User Guide

9-48
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Actions
Message Filter Actions
The purpose of message filters is to perform actions on selected messages.
The two types of actions are:
• Final actions — such as deliver, drop, and bounce — end the processing of a message, and permit
no further processing through subsequent filters.
• Non-final actions perform an action which permits the message to be processed further.
Non-final message filter actions are cumulative. If a message matches multiple filters where each filter
specifies a different action, then all actions are accumulated and enforced. However, if a message
matches multiple filters specifying the same action, the prior actions are overridden and the final filter
action is enforced.
Related Topics
• Filter Actions Summary Table, page 9-48
• Action Variables, page 9-55
• Matched Content Visibility, page 9-57
• Description and Examples of Message Filter Actions, page 9-57
Filter Actions Summary Table
Message filters can apply the following actions shown in Table 9-5 to an email message.
Table 9-5 Message Filter Actions
Action Syntax Description
Alter source host
alt-src-host Change the source hostname and IP interface (Virtual
Gateway address) to send the message. See Alter Source
Host (Virtual Gateway address) Action, page 9-67.
Alter recipient
alt-rcpt-to Change a recipient of the message. See Alter Recipient
Action, page 9-65.
Alter mailhost
alt-mailhost Change the destination mail host for the message. See
Alter Delivery Host Action, page 9-66.
Notify
notify Report this message to another recipient. See Notify and
Notify-Copy Actions, page 9-60.
Notify Copy
notify-copy Perform just like the notify action, but also sends a copy
as with the
bcc-scan action. See Notify and Notify-Copy
Actions, page 9-60.
Blind carbon copy
bcc Copy this message (message replication) anonymously to
another recipient. See Blind Carbon Copy Actions,
page 9-62.
Blind carbon copy
with scan
bcc-scan Copy this message anonymously to another recipient, and
process that message through the work queue as if it were
a new message. See Blind Carbon Copy Actions,
page 9-62.