FortiGate Administration Guide - FirewallShop.com

Antispam
Antispam
Antispam
This section explains how to configure the spam filtering options associated with a
firewall protection profile.
This section describes:
• Antispam
• Banned word
• Black/White List
• Advanced antispam configuration
• Using Perl regular expressions
Antispam
Order of Spam Filtering
Antispam can be configured to manage unsolicited commercial email by detecting
spam email messages and identifying spam transmissions from known or
suspected spam servers.
FortiGuard Antispam is one of the features designed to manage spam. FortiGuard
is an antispam system from Fortinet that includes an IP address black list, a URL
black list, and spam filtering tools. The FortiGuard Center accepts submission of
spam email messages as well as well as reports of false positives. Visit the
Fortinet Knowledge Center for details and a link to the FortiGuard Center.
The order in which incoming mail is passed through the FortiGate Antispam filters
is determined by the protocol used to transfer the mail:
For SMTP
1 IP address BWL check on last hop IP
2 DNSBL & ORDBL check on last hop IP, FortiGuard Antispam IP check on last hop
IP, HELO DNS lookup
3 MIME headers check, E-mail address BWL check
4 Banned word check on email subject
5 IP address BWL check (for IPs extracted from “Received” headers)
6 Banned word check on email body
7 Return e-mail DNS check, FortiGuard Anti Spam check, DNSBL & ORDBL check
on public IP extracted from header
For POP3 and IMAP
1 MIME headers check, E-mail address BWL check
2 Banned word check on email subject
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 443