Apply Session Profile on domains & Client IP

[securitylearnercyber]

Hi Team,

Can you help with the following issues:

1. I want to restrict the number of mails received from incoming emails from Gmail, Yahoo, and Outlook domains. However, the session profile can only be applied to the IP Policy and not directly to domains. What solution is available?

2. Is there a way to see the sender's IP address (not the sending server's IP) for an email on FortiMail?

Thanks.

[AEK · Accepted solution]

Hi @securitylearnercyber 

1. Session profile is something low level, that's why it is in IP policy. So I think the solution is to have the IP addresses of all gmail/yahoo sending MTAs
2. A well configured MTA doesn't show you client's IP address in mail headers. As you may know the "Received" header is removed from the sent e-mails in the session profile. Only MTAs with security misconfiguration will show you client IP address.

[securitylearnercyber]

Hi @AEK 

Noted. Thank you for your quick answer.