FortiGate Administration Guide - FirewallShop.com

Firewall Protection Profile
Configuring a protection profile
IP address BWL
check
HELO DNS
lookup
E-mail address
BWL check
Return e-mail
DNS check
Banned word
check
Spam Action
Append to
Append with
Black/white list check. Enable or disable the checking incoming IP
addresses against the configured spam filter IP address list. (SMTP
only.)
IP address BWL check drop-down list: Select which IP address
black/white list will be used with this protection profile.
Enable or disable looking up the source domain name (from the SMTP
HELO command) in the Domain Name Server.
Enable or disable checking incoming email addresses against the
configured spam filter email address list.
E-mail address BWL check drop-down list: Select which email
address black/white list will be used with this protection profile.
Enable or disable checking that the domain specified in the reply-to or
from address has an A or MX record.
Enable or disable checking source email against the configured spam
filter banned word list.
Banned word check drop-down list: Select which banned word list will
be used with this protection profile.
Threshold: If the combined scores of the banned word patterns
appearing in an email message exceed the threshold value, the message
will be processed according to the Spam Action setting. See “Viewing the
antispam banned word list” on page 447 for details.
Action the spam filter will take. Tagged allows you to append a custom
tag to the subject or header of email identified as spam. For SMTP, if you
have virus scan or streaming mode (also known as splice) enabled, you
will only be able to discard spam email. (Note that streaming mode is
enabled automatically when you enable virus scanning.) Discard
immediately drops the connection. Without streaming mode or scanning
enabled, you can chose to tag or discard SMTP spam.
You can tag email by adding a custom word or phrase to the subject or
inserting a MIME header and value into the email header. You can
choose to log any spam action in the event log.
Append the tag to the subject or MIME header of the email identified as
spam.
Enter a word or phrase (tag) to append to email identified as spam. The
maximum length is 63 characters.
Note: Some popular email clients cannot filter messages based on the MIME header.
Check email client features before deciding how to tag spam.
See “Antispam” on page 443 for more spam filter configuration options. To
configure the FortiGuard Anti-spam service, see “Configuring the FortiGate unit
for FDN and FortiGuard services” on page 188.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 337