FortiMail
FortiMail provides advanced, multi-layer protection against the full spectrum of email-borne threats
gcortes1
Staff
Staff
Article Id 410082
Description

This article describes how to handle an issue where a URL is rejected for SPAM in FortiMail Cloud.
The message of rejection is similar to:


This email from IP xxx.xxx.xxx.xxx has been rejected. The email message was detected as spam. FortiGuard AntiSpam(SPAM URL:https://<url>/ or http://<url>/))

 

Log_reject.png

 

Or similar to:

 

This email from IP xx.xx.xx.xx has been rejected. The email message was detected as spam.FortiGuard WebFilter(https://<url> (FortiGuard Category))

 

url_filter.png

Scope FortiMail Cloud.
Solution

Example 1 - FortiGuard AntiSpam

Check the classification on FortiMail under System -> Utility -> FortiGuard Query.

 

Fortiguard_Query.png


The first part is 'score=1,Spam'.
This is the result of a check against the 'FortiGuard AntiSpam database', the result is spam, hence messages with this link will be blocked by the FortiGuard AntiSpam check.
The second part is the URL Category in this case 'government-legal-org (Id: 51)'.

 

If there is any problem with the site's rating, request a review in FortiGuard AntiSpam Service using the button: 'Request a Review'. See the FortiGuard AntiSpam Service page.

 

Request_a_review.png

Request_a_review.png

 

Example 2 - FortiGuard Web Filter:

Check the classification on FortiMail under System -> Utility -> FortiGuard Query.

 

url_filter_utility.png

 

The first part is 'score=0, Not spam'.
This is the result of a check against the 'FortiGuard AntiSpam database', the result is Not Spam.
The second part is the URL Category in this case 'malicious-web (Id: 26)'.

This is a test page that will be rated by FortiGuard Web Filtering as Malicious Websites: 'malicious-web (Id: 26)'

If there is any problem with the site's rating, request a review in FortiGuard Web Filter Service using the 'Request a Review' button in the FortiGuard Web Filter Service.

 

url_filter_review.png

 

Note: By default, emails that the Service determines are in the following categories will be treated as spam and blocked as a security risk:

  • Phishing.
  • Malware.
  • SPAM URLs.

Due to this, the exception in the tenant is not an exception to the service.