Hi,
We have FortiMail in our setup which was installed by a 3rd party. In the message logs, the Client IP is showing our Router's private IP. Is there a setting in FortiMail to use the originating IP of the email?
Below are screenshots of the logs and a sample of one of the spam message headers.
Thank you,
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello,
humm, that's a misconfiguration in the router; not directly related with fortimail.
You shouldn't see 192.168.20.1 as FEAS-CLIENT-IP header in such emails.
It is likely the router/firewall policy be NATting incoming traffic.
If your router is a FortiGate, check incoming firewall policy used to publish your fortimail. It shouldn't be NATted
regards
/ Abel
Hello,
humm, that's a misconfiguration in the router; not directly related with fortimail.
You shouldn't see 192.168.20.1 as FEAS-CLIENT-IP header in such emails.
It is likely the router/firewall policy be NATting incoming traffic.
If your router is a FortiGate, check incoming firewall policy used to publish your fortimail. It shouldn't be NATted
regards
/ Abel
Thanks for that abelio. It was a router issue and has been sorted out.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1711 | |
1093 | |
752 | |
447 | |
231 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.