|
The following tables describe the behavior of the spam filter for email address and banned word block lists with splice (also known as streaming) enabled or disabled.
The spam filter behaviors are to block (reject) email, replace email with a preconfigured replacement message, or append a custom tag to the email subject or header.
It is possible to change the splice setting for each protocol using the CLI.
This example shows how to enable splice and content archiving for SMTP in the example_profile firewall protection profile:
# config firewall profile
edit example_profile
set ftp content-archive splice
end
It is possible to view the settings for a firewall protection profile in the CLI.
get firewall profile example_profile
For complete CLI command descriptions see the FortiGate CLI Guide .
Email address list
| |
Service |
| Splice setting |
SMTP |
POP3 |
IMAP |
HTTP |
| enabled |
block |
subject tag |
subject tag |
N/A |
| disabled |
block* |
subject tag |
subject tag |
N/A |
Banned word list
| |
Service |
| Splice setting |
SMTP |
POP3 |
IMAP |
HTTP |
| enabled |
block |
replace |
replace |
N/A |
| disabled |
replace |
replace |
replace |
N/A |
Only blocks if 'MAIL FROM' email address is on block list.
If 'MAIL FROM' passes block list check, and email message 'From:' header contains an email address on the block list, then the subject tag will be added instead of blocking.
|
