Technical Tip: How to check basic connectivity on FortiMail

tamtran · ‎09-30-2019

Description

This article explains how to check the basic connectivity on the FortiMail.

Solution
Connect to FortiGate via SSH session or GUI: Dashboard -> Console

Note: If help is needed to log to the SSH session and output, check the article in the field "Related articles"

1) Ping test
#ortiMail# execute ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: icmp_seq=0 ttl=54 time=32.4 ms
64 bytes from 8.8.8.8: icmp_seq=1 ttl=54 time=32.3 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=54 time=32.3 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=54 time=32.3 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=54 time=32.3 ms

--- 8.8.8.8 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 32.3/32.3/32.4 ms
2) Traceroute test
#FortiMail# execute traceroute 8.8.8.8
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
1 172.16.1.254 (172.16.1.254) 0.216 ms 0.176 ms 0.174 ms
2 118.70.0.13 (118.70.0.13) 0.813 ms 0.821 ms 0.534 ms
3 113.22.4.117 (113.22.4.117) 2.326 ms 1.326 ms 1.305 ms
4 42.112.2.194 (42.112.2.194) 0.650 ms 4.241 ms 0.742 ms
5 42.112.2.193 (42.112.2.193) 1.556 ms 1.386 ms 1.383 ms
6 42.112.2.126 (42.112.2.126) 10.187 ms 12.612 ms 10.192 ms
7 118.69.247.78 (118.69.247.78) 34.006 ms 33.020 ms 38.882 ms
8 74.125.119.168 (74.125.119.168) 37.162 ms 33.982 ms 36.907 ms
9 * * *
10 dns.google (8.8.8.8) 32.685 ms 33.017 ms 32.967 ms
3) Telnet Test to check open port on remote server
#FortiMail# execute telnettest 10.47.0.174:80
Connected

Connection status to 10.47.0.174 port 80:
Connecting to remote host succeeded.

4) DNS test

FortiMail# execute nslookup name gmail.com server 8.8.8.8 type mx
Server:        8.8.8.8
Address:    8.8.8.8#53

Non-authoritative answer:
gmail.com     mail exchanger = 40 alt4.gmail-smtp-in.l.google.com.
gmail.com     mail exchanger = 5 gmail-smtp-in.l.google.com.
gmail.com     mail exchanger = 10 alt1.gmail-smtp-in.l.google.com.
gmail.com     mail exchanger = 30 alt3.gmail-smtp-in.l.google.com.
gmail.com     mail exchanger = 20 alt2.gmail-smtp-in.l.google.com.

Authoritative answers can be found from:

FortiMail# execute nslookup name gmail.com server 8.8.8.8 type a
Server:        8.8.8.8
Address:    8.8.8.8#53

Non-authoritative answer:
Name:     gmail.com
Address: 216.58.197.101
FortiMail# execute nslookup name gmail.com server 8.8.8.8 type any
Server:        8.8.8.8
Address:    8.8.8.8#53

Non-authoritative answer:
Name:     gmail.com
Address: 216.58.197.101
gmail.com     has AAAA address 2404:6800:4005:801::2005
gmail.com     Unknown(257) rawdata = [00 05 69 73 73 75 65 70 6B 69 2E 67 6F 6F 67]
gmail.com     mail exchanger = 30 alt3.gmail-smtp-in.l.google.com.
gmail.com     mail exchanger = 10 alt1.gmail-smtp-in.l.google.com.
gmail.com     mail exchanger = 5 gmail-smtp-in.l.google.com.
gmail.com     text = "globalsign-smime-dv=CDYX+XFHUw2wml6/Gb8+59BsH31KzUr6c1l2BPvqKX8="
gmail.com     nameserver = ns2.google.com.
gmail.com
    origin = ns1.google.com
    mail addr = dns-admin.google.com
    serial = 271534513
    refresh = 900
    retry = 900
    expire = 1800
    minimum = 60
gmail.com     mail exchanger = 40 alt4.gmail-smtp-in.l.google.com.
gmail.com     mail exchanger = 20 alt2.gmail-smtp-in.l.google.com.
gmail.com     nameserver = ns3.google.com.
gmail.com     nameserver = ns1.google.com.
gmail.com     nameserver = ns4.google.com.
gmail.com     text = "v=spf1 redirect=_spf.google.com"

Authoritative answers can be found from:

Related Articles

Technical Note: How to create a log file of a session using PuTTY