The final action on a message in the Content Filtering module is determined as follows:
Action that the Content Filtering module applies to the message
Number of triggered expressions in the rule |
Message processing mode |
Final action that the Content Filtering module applies to the message |
---|---|---|
One |
|
The following actions are applied:
|
More than one |
Apply the action of the expression with the highest priority, ignore other expressions |
The following actions are applied:
|
Apply the strictest of the actions of all matched expressions |
The following actions are applied:
|
If an expression with the Delete attachment action is triggered, the list of attachments to be deleted is determined in accordance with the table below. Attachments to be removed are assigned if the triggered expression has a condition for the Attachment type, Attachment name, or MIME part size attribute. If, as a result of a scan by all modules, the message is assigned Delete attachment as the final action, and the list of attachments to be deleted is empty, Skipped is displayed as the final action for this message in the Backup and the email traffic processing event log. This does not change the strictness of triggered actions, and the configured actions are applied for headers and subject of the message.
Determining attachments to be deleted
The expression has a condition for the Attachment type attribute |
The expression has a condition for the Attachment name attribute |
The expression has a condition for the MIME part size attribute |
Type of logical connection for conditions |
Attachments to be deleted |
---|---|---|---|---|
No |
Yes |
No |
Any |
Attachments that match a condition for the Attachment name attribute. |
Yes |
No |
No |
Any |
Attachments that match a condition for the Attachment type attribute. |
No |
No |
Yes |
Any |
Attachments that match a condition for the MIME part size attribute. |
Yes |
Yes |
No |
Only if all conditions match |
Attachments that meet all conditions for the Attachment type and Attachment name attributes. |
Yes |
Yes |
No |
If one or more conditions match |
Attachments that match at least one condition for the Attachment type or Attachment name attribute. |
Yes |
Yes |
Yes |
Only if all conditions match |
Attachments that meet all conditions for the Attachment type, Attachment name, and MIME part size attributes. |
Yes |
Yes |
Yes |
If one or more conditions match |
Attachments that match at least one condition for the Attachment type, Attachment name, or MIME part size attribute. |
The final action that the Content Filtering module applies to the message in case of a scan error includes the following actions: