Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

The 

attachment-type

 rule checks the MIME types of each attachment in a 

message to see if it matches the given pattern. The pattern must be of the same 
form used in the 

scanconfig

 command as described in 

, and so may have either side of the slash (

/

) replaced by 

an asterisk as a wildcard. If the message contains an attachment that matches this 
specified MIME type, this rule returns “true.”

Because this function requires the message to be scanned, it obeys all of the 
options defined by the 

scanconfig

 command as described in 

. 

 for more information on message filter rules 

you can use to manipulate attachments to messages.

The following filter checks all email sent through the listener, and if a message 
contains an attachment with a MIME type of 

video/*

, the message is bounced:

The 

attachment-filename

 rule checks the filenames of each attachment in a 

message to see if it matches the given regular expression. This comparison is 
case-sensitive. The comparison is, however sensitive to whitespace so if the 
filename has encoded whitespace at the end, the filter will skip the attachment. If 
one of the message’s attachments matches the filename, this rule returns “true.”

Please note the following points: 

Each attachment’s filename is captured from the MIME headers. The 
filename in the MIME header may contain trailing spaces.

If an attachment is an archive, the Cisco IronPort appliance will harvest the 
filenames from inside the archive and apply 

scanconfig

 rules (see 

) accordingly. 

bounce_video_clips:

   if (attachment-type == 'video/*') {

        bounce();

   }