recipient verification in fortimail

4 replies
2284 views

Good morning friends, a question, in the antispam logs I see a large number of emails classified as "recipient verification". Is there any way that these emails do not appear in the logs?
According to the "disposition" that the antispam takes is "reject", which, I understand that the antispam is rejecting those emails, correct? In those logs I see emails that do not exist in my organization.

Skytech1

Explorer II

Basically what you are seeing is someone who is trying to get valid emails from your organization...so this is rejected by your FortiMail because this is a valid way to give the attacker information so it can send emails to valid email addresses

I wouldn't suggest to turn those logs off because is good information to respond...like putting those IP address where are coming those request to a blacklist in your firewall, and things like that

unknown1020Author

Explorer III

Thanks for responding, so, when fortimail rejects those emails, those emails do not reach the end users' inbox, correct?

Skytech1

Explorer II

yeap, when fortimail "rejects" won't send a DSN (Delivery Status Notification)...some emails when are blocked, fortimail responds with a DSN (404, 503...etc, depending on the type of blocking), but when it's rejected...FortiMail won't send a DSN, to avoid sending information to the attacker that might give the idea of what kind of security techniques you are using...it's just like sending it to trash but not replying to attacker

Sign up

Login with SSO

Login to the community

Login with SSO