安全 : Cisco IronPort Email 安全设备

与空消息正文的过滤器电子邮件在电子邮件安全工具

2016 年 10 月 24 日 - 机器翻译
其他版本: PDFpdf | 英语 (2016 年 4 月 21 日) | 反馈

简介

本文描述如何过滤与一空白的消息主题的消息在思科电子邮件安全工具(ESA)。

贡献由朱利叶斯Ang, Cisco TAC工程师。

问题

您收到从一个合法邮件域的垃圾邮件电子邮件,但是消息的正文是空的。

解决方案

一些垃圾邮件发送者使用合法邮件域,例如gmail.com,并且发送与一空消息主题的垃圾邮件电子邮件。

为了解决此问题,您能创建丢弃此种电子邮件的消息过滤器。

提示:您能也更改发送方域,如果需要。

如下一个示例所显示,进入过滤器>新建的CLI命令,并且实现与是适当的对您的环境的所有规则一起只正文包含规则。此示例包括接收的监听程序和mail from命令的规则:

C370.lab (SERVICE)> filters

Choose the operation you want to perform:
- NEW - Create a new filter.
- DELETE - Remove a filter.
- IMPORT - Import a filter script from a file.
- EXPORT - Export filters to a file
- MOVE - Move a filter to a different position.
- SET - Set a filter attribute.
- LIST - List the filters.
- DETAIL - Get detailed information on the filters.
- LOGCONFIG - Configure log subscriptions used by filters.
- ROLLOVERNOW - Roll over a filter log file.
[]> new

Enter filter script.  Enter '.' on its own line to end.
Drop_Blank_Body:
if (recv-listener == "Inbound") AND (mail-from == "@gmail.com") AND
(only-body-contains("^$", 1))

{
drop();
}
.
1 filters added.

Choose the operation you want to perform:
- NEW - Create a new filter.
- DELETE - Remove a filter.
- IMPORT - Import a filter script from a file.
- EXPORT - Export filters to a file
- MOVE - Move a filter to a different position.
- SET - Set a filter attribute.
- LIST - List the filters.
- DETAIL - Get detailed information on the filters.
- LOGCONFIG - Configure log subscriptions used by filters.
- ROLLOVERNOW - Roll over a filter log file.
[]>

C370.lab (SERVICE)> commit

Please enter some comments describing your changes:
[]>

Do you want to save the current configuration for rollback? [Y]>

Changes committed: Tue Mar 03 15:49:19 2015 AEDT
C370.lab (SERVICE)>


Document ID: 119005