Fortinet black logo

Administration Guide

Protocols and actions

Protocols and actions

In an email filter profile, there are options to configure settings for SMTP, POP3, IMAP, and MAPI protocols. For each protocol, you can set an action to either discard (block), tag, or pass the log for that protocol. The action options vary per protocol. For the tag action, the spam email can be tagged with configured text in the subject or header.

Note

MAPI is only configurable in the CLI and with the proxy feature set.

To configure protocols in an email filer:
config emailfilter profile
    edit <name>
        set feature-set {flow | proxy}
        set spam-filtering enable
        set options {spambwl spamfsip spamfssubmit spamfschksum spamfsurl spamhelodns spamraddrdns spamrbl spamhdrcheck spamfsphish}
        config smtp
            set log-all {enable | disable}
            set action {pass | tag | discard}
            set tag-type {subject | header | spaminfo}
            set tag-msg <string>
            set hdrip {enable | disable}
            set local-override {enable | disable}
        end
        config imap
            set log-all {enable | disable}
            set action {pass | tag}
            set tag-type {subject | header | spaminfo}
            set tag-msg <string>
        end
        config pop3
            set log-all {enable | disable}
            set action {pass | tag}
            set tag-type {subject | header | spaminfo}
            set tag-msg <string>
        end
        config mapi
            set log-all {enable | disable}
            set action {pass | discard}
        end
    next
end

options ...

The following options are available:

  • bannedword: content block.
  • spambwl: block/allow list.
  • spamfsip: email IP address FortiGuard antispam block list check.
  • spamfssubmit: add FortiGuard antispam spam submission text.
  • spamfschksum: email checksum FortiGuard antispam check.
  • spamfsurl: email content URL FortiGuard antispam check.
  • spamhelodns: email HELO/EHLO domain DNS check.
  • spamraddrdns: email return address DNS check.
  • spamrbl: email DNSBL and ORBL check.
  • spamhdrcheck: email MIME header check.
  • spamfsphish: email content phishing URL FortiGuard antispam check.

tag-type {subject | header | spaminfo}

Set the tag type:

  • subject: prepend text to the spam email subject.
  • header: append a user-defined MIME header to the spam email.
  • spaminfo: append spam information to the spam email header.

tag-msg <string>

Subject text or header added to the spam email.

hdrip {enable | disable}

Enable/disable SMTP email header IP checks for spamfsip, spamrbl, and spambwl filters.

local-override {enable | disable}

Enable/disable local filter to override SMTP remote check result.

For more information, see config emailfilter profile in the FortiOS CLI Reference.

Protocols and actions

In an email filter profile, there are options to configure settings for SMTP, POP3, IMAP, and MAPI protocols. For each protocol, you can set an action to either discard (block), tag, or pass the log for that protocol. The action options vary per protocol. For the tag action, the spam email can be tagged with configured text in the subject or header.

Note

MAPI is only configurable in the CLI and with the proxy feature set.

To configure protocols in an email filer:
config emailfilter profile
    edit <name>
        set feature-set {flow | proxy}
        set spam-filtering enable
        set options {spambwl spamfsip spamfssubmit spamfschksum spamfsurl spamhelodns spamraddrdns spamrbl spamhdrcheck spamfsphish}
        config smtp
            set log-all {enable | disable}
            set action {pass | tag | discard}
            set tag-type {subject | header | spaminfo}
            set tag-msg <string>
            set hdrip {enable | disable}
            set local-override {enable | disable}
        end
        config imap
            set log-all {enable | disable}
            set action {pass | tag}
            set tag-type {subject | header | spaminfo}
            set tag-msg <string>
        end
        config pop3
            set log-all {enable | disable}
            set action {pass | tag}
            set tag-type {subject | header | spaminfo}
            set tag-msg <string>
        end
        config mapi
            set log-all {enable | disable}
            set action {pass | discard}
        end
    next
end

options ...

The following options are available:

  • bannedword: content block.
  • spambwl: block/allow list.
  • spamfsip: email IP address FortiGuard antispam block list check.
  • spamfssubmit: add FortiGuard antispam spam submission text.
  • spamfschksum: email checksum FortiGuard antispam check.
  • spamfsurl: email content URL FortiGuard antispam check.
  • spamhelodns: email HELO/EHLO domain DNS check.
  • spamraddrdns: email return address DNS check.
  • spamrbl: email DNSBL and ORBL check.
  • spamhdrcheck: email MIME header check.
  • spamfsphish: email content phishing URL FortiGuard antispam check.

tag-type {subject | header | spaminfo}

Set the tag type:

  • subject: prepend text to the spam email subject.
  • header: append a user-defined MIME header to the spam email.
  • spaminfo: append spam information to the spam email header.

tag-msg <string>

Subject text or header added to the spam email.

hdrip {enable | disable}

Enable/disable SMTP email header IP checks for spamfsip, spamrbl, and spambwl filters.

local-override {enable | disable}

Enable/disable local filter to override SMTP remote check result.

For more information, see config emailfilter profile in the FortiOS CLI Reference.