Troubleshooting Tip: A trusted website is being blocked and categorized as a spam URL by the DNS Filter

[sdebnath]

Description	This article describes how to allow trusted websites that are incorrectly flagged as Spam URLs and denied by the DNS Filter.
Scope	FortiGate.
Solution	An authentic website is being blocked by the DNS filter, triggering a 'SPAM: URLs' error as shown in the screenshot below. To verify the current categorization of a URL/website, can check it on the FortiGuard website: Secure DNS Service  Web Filtering Service  Therefore, to allow access or find a resolution, follow these steps below. From the FortiGate side: Add an Exempt (Whitelist) entry in the DNS Filter Profile. If required, use a wildcard domain (e.g., *.my.mexatlantic.co) to ensure subdomains are also allowed.  Set the action to Allow for that domain. Verify that the correct policy profile is applied.   From CLI: Create domain filter entry: config dnsfilter domain-filter     edit 1   ----------------------------> Entry ID.         config entries             edit 1                 set domain "*.my.mexatlantic.co"                 set type wildcard                 set action allow                 set status enable             next         end     next end Apply the domain filter entry in the DNS filter profile: config dnsfilter profile     edit "default"         config domain-filter             set domain-filter-table 1    ----------------------------> Same Entry ID configured above in the domain filter.     next end From the Client side:  Flush the local DNS cache from the user device/PC. After completing the above steps on both the FortiGate and client side, the website will be accessible successfully (see attached screenshot). If it is necessary to correct or update the categorization of a website, it is possible to send an appeal to our FortiGuard team: General Contact Form  Web Filter Classification Rating Request