Руководство Пользователя для Cisco Cisco Email Security Appliance X1050
6-56
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
OL-25137-01
Chapter 6 Using Message Filters to Enforce Email Policies
To send to multiple hosts, you can call the
bcc()
action multiple times:
The bcc-scan() Action
The
bcc-scan
action functions similarly to the bcc action, except that the message that is sent is treated
as a brand new message and is therefore sent through the entire email pipeline.
Quarantine and Duplicate Actions
The
quarantine(‘quarantine_name’)
action flags a message for inclusion into a queue called a
quarantine. For more information about quarantines, see “Quarantines” in the Cisco IronPort AsyncOS
for Email Daily Management Guide. The
for Email Daily Management Guide. The
duplicate-quarantine
(
‘quarantine_name’)
action
immediately places a copy of the message into the specified quarantine and the original message
continues through the email pipeline. The quarantine name is case sensitive.
continues through the email pipeline. The quarantine name is case sensitive.
When flagged for quarantine, the message continues through the rest of the email pipeline. When the
message reaches the end of the pipeline, if the message has been flagged for one or more quarantines
then it enters those queues. Otherwise, it is delivered. Note that if the message does not reach the end of
the pipeline, it is not placed in a quarantine.
message reaches the end of the pipeline, if the message has been flagged for one or more quarantines
then it enters those queues. Otherwise, it is delivered. Note that if the message does not reach the end of
the pipeline, it is not placed in a quarantine.
Accordingly, if a message filter contains a
quarantine()
action followed by a
bounce()
or
drop()
action, the message will not enter the quarantine, since the final action prevents the message from
reaching the end of the pipeline. The same is true if a message filter includes a quarantine action, but the
message is later dropped by anti-spam or anti-virus scanning, or a content filter. The
reaching the end of the pipeline. The same is true if a message filter includes a quarantine action, but the
message is later dropped by anti-spam or anti-virus scanning, or a content filter. The
skip_filters()
final action causes the message to skip any remaining message filters, but content filters may still apply.
For example, if a message filter flags a message for quarantine and also includes the
For example, if a message filter flags a message for quarantine and also includes the
skip_filters()
final action, the message skips all remaining message filters and will be quarantined, unless another
action in the email pipeline causes the message to be dropped.
action in the email pipeline causes the message to be dropped.
multiplealthosts:
if (recv-listener == "IncomingMail")
{
insert-header('X-ORIGINAL-IP', '$remote_ip');
bcc ('$EnvelopeRecipients', '$Subject', '$EnvelopeFrom', '10.2.3.4');
bcc ('$EnvelopeRecipients', '$Subject', '$EnvelopeFrom', '10.2.3.5');
bcc ('$EnvelopeRecipients', '$Subject', '$EnvelopeFrom', '10.2.3.6');
}
momFilter:
if ((mail-from == '^johnny$') and (rcpt-to == '^sue$'))
{
bcc-scan('mom@home.org');
}