This article applies to:

• Trustwave ECM/MailMarshal Exchange 
• Trustwave MailMarshal (SEG)

Question:

• How do I block or prevent inbound email that does not contain a message body?
• How do I block email with no message body?

Procedure:

1. Create a new email policy group (ruleset) named Block Inbound Messages with No Body.
2. In the Filtering Conditions, select Where message is incoming.
3. Create two new rules in the Block Inbound Messages with No Body ruleset/Email Policy Group.  The rules should be in the following order:

   Bypass the No Body Block Rule (This rule looks for the existence of any type of attachment excluding MAIL and MHDR.)
   When a message arrives
Where message is incoming
Where message attachment is of type 'EXECUTABLE' or 'IMAGE' or 'VIDEO' or 'SOUND' or 'DOCUMENT' or 'ARCHIVE' or 'ENCRYPTED' or 'DRAWING' or 'FONTS' or 'OTHER' or 'TNEF' or 'MBODY'
Pass the message on to the next ruleset (or "to the next policy group")
   
   Block Messages With No Body (This rule blocks the email with no message body.)
   When a message arrives
Where message is incoming
Move the message to 'No Message Body'

This article was previously published as:

NETIQKB38707