User Guide

9-67
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Actions
Alter Source Host (Virtual Gateway address) Action
The alt-src-host action changes the source host for the message to the source specified. The source
host consists of the IP interface or group of IP interfaces that the messages should be delivered from. If
a group of IP interfaces is selected, the system round-robins through all of the IP interfaces within the
group as the source interface when delivering email. In essence, this allows multiple Virtual Gateway
addresses to be created on a single Cisco Email Security appliance. For more information, see
Configuring Mail Gateways for all Hosted Domains Using Virtual Gateway™ Technology, page 24-59.
The IP interface may only be changed to an IP interface or interface group currently configured in the
system. the following filter creates a Virtual Gateway using the outbound (delivery) IP interface
outbound2 for all messages received from a remote host with the IP address 1.2.3.4.
The following filter uses the IP interface group
Group1 for all messages received from a remote host with
the IP address
1.2.3.4.
Archive Action
The archive action saves a copy of the original message, including all message headers and recipients
into an mbox-format file on the appliance. The action takes a parameter that is the name of the log file
in which to save the message. The system automatically creates a log subscription with the specified
filename when you create the filter, or you can also specify an existing filter log file. After the filter and
the filter log file are created, the filter log options may then be edited with the
filters -> logconfig
subcommand.
Note The logconfig command is a subcommand of filters. See Using the CLI to Manage Message Filters,
page 9-87 for a full description of how to use this subcommand.
alt-mailhost('192.168.12.5');
}
externalFilter:
if(remote-ip == '1.2.3.4')
{
alt-src-host('outbound2');
}
groupFilter:
if(remote-ip == '1.2.3.4')
{
alt-src-host('Group1');
}