Skip to main content
ianmclachlan
ianmclachlan
New Member
March 7, 2019
Question

Anti-Spam - Local Spam Filter (BlackWhite List Not Working

  • March 7, 2019
  • 1 reply
  • 5404 views

Hi Guys,

 

I have a Fortinet 100E UTM device.  My Local Spam Filter BlackWhite List is not working even though it's set to override on local.  Any email addresses I create and set to "Mark as Spam" and enable ... still go through.  Any ideas?

 

Here's my config:

 

config spamfilter profile

edit "default"

set comment "Malware and phishing URL filtering."

set spam-filtering enable

set options spambwl spamfsip spamfssubmit spamfschksum spamfsurl spamraddrdns spamfsphish

config imap

set tag-msg "**_SPAM_Email_**"

end

config pop3

set tag-msg "**_SPAM_Email_**"

end

config smtp

set tag-msg "**_SPAM_Email_**"

set local-override enable

end

set spam-bwl-table 1

next

end

    1 reply

    Dave_Hall
    Dave_Hall
    New Member
    March 7, 2019

    After creating a spamfilter profile, have you applied it in a firewall policy rule and made sure that that rule is moved above any general traffic (firewall policy rule) so it is trigged?

     

    ianmclachlan
    ianmclachlanAuthor
    New Member
    March 7, 2019

    Hi,

     

    Thanks for reply.  Yes, I have an exisiting policy rule for SMTP which has been in place for a long time.  There are no issues with recieving email etc.  ASE does it's job and we have no issues, however, from time to time we need the ability to blacklist certain emails.

     

    I have looked at the CLI for this filter.

     

    edit 3                set status disable                 set type email                 set action clear                 set email-pattern "*@domain.com"  (have reacted actual address)             next

    edit 4                 set type email

                    set email-pattern "*1@hotmail.com" (have reacted actual address)             next         end  

    Firsty on the GUI, the "Mark as Reject" is greyed out, so the only option I have is "Mark as Spam".  However, when I do this, there is no action set (on edit 4)  Edit 3 seems to have the correct action set.  So I'm not sure whether this is a bug or there is a reason behind this.  Have tried several tests with the same results.

     

    Thanks again for the comments

     

     

    Terms & ConditionsAccessibility statement