Fortinet white logo
Fortinet white logo

Administration Guide

Configuring sender rewriting scheme

Configuring sender rewriting scheme

Go to Security > Sender Rewriting Scheme to configure sender rewriting scheme (SRS) settings, and maintain a domain name exempt list.

SRS is used to rewrite the envelope sender of an email address, so that emails may be forwarded by an MTA if necessary without being rejected by the receiving server which may have a strict SPF policy in place.

To configure SRS settings
  1. Go to Security > Sender Rewriting Scheme > Setting.
  2. Configure the following as required:

GUI item

Description

Domain for rewrite

Select which domains to rewrite for external senders sending emails.

  • None: No domains are rewritten.
  • Protected Domains: Only protected domains are rewritten.
  • All Domains: All domains are rewritten.

Rewritten address handling

Select which action to take for rewritten addresses.

  • None: Deny any recipient that is previously rewritten.
  • Reverse: Reverse the recipient address and send the email to the original sender, for those recipients that are previously rewritten senders.

Note
  • If Default domain for authentication (under System > Mail Setting > Mail Server Setting) is not enabled, SRS rewrite will not work.
  • If there are multiple domains, the default domain will be used for SRS rewrite.

Excluding domains from SRS

If you want to exempt certain domain names from SRS, you can do so by adding the recipient domain name to the exempt list.

To configure the domain name exempt list
  1. Go to Security > Sender Rewriting Scheme > Exempt List.
  2. Click New.
  3. Add the recipient domain name.
  4. Click Create.

Configuring sender rewriting scheme

Configuring sender rewriting scheme

Go to Security > Sender Rewriting Scheme to configure sender rewriting scheme (SRS) settings, and maintain a domain name exempt list.

SRS is used to rewrite the envelope sender of an email address, so that emails may be forwarded by an MTA if necessary without being rejected by the receiving server which may have a strict SPF policy in place.

To configure SRS settings
  1. Go to Security > Sender Rewriting Scheme > Setting.
  2. Configure the following as required:

GUI item

Description

Domain for rewrite

Select which domains to rewrite for external senders sending emails.

  • None: No domains are rewritten.
  • Protected Domains: Only protected domains are rewritten.
  • All Domains: All domains are rewritten.

Rewritten address handling

Select which action to take for rewritten addresses.

  • None: Deny any recipient that is previously rewritten.
  • Reverse: Reverse the recipient address and send the email to the original sender, for those recipients that are previously rewritten senders.

Note
  • If Default domain for authentication (under System > Mail Setting > Mail Server Setting) is not enabled, SRS rewrite will not work.
  • If there are multiple domains, the default domain will be used for SRS rewrite.

Excluding domains from SRS

If you want to exempt certain domain names from SRS, you can do so by adding the recipient domain name to the exempt list.

To configure the domain name exempt list
  1. Go to Security > Sender Rewriting Scheme > Exempt List.
  2. Click New.
  3. Add the recipient domain name.
  4. Click Create.