Technical Tip: VRFY command in FortiMail

An SMTP command called VRFY is used to confirm whether an email address is present on a mail server. It enables a client to verify the validity of an email address without sending an actual email. VRFY is helpful for validation, but if not used properly, it can potentially be a security issue.

Some users need to disable the VRFY command in the mail server to protect from SMTP user enumeration. In FortiMail server mode, there is no VRFY command.