Hello
how to block FORGED IP in Fortimail v. 6.2.7 ?
thx
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi jasonh1,
if someone is faking an IP to an FQDN you would be able to detect this by a reverse lookup of that IP. It would not give the expected data and not match a forward lookup query.
I'm not a FortiMail expert, but it seems FML has a similar setting as this older article implies:
I see on a FML also the "Sender Policy Framework" that might help doing the same thing (doing a DNS lookup on the senders domain to see whether the senders mail address has been faked.
Markus
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1688 | |
1087 | |
752 | |
446 | |
226 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.