Skip to main content
securitylearnercyber
securitylearnercyber
Explorer
February 27, 2025
Solved

Apply Session Profile on domains & Client IP

  • February 27, 2025
  • 2 replies
  • 708 views

Hi Team,

 

Can you help with the following issues:

  1. I want to restrict the number of mails received from incoming emails from Gmail, Yahoo, and Outlook domains. However, the session profile can only be applied to the IP Policy and not directly to domains. What solution is available?

  2. Is there a way to see the sender's IP address (not the sending server's IP) for an email on FortiMail?

Thanks.

 

Best answer by AEK

Hi @securitylearnercyber 

  1. Session profile is something low level, that's why it is in IP policy. So I think the solution is to have the IP addresses of all gmail/yahoo sending MTAs
  2. A well configured MTA doesn't show you client's IP address in mail headers. As you may know the "Received" header is removed from the sent e-mails in the session profile. Only MTAs with security misconfiguration will show you client IP address.

2 replies

AEK
SuperUser
AEKAnswer
SuperUser
February 27, 2025

Hi @securitylearnercyber 

  1. Session profile is something low level, that's why it is in IP policy. So I think the solution is to have the IP addresses of all gmail/yahoo sending MTAs
  2. A well configured MTA doesn't show you client's IP address in mail headers. As you may know the "Received" header is removed from the sent e-mails in the session profile. Only MTAs with security misconfiguration will show you client IP address.
AEK
    securitylearnercyber
    securitylearnercyberAuthor
    Explorer
    March 3, 2025

    Hi @AEK 

     

    Noted. Thank you for your quick answer.

    Terms & ConditionsAccessibility statement