Cisco Cisco Email Security Appliance X1050 Guida Utente

Pagina di 570
Chapter 6      Using Message Filters to Enforce Email Policies
6-378
Cisco IronPort AsyncOS 7.3 for Email Advanced Configuration Guide
OL-23081-01
This example expands the previous one by setting the subject to be 
[Bcc] 
<original subject>
, and the return path set to 
badbounce@home.org
:
momFilter:
   if ((mail-from == '^johnny$') and (rcpt-to == '^sue$'))   
   {
        bcc('mom@home.org', '[Bcc] $Subject', 'badbounce@home.org');
   }
The alt-mailhost is the fourth parameter:
momFilterAltM:
   if ((mail-from == '^johnny$') and (rcpt-to == '^sue$'))
   {
      bcc('mom@home.org', '[Bcc] $Subject', '$EnvelopeFrom', 
'momaltmailserver.example.com');
   }
Warning
The 
Bcc()
notify()
, and 
bounce()
 filter actions can allow viruses through 
your network. The blind carbon copy filter action creates a new message which 
is a full copy of the original message. The notify filter action creates a new 
message that contains the headers of the original message. While it is rare, 
headers can contain viruses. The bounce filter action creates a new message 
which contains the first 10k of the original message. In all three cases, the new 
message will not be processed by anti-virus or anti-spam scanning.
To send to multiple hosts, you can call the 
bcc()
 action multiple times:
multiplealthosts:
   if (recv-listener == "IncomingMail")