Cisco Cisco Email Security Appliance X1050 Guida Utente
9-61
Cisco AsyncOS 8.5.6 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Actions
The
notify
action also supports up to three additional, optional arguments that allow you to specify the
subject header, the Envelope Sender, and a pre-defined text resource to use for the notification message.
These parameters must appear in order, so a subject must be provided if the Envelope Sender is to be set
or a notification template specified.
These parameters must appear in order, so a subject must be provided if the Envelope Sender is to be set
or a notification template specified.
The subject parameter may contain action variables (see
) that will be
replaced with data from the original message. By default, the subject is set to
Message Notification
.
The Envelope Sender parameter may be any valid email address, or alternatively, may be the action
variable
variable
$EnvelopeFrom
, which will set the return path of the message to the same as the original
message
The notification template parameter is the name of an existing notification template. For more
information, see
information, see
.
This example extends the previous one, but changes the subject to look like
[bigFilter] Message too
large
, sets the return path to be the original sender, and uses the “message.too.large” template:
You can also use the $MatchedContent action variable to notify senders or administrators that a content
filter was triggered. The $MatchedContent action variable displays the content that triggered the filter.
For example, the following filter sends a notification to an administrator if the email contains ABA
account information.
filter was triggered. The $MatchedContent action variable displays the content that triggered the filter.
For example, the following filter sends a notification to an administrator if the email contains ABA
account information.
Related Topics
•
drop();
}
bigFilter:
if (body-size >= 4M)
{
notify('admin@example.com', '[$FilterName] Message too large',
'$EnvelopeFrom', 'message.too.large');
drop();
}
ABA_filter:
if (body-contains ('*aba')){
notify('admin@example.com','[$MatchedContent]Account Information Displayed');
}