Troubleshooting Tip: A trusted website is being blocked and categorized as a spam URL by the DNS Filter

An authentic website is being blocked by the DNS filter, triggering a 'SPAM: URLs' error as shown in the screenshot below.

To verify the current categorization of a URL/website, can check it on the FortiGuard website:

Secure DNS Service 

Web Filtering Service 

Therefore, to allow access or find a resolution, follow these steps below.

From the FortiGate side:

1. Add an Exempt (Whitelist) entry in the DNS Filter Profile.
2. If required, use a wildcard domain (e.g., *.my.mexatlantic.co) to ensure subdomains are also allowed. 
3. Set the action to Allow for that domain.
4. Verify that the correct policy profile is applied.

From CLI:

Create domain filter entry:

config dnsfilter domain-filter
    edit 1   ----------------------------> Entry ID.
        config entries
            edit 1
                set domain "*.my.mexatlantic.co"
                set type wildcard
                set action allow
                set status enable
            next
        end
    next
end

Apply the domain filter entry in the DNS filter profile:

config dnsfilter profile
    edit "default"
        config domain-filter
            set domain-filter-table 1    ----------------------------> Same Entry ID configured above in the domain filter.

    next

end

From the Client side: 

Flush the local DNS cache from the user device/PC.

After completing the above steps on both the FortiGate and client side, the website will be accessible successfully (see attached screenshot).

If it is necessary to correct or update the categorization of a website, it is possible to send an appeal to our FortiGuard team:

General Contact Form 

Web Filter Classification Rating Request