Cisco Cisco Email Security Appliance C170 Guia Do Utilizador
9-49
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Rules
•
Add a disclaimer in Russian to the messages that are in Russian
•
Drop the messages whose language could not be determined
Use the
message-language
rule to take message actions depending on the language of the message
subject and body.
Note
This rule will not check for the language in attachments and headers.
How Does Language Detection Work
Cisco Email Security appliance uses the built-in language detection engine to detect the language in a
message. The appliance extracts the subject and the message body and passes it to the language detection
engine.
message. The appliance extracts the subject and the message body and passes it to the language detection
engine.
The language detection engine determines the probability of each language in the extracted text and
passes it back to the appliance. The appliance considers the language with the highest probability as the
language of the message. The appliance considers the language of the message as ‘undetermined’ in one
of the following scenarios:
passes it back to the appliance. The appliance considers the language with the highest probability as the
language of the message. The appliance considers the language of the message as ‘undetermined’ in one
of the following scenarios:
•
If the detected language is not supported by Cisco Email Security appliance
•
If the appliance is unable to detect the language of the message
•
If the total size of the extracted text sent to the language detection engine is less than 50 bytes.
Message Filter Syntax
<msg_filter_name>: if (message-language <operator> "<language1>, <language2>,...,
<language n>") {<action>}
Where:
•
msg_filter_name
is the name of this message filter.
•
operator
is
==
or
!=
.
•
language
is the value of message language that you want to specify in this message filter. Separate
multiple entries with commas. For a list of supported message languages and values, look at the
Message Language condition in a content filter. Values are enclosed with brackets ([ and ]).
Message Language condition in a content filter. Values are enclosed with brackets ([ and ]).
•
action
is any message filter action.
Examples
The following example shows how to drop the messages whose language could not be determined:
DropMessagesWithUndeterminedLanguage: if (message-language == "unknown") { drop(); }
The following example shows how to add a disclaimer in Russian to the messages in Russian:
ussianDisclaimerRule: if (message-language == "ru") { add-heading("RussianDisclaimer");
Forged Email Detection Rule
You may want to detect fraudulent messages with forged sender address (From: header) and perform
actions on such messages.
actions on such messages.