Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1094
 
9-11
Cisco AsyncOS 8.0.1 for Email User Guide
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Rules
Workqueue count
workqueue-count
Is the work queue count equal to, less than, or 
greater than the specified value? See 
.
Body Scanning
body-contains(<regular 
expression>)
Does the message contain text or an attachment 
that matches a specified pattern? Does the 
pattern occur the minimum number of times you 
specified for the threshold value?
The engine scans delivery-status parts and 
associated attachments. 
See 
.
Body Scanning
only-body-contains(<regular 
expression>)
Does the message body contain text that matches 
a specified pattern? Does the pattern occur the 
minimum number of times you specified for the 
threshold value? Attachments are not scanned. 
See 
.
Encryption 
Detection
encrypted
Is the message encrypted? See 
.
Attachment 
Filename
a
attachment-filename
Does the message contain an attachment with a 
filename that matches a specific pattern? See 
Attachment Type
a
attachment-type
Does the message contain an attachment of a 
particular MIME type? See 
.
Attachment File
a
 
Type
attachment-filetype
Does the message contain an attachment of a file 
type that matches a specific pattern based on its 
fingerprint (similar to a UNIX 
file
 command)? 
If the attachment is an Excel or Word document, 
you can also search for the following embedded 
file types: .exe , .dll, .bmp, .tiff, .pcx, .gif, .jpeg, 
png, and Photoshop images.
You must enclose the file type in quotes to create 
a valid filter. You can use single or double 
quotes. For example, to search for .exe 
attachments, use the following syntax: 
if (attachment-filetype == "exe")
For more information, see 
Table 9-2
Message Filter Rules
Rule Syntax 
Description