Hi erveryone,
We use the FortiMail only as a filter.
The MTA is provided by an external service provider.
The FortiMail is therefore between our service provider and our internal mail server.
We have deactivated the SPF check in the Antispam and in the Session Profile, because this is not needed in our construct.
Nevertheless we get in the log for most mails a SPF Fail/Softfail with the message "that MTA (IP address) is/may not permitted to send email for ....".
The mails are processed and sent correctly but this log entry bothers us.
We are aware that the external MTA will normally trigger SPF since the mail is not sent from the original mail server to FortiMail.
Is it possible to disable the entry, it is not relevant for us or is there another hidden setting somewhere that enables SPF checking?
Are any of you aware of a similar problem or could it be something else?
Thank you in advance!!
Hello FisherManFriend,
Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.
Thanks,
Hello,
We are still looking for someone to help you.
We will come back to you ASAP.
Regards,
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1741 | |
1109 | |
755 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.