Cisco Cisco Email Security Appliance C160 Mode D'Emploi

The message filter actions described in 

 are non-final actions. (Attachments are dropped and 

the message processing continues.)

The optional comment is text that is added to the message, much like a footer, and it can contain Message 
Filter Action Variables (see 

).

drop-attachments-by-name 

(<regular expression>[, 

<optional comment>]) 

Drops all attachments on messages that have a 
filename that matches the given regular 
expression. Archive file attachments (zip, tar) 
will be dropped if they contain a file that 
matches. See 

.

drop-attachments-by-type 

(<MIME type>[, <optional 

comment>]) 

Drops all attachments on messages that have a 
MIME type, determined by either the given 
MIME type or the file extension. Archive file 
attachments (zip, tar) will be dropped if they 
contain a file that matches. 

drop-attachments-by-filetype 

(<fingerprint name>[,  

<optional comment>])

Drops all attachments on messages that match 
the given “fingerprint” of the file. Archive file 
attachments (zip, tar) will be dropped if they 
contain a file that matches. For more 
information, see 

.

drop-attachments-by-mimetype 

(<MIME type>[,  <optional 

comment>]) 

Drops all attachments on messages that have a 
given MIME type. This action does not attempt 
to ascertain the MIME type by file extension 
and so it also does not examine the contents of 
archives.

drop-attachments-by-size 

(<number>[, <optional 

comment>]) 

Drops all attachments on the message that, in 
raw encoded form, are equal to or greater than 
the size (in bytes) given. Note that for archive 
or compressed files, this action does not 
examine the uncompressed size, but rather the 
size of the actual attachment itself.

drop-attachments-where-contai

ns (<regular expression>[, 

<optional comment>]) 

Drops all attachments on message that contain 
the regular expression. Archive files (zip, tar) 
will be dropped if any of the files they contain 
match the regular expression pattern.

drop-attachments-where-dictio

nary-match(<dictionary name>)

This filter action strips attachments based on 
matches to dictionary terms. If the terms in the 
MIME parts considered to be an attachment 
match a dictionary term (and the user-defined 
threshold is met), the attachment is stripped 
from the email.  See 

.