User Guide

Additional setup 53
7.7. Selecting objects to be filtered
and assigning actions
In addition to processing e-mails and scanning them for viruses, you can filter
them. The filtering procedure analyzes message objects and can be performed
according to MIME type, name, and size of attachments.
Note that this version of the application analyzes message
attachments by headers only during filtration! The contents of
attachments are not analyzed.
Below, we discuss all filtering criteria in more detail:
• To enable message filtering, you MUST SPECIFY AT LEAST ONE NAME
OR SIZE OF ATTACHMENTS as the value of the IncludeMime
IncludeName and IncludeSize parameters.
• The type of message objects from the mass of the IncludeMime,
IncludeName and IncludeSize objects to be excluded from filtering (for
example, those that cannot potentially contain viruses or other malicious
code) must be specified as the values of the ExcludeMime,
ExcludeName and ExcludeSize parameters in the [group.filter] section.
All other types of attachments will be filtered and appropriately handled.
If you want to specify several values for filtration parameters, list them
separating the entries with commas. E.g.:
IncludeName=.*\.doc, .*\.exe
For filtered objects you can assign the following actions (the
FilteredMimeAction, FilteredNameAction, and FilteredSizeAction
parameters):
• delete – delete an object from the message and add corresponding
notification to the message;
• skip – leave the message as it is and forward it to the mail system for
further delivery. In this case, the corresponding information will be
recorded in the application report;
• drop – delete the message without sending it to the recipient;
• reject – reject the message and return the corresponding error code to
the sender;
• warn – replace the message content with a warning about detection of
objects corresponding to filtering criteria;