured from the MIME headers. The
filename in the MIME header may contain trailing spaces.
filename in the MIME header may contain trailing spaces.
•
If an attachment is an archive, the Cisco IronPort appliance will harvest the
filenames from inside the archive and apply
filenames from inside the archive and apply
scanconfig
rules (see
bounce_video_clips:
if (attachment-type == 'video/*') {
bounce();
}