Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 568
Chapter 6      Using Message Filters to Enforce Email Policies
6-108
Cisco IronPort AsyncOS 7.5 for Email Advanced Configuration Guide
OL-25137-01
them based on the fingerprint of the file, and not just the three-letter filename 
extension. Note also that you can specify a single filetype (“mpeg”) or you can 
refer to all of the members of the filetype (“Media”):
In the following example, the same “executable” group of attachments (
.exe
.dll
, and 
.scr
) are stripped from messages whose Envelope Sender is not within 
the domain 
example.com
In the following example, a specific member of a file type (“wmf”) as well as a 
the same “executable” group of attachments (
.exe
.dll
, and 
.scr
) are stripped 
from messages whose Envelope Sender is not within the domain 
example.com
.
strip_all_exes: if (true) {
                    drop-attachments-by-filetype ('Executable', “Removed 
attachment: $dropped_filename”);
                }
strip_inbound_exes: if (mail-from != "@example\\.com$") {
                        drop-attachments-by-filetype ('Executable');
                     } 
strip_inbound_exes_and_wmf: if (mail-from != "@example\\.com$") {
                        drop-attachments-by-filetype ('Executable');
                        drop-attachments-by-filetype ('x-wmf');
                     }