Cisco Cisco Email Security Appliance C190 Guia Do Utilizador
Chapter 6 Using Message Filters to Enforce Email Policies
6-142
Cisco IronPort AsyncOS 7.5 for Email Advanced Configuration Guide
OL-25137-01
Archive and Drop Messages Filter
Log and drop only the messages that have matching filetypes:
Large “To:” Header Filter
Find messages with very large “To” headers.
Use the
archive()
line for verification of proper action, with drop() enabled or
disabled for extra safety:
drop ();
}
drop_attachments:
if (mail-from != "user@example.com") AND (attachment-filename ==
'(?i)\\.(asp|bas|bat|cmd|cpl|exe|hta|ins|isp|js)$')
{
archive("Drop_Attachments");
insert-header("X-Filter", "Dropped by: $FilterName MID: $MID");
drop-attachments-by-name("\\.(asp|bas|bat|cmd|cpl|exe|hta|ins|isp|js)$");
}
toTooBig:
if(header('To') == "^.{500,}") {
archive('tooTooBigdropped');
drop();
}