Cisco Cisco Email Security Appliance C170 Guida Utente
9-11
Cisco AsyncOS 8.0.1 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Rules
Workqueue count
workqueue-count
Is the work queue count equal to, less than, or
greater than the specified value? See
greater than the specified value? See
.
Body Scanning
body-contains(<regular
expression>)
Does the message contain text or an attachment
that matches a specified pattern? Does the
pattern occur the minimum number of times you
specified for the threshold value?
that matches a specified pattern? Does the
pattern occur the minimum number of times you
specified for the threshold value?
The engine scans delivery-status parts and
associated attachments.
associated attachments.
See
.
Body Scanning
only-body-contains(<regular
expression>)
Does the message body contain text that matches
a specified pattern? Does the pattern occur the
minimum number of times you specified for the
threshold value? Attachments are not scanned.
See
a specified pattern? Does the pattern occur the
minimum number of times you specified for the
threshold value? Attachments are not scanned.
See
.
Encryption
Detection
Detection
encrypted
Is the message encrypted? See
.
Attachment
Filename
Filename
a
attachment-filename
Does the message contain an attachment with a
filename that matches a specific pattern? See
filename that matches a specific pattern? See
Attachment Type
a
attachment-type
Does the message contain an attachment of a
particular MIME type? See
particular MIME type? See
.
Attachment File
a
Type
attachment-filetype
Does the message contain an attachment of a file
type that matches a specific pattern based on its
fingerprint (similar to a UNIX
type that matches a specific pattern based on its
fingerprint (similar to a UNIX
file
command)?
If the attachment is an Excel or Word document,
you can also search for the following embedded
file types: .exe , .dll, .bmp, .tiff, .pcx, .gif, .jpeg,
png, and Photoshop images.
you can also search for the following embedded
file types: .exe , .dll, .bmp, .tiff, .pcx, .gif, .jpeg,
png, and Photoshop images.
You must enclose the file type in quotes to create
a valid filter. You can use single or double
quotes. For example, to search for .exe
attachments, use the following syntax:
a valid filter. You can use single or double
quotes. For example, to search for .exe
attachments, use the following syntax:
if (attachment-filetype == "exe")
For more information, see
Table 9-2
Message Filter Rules
Rule Syntax
Description