Spam email header
The following headers may be added to the x-spaminfo field of email headers:
|
Header |
Description |
|---|---|
|
ipbal, path block/allow ip <IP address> |
IP address is contained in the local block/allow list |
|
dnsbl, path block/allow ip <IP address> |
Email is contained in configured third-party DNS-based blackhole lists (DNSBL), or Open Relay Behavior-modification Systems (ORBS). |
|
FortiGuard-AntiSpam ip, path block/allow ip <IP address> |
IP address is contained in the FortiGuard antispam block/allow list. |
|
FortiGuard-AntiSpam ase, |
FortiGuard antispam match (may match using: email checksum, URL check, phishing URL, and others). |
|
email-address, no.<INT> pattern matched |
Email address is contained in the local block/allow list. |
|
mime-header, no.<INT> pattern matched |
MIME header contains a match for a configured pattern. |
|
bannedword, <listid-hexnum hexnum ... hexnum> bannedword, <hexnum hexnum ... hexnum> |
Email contains one or more words listed in the local banned word list. |
|
helo-dns |
Whenever a client opens an SMTP session with a server, the client sends an HELO command with the client domain name. The FortiGate takes the domain name specified by the client in the HELO and performs a DNS lookup to determine if the domain exists. If the lookup fails, the FortiGate determines that any emails delivered during the SMTP session are spam. |
|
return-email, domain <domain name> has neither MX nor A record |
FortiGate performs a DNS lookup on the return field. If no such record exists, the email is treated as spam. |
|
return-email, domain name <domain name> has invalid syntax |
Invalid return email domain name. |
|
return-email, DNS request error for domain <domain name> |
Error when resolving domain name. |