Configuring antispam action profiles
The Action tab in the AntiSpam submenu lets you define one or more things that the FortiMail unit should do if the antispam profile determines that an email is spam.
For example, assume you configured a default antispam action profile, named quar_and_tag_profile, that both tags the subject line and quarantines email detected to be spam. In general, all antispam profiles using the default action profile will quarantine the email and tag it as spam. However, you can decide that email failing to pass the dictionary scan is always spam and should be rejected so that it does not consume quarantine disk space. Therefore, for the antispam profiles that apply a dictionary scan, you could override the default action by configuring and using a second action profile, named rejection_profile, which rejects such email.
|
The specific action profile will override the default action profile when |
To configure an antispam action profile
-
Go to Profile > AntiSpam > Action.
-
Either click New or Clone to add a profile, or double-click a profile to modify it.
Alternatively, see Batch editing antispam profiles.
-
Configure the following:
GUI item
Description
Select which protected domain this profile belongs to, or System (all protected domains can use this profile).
You can only see the domains that are permitted by your administrator profile. See About administrator account permissions and domains.
Enter a unique name for the profile.
Enter a comment or description.
Enable and enter the text that appears in the subject line of the email, such as
[spam]. The FortiMail unit will prepend this text to the subject line of spam before forwarding it to the recipient.Many email clients can sort incoming email messages into separate mailboxes, including a spam mailbox, based on text appearing in various parts of email messages, including the subject line. For details, see the documentation for your email client.
Enable and enter the message header key in the field, and the values in the With value field. The FortiMail unit adds this text to the message header of the email before forwarding it to the recipient.
Many email clients can sort incoming email messages into separate mailboxes, including a spam mailbox, based on text appearing in various parts of email messages, including the message header. For details, see the documentation for your email client.
Message header lines are composed of two parts: a key and a value, which are separated by a colon. For example, you might enter:
X-Custom-Header: Detected as spam by profile 22.
If you enter a header line that does not include a colon, the FortiMail unit will automatically append a colon, causing the entire text that you enter to be the key.
Note: Do not enter spaces in the key portion of the header line, as these are forbidden by RFC 2822.
Starting from FortiMail 6.0.1, you can add multiple headers by adding them to the header table. You can also insert the predefined variables to the header value.
Insert disclaimer as an action, and select whether you want to insert the disclaimer at the start of the message, end of the message, or at the location of the custom message.
You can modify the default disclaimer or add new disclaimers by going to System > Mail Setting > Disclaimer.
Enable to route the email to a specific SMTP server or relay, then type the fully qualified domain name (FQDN) or IP address of the destination.
You can choose to deliver the original email or the modified email.
Note: If you enable this setting, the FortiMail unit uses this destination for all email that matches the profile and ignores Relay server name and Use this domain’s SMTP server to deliver the mail.
Enable to deliver email to the original host.
Enable to manually defer emails and place email in the spam defer queue.
Note: The Spam outbreak protection option in the FortiGuard settings under Profile > AntiSpam > AntiSpam does not affect this feature.
Enable to defer delivery of emails that may be resource intensive and reduce performance of the mail server, such as large email messages, or lower priority email from certain senders (for example, marketing campaign email and mass mailing).
Enable to send a blind carbon copy (BCC) of the email.
You can specify an Envelope from address so that, in the case the email is not deliverable and bounced back, it will be returned to the specified envelope from address, instead of the original sender. This is helpful when you want to use a specific email to collect bounce notifications.
Click New to add BCC recipients.
Enable to send the email to an archiving account.
Click New to create a new archiving account or click Edit to modify an existing account. For details about archiving accounts, see Email archiving workflow.
Enable and select a notification profile to send a notification email to the sender, recipient, or any other people as you configure in the notification profile. The notification email is customizable and will tell the users what happened to the email message. For details about notification profiles and email templates, see Configuring notification profiles and Customizing email templates.
For details about final and non-final actions, see Order of execution.
Enable to accept the email, but then delete it instead of delivering the email, without notifying the SMTP client.
Enable to reject the email and reply to the SMTP client with SMTP reply code 550.
However, if email messages are held for FortiGuard spam outbreak protection or FortiGuard virus outbreak protection, or sent to FortiSandbox, the actual action will fallback to "system quarantine".
For incoming email, enable to redirect the email to the recipient’s personal quarantine. For more information, see Managing the personal quarantines.
For outgoing email, this action will fallback to the system quarantine.
Enable to redirect spam to the system quarantine and then select the quarantine folder. For more information, see Managing the system quarantine.
You can also enable and select a notification profile to send a notification email to the sender, recipient, or any other people as you configure in the notification profile. The notification recipients will be able to release the quarantined email using the URL in the notification email. For details about notification profiles and email templates, see Configuring notification profiles and Customizing email templates.
Enable to redirect spam to the domain quarantine and then select the quarantine folder. For more information, see Managing the domain quarantines.
You can also enable and select a notification profile to send a notification email to the sender, recipient, or any other people as you configure in the notification profile. The notification recipients will be able to release the quarantined email using the URL in the notification email. For details about notification profiles and email templates, see Configuring notification profiles and Customizing email templates.
Enable to change the recipient address of any email message detected as spam.
Configure rewrites separately for the local-part (the portion of the email address before the '@' symbol, typically a user name) and the domain part (the portion of the email address after the
@symbol). For each part, select either:- None: No change.
- Prefix: Prepend the part with text that you have entered in the With field.
- Suffix: Append the part with the text you have entered in the With field.
- Replace: Substitute the part with the text you have entered in the With field.
-
Click Create or OK.
-
To apply an antispam action profile, select it in an antispam profile. For details, see Default action.