Skip to main content
fortifour
New Member
July 31, 2018
Question

How to use a FQDN with more than 32 resolvable IP's?

  • July 31, 2018
  • 0 replies
  • 2563 views

Our current anti spam service provider uses a FQDN (delivery.antispamcloud.com) which currently resolves to more than 144 IP addresses (see https://noc.spamexperts.net/components/58c9068e8c48eb3e0f439674 for the full list, scroll down).

 

At first I used the FQDN but a lot of mail didn't came through. It turned out that the FQDN only resolved a maximum of 32 IP's (random), which seem to be a hard coded max value in every firmware version (5.4, 5.6, 6.0).

 

Currently I am subscribed to Spam Expert's IP update list to notify me of IP updates which I manually add as a address in my FortiGate 201E, afterwards add to the Address Group, which in turn is added as a IPV4 policy to allow only mail to our Exchance from those IP's.

 

It's very annoying to add new addresses every week because of this hardcoded max value. Is there another way to automate this or a workaround, except for changing anti spam provider?

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!