FortiMail
FortiMail provides advanced, multi-layer protection against the full spectrum of email-borne threats
tinkpen_FTNT
Staff
Staff
Article Id 198386
Description
In some cases, a blank sender may mean that the email is spam.  There are two places where the sender can be blank.  One is in the envelope and the other in From field in the data section of the email. 

The following article explains process of configuring the FortiMail so that blank senders/domains are blocked.

Solution
Blocking an Empty Sender in the Envelope

Profile > Session > Edit the inbound session profile > Unauthenticated Session Settings, click on "Reject empty domains", click on OK.

Blocking an Empty Sender in the From field in the Data section

1. Go to Profile > Dictionary

2. Create a new dictionary with the following 2 regex expressions:
^From: $
^From:$
Ensure that:
  • Enable pattern maximum weight limit
  • Search header
  • Search body
are all selected for each of the 2 entries and that the Pattern weight and Pattern maximum weight should both be left at 1.

3. Select 'Create'.

4.  Go to Profile > AntiSpam and edit the antispam policy in use.

5. Select Dictionary > With dictionary profile: and select the Dictionary that has just been created.

6. Click OK

This will prevent emails with empty senders/domains from getting to users.

Contributors