FortiGate Administration Guide - FirewallShop.com

Antispam
Antispam
3 IP BWL check
4 Banned word check on email body
5 Return e-mail DNS check, FortiGuard AntiSpam check, DNSBL & ORDBL check
Anti-spam filter controls
For SMTP, POP3, and IMAP
Filters requiring a query to a server and a reply (FortiGuard Antispam Service and
DNSBL/ORDBL) are run simultaneously. To avoid delays, queries are sent while
other filters are running. The first reply to trigger a spam action takes effect as
soon as the reply is received.
Each spam filter passes the email to the next if no matches or problems are found.
If the action in the filter is Mark as Spam, the FortiGate unit will tag or discard
(SMTP only) the email according to the settings in the protection profile. If the
action in the filter is Mark as Clear, the email is exempt from any remaining filters.
If the action in the filter is Mark as Reject, the email session is dropped. Rejected
SMTP email messages are substituted with a configurable replacement message.
Spam filters are configured for system-wide use, but enabled on a per profile
basis.
Table 41 describes the Antispam settings and where to configure and access
them.
Table 41: AntiSpam and Protection Profile spam filtering configuration
Protection Profile spam filtering options AntiSpam setting
IP address FortiGuard Antispam check System > Maintenance >
FortiGuard Centre
Enable or disable Fortinet’s antispam service
called FortiGuard Antispam. FortiGuard
Antispam is Fortinet’s own DNSBL server
that provides spam IP address and URL
blacklists. Fortinet keeps the FortiGuard
Antispam IP and URLs up-to-date as new
spam source are found.
IP address BWL check
Black/white list check. Enable or disable
checking incoming IP addresses against the
configured spam filter IP address list. (SMTP
only.)
DNSBL & ORDBL check
Enable or disable checking email traffic
against configured DNS Blackhole List
(DNSBL) and Open Relay Database List
(ORDBL) servers.
HELO DNS lookup
Enable FortiGuard Antispam, check the
status of the FortiGuard Antispam server,
view the license type and expiry date, and
configure the cache. For details, see
“Configuring the FortiGate unit for FDN
and FortiGuard services” on page 188
AntiSpam > Black/White List > IP Address
Add to and edit IP addresses to the list.
You can configure the action to take as
spam, clear, or reject for each IP address.
You can place an IP address anywhere in
the list. The filter checks each IP address
in sequence. (SMTP only.)
Command line only
Add or remove DNSBL and ORDBL
servers to and from the list. You can
configure the action to take as spam or
reject for email identified as spam from
each server (SMTP only).
DNSBL and ORDBL configuration can only
be changed using the command line
interface. For more information, see the
FortiGate CLI Reference.
n/a
FortiGate Version 3.0 MR5 Administration Guide
444 01-30005-0203-20070830