Blocking mail from counterfeit (fake) sender

Forum|Forum|6 years ago
August 27, 2019
8 replies
9601 views

Is there any way to block fake "Client" field just like the one on the attachment?

In the attachment, there is "Header from" field pointing to an appropriate (trusted) sender, but the "Client" field displays unwanted and potentially dangerous sender. If there a method to block such fake senders?

123.jpg

FortiMail

Best answer by Hosemacht

Hi

just activate SPF checking

yandex has the following SPF record :

v=spf1 include:_spf-ipv4.yandex.ru include:_spf-ipv6.yandex.ru ~all

so yandex did only a soft fail wich passes the email even if the SPF record doesnt match.

You have to set your fortimail to block all SPF failures to avoid further fake mails.

Regards

HosemachtAnswer

Explorer

Hi

just activate SPF checking

yandex has the following SPF record :

v=spf1 include:_spf-ipv4.yandex.ru include:_spf-ipv6.yandex.ru ~all

so yandex did only a soft fail wich passes the email even if the SPF record doesnt match.

You have to set your fortimail to block all SPF failures to avoid further fake mails.

Regards

i_litvinovAuthor

New Member

Hi!

SPF was enabled on AntiSpam tab but in session profile was disabled. Activated, will try!

Thanks a lot!

live89

Explorer III

That's weird

If SPF was enabled in AntiSpam profile that should do the work.

Enabling SPF in the session profile will just "improve performance" by rejecting invalid senders before more resource-intensive AntiSpam scans are performed.

In our environment , SPF is disabled in session profile and enabled in AntiSpamprofile and still working fine ..

Sign up

Login with SSO

Login to the community

Login with SSO