Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

The 

bcc-scan

 action functions similarly to the bcc action, except that the message 

that is sent is treated as a brand new message and is therefore sent through the 
entire email pipeline.

momFilter:

   if ((mail-from == '^johnny$') and (rcpt-to == '^sue$'))   

   {

        bcc-scan('mom@home.org');

   }

The 

quarantine(‘quarantine_name’)

 action flags a message for inclusion into a 

queue called a quarantine. For more information about quarantines, see 
“Quarantines” in the Cisco IronPort AsyncOS for Email Daily Management 
Guide. The 

duplicate-quarantine

(

‘quarantine_name’)

action immediately 

places a copy of the message into the specified quarantine and the original 
message continues through the email pipeline. The quarantine name is case 
sensitive.

   {

    insert-header('X-ORIGINAL-IP', '$remote_ip');

    bcc ('$EnvelopeRecipients', '$Subject', '$EnvelopeFrom', '10.2.3.4');

    bcc ('$EnvelopeRecipients', '$Subject', '$EnvelopeFrom', '10.2.3.5');

    bcc ('$EnvelopeRecipients', '$Subject', '$EnvelopeFrom', '10.2.3.6');

   }