Cisco Cisco Email Security Appliance C650 Guia Do Utilizador

Página de 1124
 
9-44
Cisco AsyncOS 8.0 for Email User Guide
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Actions
Skip Outbreak 
Filter Scanning
skip-vofcheck
Ensure that this message is not processed by the Outbreak 
Filters scanning. See 
.
Drop Attachments 
by Name
drop-attachments-by-n
ame
Drop all attachments on messages that have a filename 
that match the given regular expression. Archive file 
attachments (zip, tar) will be dropped if they contain a file 
that matches. See 
.
Drop Attachments 
by Type
drop-attachments-by-t
ype
Drop all attachments on messages that have a MIME type, 
determined by either the given MIME type or the file 
extension. Archive file attachments (zip, tar) will be 
dropped if they contain a file that matches. See 
Drop Attachments 
by File Type
drop-attachments-by-f
iletype
Drop all attachments on messages that match the given 
“fingerprint” of the file. Archive file attachments (zip, 
tar) will be dropped if they contain a file that matches. For 
more information, see 
Drop Attachments 
by MIME Type 
drop-attachments-by-m
imetype
Drop all attachments on messages that have a given 
MIME type. This action does not attempt to ascertain the 
MIME type by file extension and so it also does not 
examine the contents of archives. See 
.
Drop Attachments 
by Size 
drop-attachments-by-s
ize
Drop all attachments on the message that, in raw encoded 
form, are equal to or greater than the size (in bytes) given. 
Note that for archive or compressed files, this action does 
not examine the uncompressed size, but rather the size of 
the actual attachment prior to any decoding. See 
.
Drop Attachments 
by Content
drop-attachments-wher
e-contains
Drop all attachments on message that contain the regular 
expression. Does the pattern occur the minimum number 
of times you specified for the threshold value? Archive 
files (zip, tar) will be dropped if any of the files they 
contain match the regular expression pattern. See 
.
The optional comment serves as the means to modify the 
text used to replace the attachment that was dropped. 
Attachment footers simply append to the message.
Drop Attachments 
by Dictionary 
Matches
drop-attachments-wher
e-dictionary-match
Strip attachments based on matches to dictionary terms. If 
the terms in the MIME parts considered to be an 
attachment match a dictionary term (and the user-defined 
threshold is met), the attachment is stripped from the 
email. See 
.
Table 9-5
Message Filter Actions
Action Syntax 
Description