IronPort - advanced configuration guide

6-44
Table 6-5 Message Filter Actions
Action Syntax Description
Skip Outbreak
Filter Scanning
Drop Attachments
by Name
Drop Attachments
by Type
Drop Attachments
by File Type
Drop Attachments
by MIME Type
Drop Attachments
by Size
Drop Attachments
by Content
Drop Attachments
by Dictionary
Matches
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Chapter 6 Using Message Filters to Enforce Email Policies
skip-vofcheck Ensure that this message is not processed by the Outbreak
Filters scanning. See Bypass Anti-Virus System Action,
page 6-64.
drop-attachments-by-n
ame
drop-attachments-by-t
ype
drop-attachments-by-f
iletype
drop-attachments-by-m
imetype
drop-attachments-by-s
ize
drop-attachments-wher
e-contains
drop-attachments-wher
e-dictionary-match
Drop all attachments on messages that have a filename
that match the given regular expression. Archive file
attachments (zip, tar) will be dropped if they contain a file
that matches. See Examples of Attachment Scanning
Message Filters, page 6-72.
Drop all attachments on messages that have a MIME type,
determined by either the given MIME type or the file
extension. Archive file attachments (zip, tar) will be
dropped if they contain a file that matches. See Examples
of Attachment Scanning Message Filters, page 6-72.
Drop all attachments on messages that match the given
“fingerprint” of the file. Archive file attachments (zip, tar)
will be dropped if they contain a file that matches. For
more information, see Attachment Scanning, page 6-65.
Drop all attachments on messages that have a given
MIME type. This action does not attempt to ascertain the
MIME type by file extension and so it also does not
examine the contents of archives. See Examples of
Attachment Scanning Message Filters, page 6-72.
Drop all attachments on the message that, in raw encoded
form, are equal to or greater than the size (in bytes) given.
Note that for archive or compressed files, this action does
not examine the uncompressed size, but rather the size of
the actual attachment prior to any decoding. See
Examples of Attachment Scanning Message Filters,
page 6-72.
Drop all attachments on message that contain the regular
expression. Does the pattern occur the minimum number
of times you specified for the threshold value? Archive
files (zip, tar) will be dropped if any of the files they
contain match the regular expression pattern. See
Examples of Attachment Scanning Message Filters,
page 6-72.
The optional comment serves as the means to modify the
text used to replace the attachment that was dropped.
Attachment footers simply append to the message.
Strip attachments based on matches to dictionary terms. If
the terms in the MIME parts considered to be an
attachment match a dictionary term (and the user-defined
threshold is met), the attachment is stripped from the
email. See Examples of Attachment Scanning Message
Filters, page 6-72.
OL-25137-01