Technical Tip: How to perform SPF, DKIM, and DMARC...

FortiMail

FortiMail provides advanced, multi-layer protection against the full spectrum of email-borne threats

Article Id 301539

Description

This article describes how to perform SPF, DKIM, and DMARC Antispam checks even if the sender is included in a safe list.

Scope

FortiMail.

Solution

Execute the commands that would make SPF, DKIM, and DMARC Antispam checks take precedence even if the sender is included in a safe list as below:

config antispam settings
set safelist-bypass-sender-auth disable
end

By default 'safelist-bypass-sender-auth' is set to 'enable' which means that safe listed senders will bypass all antispam checks.
An example where 'safelist-bypass-sender-auth' is set to 'enable' while the DKIM check fails:

safelist take precedence over dkim check.png

An example where 'safelist-bypass-sender-auth' is set to 'disable' while the DKIM check fails:

DKIM check results take precedence.png

578

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to perform SPF, DKIM, and DMARC Antispam checks even if the sender is included in a safe list