Hi Shane,
Yep, I have seen and done that with other filters. I was hoping to be able to do it with the code that verylongbloke posted up. He said that it would only drop the message.
I am happy to wait for the new filter to be added. Hope it is not too long away ;)
Regards,
David
David, you can do this now, heres an example filter:
if (true)
{
insert-header("X-Filesizes", "$filesizes");
if (header("X-Filesizes") == "(, \\d+){2,}")
{
notify("sender@mydomain.com","To many attachments");
quarantine("Policy");
}
strip-header("X-Filesizes");
}
In the quarantine command you can change the Policy quarantine to one you have created if you wish. Also the notify command you could use a template if you want for the message as the above example will send a message with just the subject of To many attachments. The user guide explains how to use a template and what variables you can use to send notifications.
The above is a message filter and has to be added to the appliance via the command line. Message filters happen after the message has been accepted on the box and before they enter the email pipline. They can effect messages globally and therefore if you need to apply this to only emails leaving the organisation then you need to apply the message filter to a listener.
So to apply the above message filter to the out bound listener it would look like this:
###########Copy below this line###############
AttachmentCountingFilter:
if(recv-listener=="Outboundlistener")
{
if (true)
{
insert-header("X-Filesizes", "$filesizes");
if (header("X-Filesizes") == "(, \\d+){2,}")
{
notify("sender@mydomain.com","To many attachments");
quarantine("Policy");
}
strip-header("X-Filesizes");
}
}
#########Copy only above this line#############
Change the Outboundlistener to the name of the outbound listener on your appliance.
If you copy the above filter into a text file and then from the command line on your appliance import this as a filter it should work.
Disclaimer is that you test it before applying it in a production environment.
