Configure Attachment Filtering

Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Attachment filtering can block attachments from entering the Microsoft Exchange Server 2010 organization by attachment content type or by attachment file name. How the attachments are processed depends on how attachment filtering is configured.

You can configure an attachment filter entry to filter attachments by attachment content type or by attachment file name. Before you add an attachment filter entry, you must determine whether you want to filter by MIME content type or by file name. Your choice of attachment filter type depends on your business needs and policies. For more information, see Understanding Attachment Filtering.

Looking for other management tasks related to anti-spam and antivirus features? Check out Managing Anti-Spam and Antivirus Features.

Use the Shell to enable the Attachment Filter agent

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Transport agents" entry in the Transport Permissions topic.

By default, the Attachment Filter agent is enabled on the computer that has the Edge Transport server role installed.

This example enables the Attachment Filter agent if it isn't enabled.

Enable-TransportAgent -Identity "Attachment Filter agent"

For detailed syntax and parameter information, see Enable-TransportAgent.

Use the Shell to add an attachment filter entry

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Anti-spam features" entry in the Transport Permissions topic.

With Exchange 2010, you can configure multiple attachment filters on each Edge Transport server.

To add an attachment filter that filters e-mail attachments that have a specific MIME content type, use the following syntax.

Add-AttachmentFilterEntry -Name <MIMEContentType> -Type ContentType

This example filters all JPEG images by using an attachment filter. Note that you must run the following command on each Edge Transport server.

Add-AttachmentFilterEntry -Name image/jpeg -Type ContentType

To add an attachment filter that filters e-mail attachments based on a file name or file name extension, use the following syntax.

Add-AttachmentFilterEntry -Name <FileName> -Type FileName

This example filters all e-mail attachments that have the file name extension EXE.

Add-AttachmentFilterEntry -Name *.EXE -Type FileName

For detailed syntax and parameter information, see Add-AttachmentFilterEntry.

Use the Shell to configure attachment filtering behavior

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Anti-spam features" entry in the Transport Permissions topic.

To configure attachment filtering on an Edge Transport server role, use the Set-AttachmentFilterListConfig cmdlet. This example makes the following configuration changes to the Attachment Filter agent.

• Sets the Attachment Filter agent to reject messages that have prohibited attachments.

• Configures a custom response for rejected messages.

Set-AttachmentFilterListConfig -Action -Reject -RejectResponse "The attachment you included in your e-mail message was not allowed. Your e-mail message cannot be delivered. Please remove the e-mail attachment, and send your message again."

For detailed syntax and parameter information, see Set-AttachmentFilterListConfig.

 © 2010 Microsoft Corporation. All rights reserved.