SpamTitan

Configuring Attachment Filters

Attachment filtering allows you to identify emails that contain certain types of files based on their file extensions and/or their MIME types and take action based on a particular filter. Go to Content Filtering > Attachments to manage settings for banned file attachments.

Click Enable opposite Attachment Filtering: to enable attachment filtering.

Click Enable opposite Notify Intended Recipient: to notify the intended recipient of a blocked email due to banned attachment filtering.

STG-attachment-filtering.jpg

Creating attachment filters is performed at the global level, however, domain or user policies can provide further control on applying attachment filtering and what action is performed if a banned attachment is discovered.

Attachment filters identify file attachments using several methods, such as Extension Filters and MIME Type Filters. See Attachment Filtering Methods to learn more about each method.

  • To add a new attachment filter, click Add... under the table for the filter type you want to add and the Add Filter dialog box displays. Using the table below as a reference, complete the fields. Click Save to save this filter.

  • To edit an existing attachment filter, click the edit ST-701-edit-button.jpg icon in the Options column and the Edit Filter dialog box displays. Using the table below as a reference, edit the fields. Click Save to save changes.

  • To delete an attachment filter, click the ST-701-delete-button.jpg delete icon in the Options column.

Field

Description

Extension:

Pattern:

File Type:

Mime Type:

Depending on the filter type, this field is either Extension;, Pattern:, File Type: or Mime Type:. See Attachment Filtering Methods for information on the allowable values in this field.

Inbound Action:

The action to take for inbound messages that match this filter:

  • Allow: Allow the message.

  • Block: Block the message. The domain or user policy determines if the message is quarantined (go to AntiSpam Engine > Domain Policies or User Policies).

  • Ignore: No action taken.

Outbound Action:

The action to take for outbound messages that match this filter:

  • Allow: Allow the message.

  • Block: Block the message. The domain or user policy determines if the message is quarantined (go to AntiSpam Engine > Domain Policies or User Policies).

  • Ignore: No action taken.

Scan Archives:

Check if you want this filter to match files contained within compress archive files.

Scan Double Extension:

Displays for Extension Filters: only. Check if you want this filter to match files containing multiple extensions. For example, an attachment report.txt.exe or image.png. exe (note spaces) match an extension filter for .exe if this option is checked.

Comment:

Optional comment for this filter.