Cisco Cisco Email Security Appliance X1050 Guida Utente

Pagina di 570
Chapter 6      Using Message Filters to Enforce Email Policies
6-404
Cisco IronPort AsyncOS 7.3 for Email Advanced Configuration Guide
OL-23081-01
them based on the fingerprint of the file, and not just the three-letter filename 
extension. Note also that you can specify a single filetype (“mpeg”) or you can 
refer to all of the members of the filetype (“Media”):
strip_all_exes: if (true) {
                    drop-attachments-by-filetype ('Executable', “Removed 
attachment: $dropped_filename”);
                }
In the following example, the same “executable” group of attachments (
.exe
.dll
, and 
.scr
) are stripped from messages whose Envelope Sender is not within 
the domain 
example.com
strip_inbound_exes: if (mail-from != "@example\\.com$") {
                        drop-attachments-by-filetype ('Executable');
                     } 
In the following example, a specific member of a file type (“wmf”) as well as a 
the same “executable” group of attachments (
.exe
.dll
, and 
.scr
) are stripped 
from messages whose Envelope Sender is not within the domain 
example.com
.
strip_inbound_exes_and_wmf: if (mail-from != "@example\\.com$") {
                        drop-attachments-by-filetype ('Executable');
                        drop-attachments-by-filetype ('x-wmf');
                     }