Cisco Cisco Email Security Appliance C160 ユーザーガイド

The 

notify

 and 

notify-copy

 actions send an email summary of the message to the specified email 

address. The 

notify-copy

 action also sends a copy of the original message, similar to the 

bcc-scan

 

action. The notification summary contains:

The contents of the Envelope Sender and Envelope Recipient (

MAIL FROM

 and 

RCPT TO

) directives 

from the mail transfer protocol conversation for the message. 

The message headers of the message. 

The name of the message filter that matched the message. 

You can specify the recipient, subject line, from address, and notification template. the following filter 
selects messages with sizes larger than 4 megabytes, sends a notification email of each matching 
message to 

admin@example.com

, and finally discards the message:

Or

The Envelope Recipient parameter may be any valid email address (for example, 

admin@example.com

 in 

the example above), or alternatively, may be the action variable 

$EnvelopeRecipients 

(see 

), which specifies all Envelope Recipients of the message:

bigFilter:

   if(body-size >= 4M)

   {

        notify('admin@example.com');

        drop();

   }

bigFilterCopy:

   if(body-size >= 4M)

   {

        notify-copy('admin@example.com');

        drop();

   }

bigFilter:

   if(body-size >= 4M)

   {

        notify('$EnvelopeRecipients');