Fortimail FORGED IP blocking

Hi jasonh1,

if someone is faking an IP to an FQDN you would be able to detect this by a reverse lookup of that IP. It would not give the expected data and not match a forward lookup query.

I'm not a FortiMail expert, but it seems FML has a similar setting as this older article implies:

https://community.fortinet.com/t5/FortiMail/Technical-Note-Explanation-of-forged-IP/ta-p/198116?externalID=FD33403

I see on a FML also the "Sender Policy Framework" that might help doing the same thing (doing a DNS lookup on the senders domain to see whether the senders mail address has been faked.

Markus