Fortimail - relaying for protected domains

Forum|Forum|10 years ago
June 16, 2016
5 replies
13372 views

Folks - I have a Fortimail appliance running v5.2,build404,140822 (5.2.0 GA), operating in Gateway mode.

Currently our inside Exchange hosts are delivering mail directly to remote MTAs - only inbound mail routes via the Fortimail. The Fortimail is set up to not relay, so only delivers to the two domains defined in Mail Settings --> Domains (web interface).

My understanding from the Admin Guide is that if I start to route outbound mail via the Fortimail, it will deliver mail destined for arbitrary domains as long as that mail comes to the Fortimail from a mailer defined in Mail Settings --> Domains, i.e. the Fortimail will relay for Protected Domains.

Questions:

- is this correct?

- is there a way to test this prior to cutting my Exchange servers over to forwarding outbound mail to the Fortimail. I don't want to bounce production mail and would like to see the Fortimail relay for a Protected Domain in advance if possible.

Thoughts? Thanks in advance for any assistance!

Regards - Pete

Bromont_FTNT

Staff

You just need to set up an access control policy matching your internal Exchange servers to relay all mail.

Policy ---> Access Control (receiving) ---> Sender IP (exchange) ---> Action Relay

pwoodAuthor

New Member

Thanks for the quick reply - appreciate it!

I just tested this with my workstation and Swaks, and it worked, thanks.

I'm understanding from your Reply that I need to do this for all Exchange servers, even if they're defined in Mail Settings --> Domain as the SMTP Server (Relay Type: Host)?

Regards - Pete

Bromont_FTNT

Staff

Yes... for outbound mail (outbound meaning the destination is not a protected domain configured on the Fortimail) you'll need an access control policy for each server to relay out... you can also enter the netmask to allow a range of IPs

Sign up

Login with SSO

Login to the community

Login with SSO