Cisco 7604 Configuration Guide - Page 445

Chapter 22 Applying Application Layer Protocol Inspection ESMTP Inspection m. (Optional) To match the type of MIME encoding scheme used, enter the following command: hostname(config-pmap-p)# match mime encoding [7bit|8bit|base64|binary|others| quoted-printable] n. (Optional) To match the MIME filename length, enter the following command: hostname(config-pmap-p)# match mime filename length gt length Where length is the length of the filename in the range 1 to 1000. o. (Optional) To match the MIME file type, enter the following command: hostname(config-pmap-p)# match mime filetype regex [name | class name] Where name or class name is the regular expression that matches a file type or a class map. The regular expression used to match a class map can select multiple file types. p. (Optional) To match a sender address, enter the following command: hostname(config-pmap-p)# match sender-address regex [name | class name] Where name or class name is the regular expression that matches a sender address or a class map. The regular expression used to match a class map can select multiple sender addresses. q. (Optional) To match the length of a sender's address, enter the following command: hostname(config-pmap-p)# match sender-address length gt length Where length is the number of characters in the sender's address. The following example shows how to define an ESMTP inspection policy map. hostname(config)# regex user1 "[email protected]" hostname(config)# regex user2 "[email protected]" hostname(config)# regex user3 "[email protected]" hostname(config)# class-map type regex senders_black_list hostname(config-cmap)# description "Regular expressions to filter out undesired senders" hostname(config-cmap)# match regex user1 hostname(config-cmap)# match regex user2 hostname(config-cmap)# match regex user3 hostname(config)# policy-map type inspect esmtp advanced_esmtp_map hostname(config-pmap)# match sender-address regex class senders_black_list hostname(config-pmap-c)# drop-connection log hostname(config)# policy-map outside_policy hostname(config-pmap)# class inspection_default hostname(config-pmap-c)# inspect esmtp advanced_esmtp_map hostname(config)# service-policy outside_policy interface outside OL-20748-01 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM 22-29