FortiMail receiving from 2nd SMTP gateway

[AEK]

Hello

I have FortiMail in front of my mail server.

I have a second mail gateway receiving e-mails from internet and forwards them to my FortiMail.

By default my FortiMail sends all these received e-mails to quarantine, since they fail SPF check (all mails from external domains are received on behalf of my 2nd SMTP gateway's public IP).

So my workaround was to add on my FML an IP policy without SPF check, dedicated to the second SMTP gateway's IP.

However I guess there should be a formal and clean method to tell my FortiMail that the second SMTP gateway is actually a legitimate SMTP gateway, so that my FML considers it as SMTP gateway and does the job properly.

Thanks in advance.

[abelio]

Hello Aek
I don´t know if I fully understand your post: are you asking for an alternative solution to solve your special setup?

I don´t see your approach as a 'dirty' one;

If you're checking SPF records with a quarantine action if failed, your FML is working correctly.
Your specific scenario with another gateway requires an exception.  An IP policy (with ´Take precedence over recipient based policy match' flag checked) is a clean approach to solve your scenario I guess.

[AEK]

Hello Abelio

Thanks for your post.

Actually yes I'm searching for the "standard" solution, since I think my solution (IP policy with SPF check disabled) seems like a workaround. I guess there is a standard/clean way to make SMTP gateways work with each others.

[AEK]

It seems the solution is possible with ARC feature that was introduced since FortiMail 7.2.0.

https://docs.fortinet.com/document/fortimail/7.6.1/administration-guide/887639/configuring-antispam-...

Hope this helps anyone with similar issue.