FortiMail
FortiMail provides advanced, multi-layer protection against the full spectrum of email-borne threats
nagarajs_FTNT
Article Id 189879

Description

Emails from certain domains may be seen to trigger the following record in the AntiSpam logs:
“Message SPF error: domain <domain_name>, Term is invalid”


Scope

FortiMail after v5.3.8


Solution

The log message is caused by a macro in the "exists" modifier "%{ir}.".

FortiMail does not support "exists" or macros and will completely bypass the SPF validation of these domains.

In FortiMail v5.3.8 and newer, this error is treated as a neutral SPF result and does not increase the sender reputation score or trigger AntiSpam action.