Http://Docs.fortinet.com - Fortinet FortiMail-100 Install Manual

Transparent mode deployment
FortiMail™ Secure Messaging Platform Version 4.0 Patch 1 Install Guide
Revision 2

http://docs.fortinet.com/

• Feedback
Connection Settings
Hide this box from the
mail server
(transparent mode only)
Sender
Reputation
Enable sender reputation
checking
Throttle client at n
Restrict number
of emails per
hour to n
Restrict email to
n percent of the
previous hour
Temporarily fail client at n Enter a sender reputation score over which the FortiMail unit
Reject client at n
Session Settings
Prevent encryption of the
session
(transparent mode only)
For Unauthenticated Sessions
Prevent open relaying
(transparent mode only)
5 Select OK.
To configure the session profile for connections from internal SMTP clients
1 Go to Profile > Session in the advanced mode of the web-based manager.
2 Select New.
3 In Profile Name, type a name for the session profile, such as
internal_session_profile.
4 Configure the following:
Example 3: FortiMail unit for an ISP or carrier
Enable to preserve the IP address or domain name of the
SMTP client in:
• the SMTP greeting (HELO/EHLO) and in the Received:
message headers of email messages
• the IP addresses in the IP header
This masks the existence of the FortiMail unit.
Enable to accept or reject email based upon sender reputation
scores.
Enter a sender reputation score over which the FortiMail unit
will rate limit the number of email messages that can be sent
by this SMTP client.
The enforced rate limit is either Restrict number of emails per
hour to n or Restrict email to n percent of the previous hour,
whichever value is greater.
Enter the maximum number of email messages per hour that
the FortiMail unit will accept from a throttled SMTP client.
Enter the maximum number of email messages per hour that
the FortiMail unit will accept from a throttled SMTP client, as a
percentage of the number of email messages that the SMTP
client sent during the previous hour.
will return a temporary failure error when the SMTP client
attempts to initiate a connection.
Enter a sender reputation score over which the FortiMail unit
will return a permanent rejection error when the SMTP client
attempts to initiate a connection.
Enable to block STARTTLS/MD5 commands so that email
connections cannot be TLS-encrypted.
Enable to prevent clients from using open relays to send email
by blocking sessions that are unauthenticated.
(Unauthenticated sessions are assumed to be occurring to an
open relay.)
If you permit SMTP clients to use open relays to send email,
email from their domain could be blacklisted by other SMTP
servers.
135