Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1138
 
9-58
Cisco AsyncOS 8.5 for Email User Guide
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Actions
To send to multiple hosts, you can call the 
bcc()
 action multiple times:
The bcc-scan() Action
The 
bcc-scan
 action functions similarly to the bcc action, except that the message that is sent is treated 
as a brand new message and is therefore sent through the entire email pipeline.
Quarantine and Duplicate Actions
The 
quarantine(‘quarantine_name’)
 action flags a message for inclusion into a queue called a 
quarantine. For more information about quarantines, see the “Quarantines” chapter. The 
duplicate-quarantine
(
‘quarantine_name’)
action immediately places a copy of the message into the 
specified quarantine and the original message continues through the email pipeline. The quarantine name 
is case sensitive.
When flagged for quarantine, the message continues through the rest of the email pipeline. When the 
message reaches the end of the pipeline, if the message has been flagged for one or more quarantines 
then it enters those queues. Otherwise, it is delivered. Note that if the message does not reach the end of 
the pipeline, it is not placed in a quarantine.
Accordingly, if a message filter contains a 
quarantine()
 action followed by a 
bounce()
 or 
drop()
 
action, the message will not enter the quarantine, since the final action prevents the message from 
reaching the end of the pipeline. The same is true if a message filter includes a quarantine action, but the 
message is later dropped by anti-spam or anti-virus scanning, or a content filter. The 
skip-filters()
 
action causes the message to skip any remaining message filters, but content filters may still apply. For 
example, if a message filter flags a message for quarantine and also includes the 
skip-filters()
 action, 
the message skips all remaining message filters and will be quarantined, unless another action in the 
email pipeline causes the message to be dropped.
multiplealthosts:
   if (recv-listener == "IncomingMail")
   {
    insert-header('X-ORIGINAL-IP', '$remote_ip');
    bcc ('$EnvelopeRecipients', '$Subject', '$EnvelopeFrom', '10.2.3.4');
    bcc ('$EnvelopeRecipients', '$Subject', '$EnvelopeFrom', '10.2.3.5');
    bcc ('$EnvelopeRecipients', '$Subject', '$EnvelopeFrom', '10.2.3.6');
   }
momFilter:
   if ((mail-from == '^johnny$') and (rcpt-to == '^sue$'))   
   {
        bcc-scan('mom@home.org');
   }