turn on spam protection based on dns blackhole lists

TURN ON SPAM PROTECTION BASED ON DNS BLACKHOLE LISTS HOW TO

The score can be any number from zero to 99999. You set this score when you create a new pattern to block content. Use the command config spamfilter profile to add a banned word list to an Anti-Spam profile.Įvery time the banned word filter detects a pattern in an email message, it adds the pattern score to the sum of scores for the message. Use the command config spamfilter bword to add an email banned word list. When determining the banned word score total for an email message, each banned word score is added once no matter how many times the word appears in the message. If the total score of the banned word discovered in the email message exceeds the threshold value set in the Anti-Spam profile, your FortiGate unit will treat the message as spam. When you enable banned word checking, your FortiGate unit will examine the email message for words appearing in the banned word list specified in the Anti-Spam profile. Indicates whether this particular list is enabled or disabled. If this is the selected action, the email will be dropped at the before reaching its destination. If this is the selected action, the email will be allowed to go through to its destination on the assumption that the message is not spam. If this is the selected action, the email will be allowed through but it will be tagged with an indicator that clearly marks the email as spam. For example, could be used filter based on a number of combinations of email domain names. For example *. or If the type is Email Regular Expression, regular expression can be used to create a more granular filter for email addresses.

If the type is Email Wildcard the filter will be an email address with a wildcard symbol in place of the variable characters.

If the type is IP/Netmask the filter will be an IP address with a subnet mask.

The pattern field is for entering the identifying information that will enable the filter to correctly identify the email messages. If a match is found, the FortiGate unit will take the action configured for the matching black/white list entry. The regular expression that can be used is much more sophisticated than a simple wildcard variable. The FortiGate unit compares the sender email address, as shown in the message envelope MAIL FROM, to the pattern in the patterned field. The wildcard symbol is used in the patterned to replace the characters in the address that may vary from the pattern. If enabled, the FortiGate unit will check all the IP addresses in the header of SMTP email against the specified IP address black/white list. The default setting of the smtp-spamhdrip CLI command is disable. If a match is found, the FortiGate unit will take the action configured for the matching black/white list entry against all delivered email. The FortiGate unit compares the IP address of the client delivering the email to the addresses in the IP address black/white list specified in the email filter profile. These are the types of black white lists available. The remainder use your DNS servers or use lists that you must maintain. Some use the FortiGuard Anti- Spam Service and require a subscription.

The FortiGate unit has a number of techniques available to help detect spam. Updates to the IP reputation and spam signature databases are provided continuously via the global FortiGuard Distribution Network.įrom the FortiGuard Anti-Spam Service page in the FortiGuard Center, you can find out whether an IP address is blacklisted in the FortiGuard Anti-Spam IP reputation database, or whether a URL or email address is in the signature database. Using FortiGuard Anti-Spam profile settings, you can enable IP address checking, URL checking, email checksum checking, and spam submission. The FortiGuard Anti-Spam Service uses both a sender IP reputation database and a spam signature database, along with sophisticated spam filtering tools, to detect and block a wide range of spam messages. You can configure the FortiGate unit to manage unsolicited commercial email by detecting and identifying spam messages from known or suspected spam servers. Configure email traffic types to inspect.The following topics are included in this section: If your FortiGate unit supports SSL content scanning and inspection, you can also configure spam filtering for IMAPS, POP3S, and SMTPS email traffic. Email filtering includes both spam filtering and filtering for any words or files you want to disallow in email messages.

TURN ON SPAM PROTECTION BASED ON DNS BLACKHOLE LISTS HOW TO

This section describes how to configure FortiGate email filtering for IMAP, POP3, and SMTP email.

Turn on spam protection based on dns blackhole lists