Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1197
 
9-51
User Guide for AsyncOS 9.7 for Cisco Email Security Appliances
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Actions
Drop Attachments 
by Name
drop-attachments-by-na
me
Drop all attachments on messages that have a filename 
that match the given regular expression. Archive file 
attachments (zip, tar) will be dropped if they contain a file 
that matches. See 
Drop Attachments 
by Type
drop-attachments-by-ty
pe
Drop all attachments on messages that have a MIME type, 
determined by either the given MIME type or the file 
extension. Archive file attachments (zip, tar) will be 
dropped if they contain a file that matches. See 
.
Drop Attachments 
by File Type
drop-attachments-by-fi
letype
Drop all attachments on messages that match the given 
“fingerprint” of the file. Archive file attachments (zip, tar) 
will be dropped if they contain a file that matches. For 
more information, see 
.
Drop Attachments 
by MIME Type 
drop-attachments-by-mi
metype
Drop all attachments on messages that have a given 
MIME type. This action does not attempt to ascertain the 
MIME type by file extension and so it also does not 
examine the contents of archives. See 
.
Drop Attachments 
by Size 
drop-attachments-by-si
ze
Drop all attachments on the message that, in raw encoded 
form, are equal to or greater than the size (in bytes) given. 
Note that for archive or compressed files, this action does 
not examine the uncompressed size, but rather the size of 
the actual attachment prior to any decoding. See 
Drop Attachments 
by Content
drop-attachments-where
-contains
Drop all attachments on message that contain the regular 
expression. Does the pattern occur the minimum number 
of times you specified for the threshold value? Archive 
files (zip, tar) will be dropped if any of the files they 
contain match the regular expression pattern. See 
The optional comment serves as the means to modify the 
text used to replace the attachment that was dropped. 
Attachment footers simply append to the message.
Drop Attachments 
by Dictionary 
Matches
drop-attachments-where
-dictionary-match
Strip attachments based on matches to dictionary terms. If 
the terms in the MIME parts considered to be an 
attachment match a dictionary term (and the user-defined 
threshold is met), the attachment is stripped from the 
email. See 
Add Footer
add-footer(footer-name
)
Add disclaimer text as a footer to the message. See 
“Message Disclaimer Stamping” in the “Text Resources” 
chapter for more information. 
Table 9-5
Message Filter Actions
Action Syntax 
Description