How to exclude html signatures from beeing quarantined

[PKH]

Hi there

we have a problem that emails from extern being quarantined when there is an html signature file in there. Who can i be shure that bad web links in the mailcontend will be filtered but the signature will keep unaffected?

thanks

Tom

[abelio]

Hi

PKH wrote:

Who can i be shure that bad web links in the mailcontend will be filtered but the signature will keep unaffected?

In advance?

You can't.

If signature is part of message body, any url should be analyzed too.

If your senders are trusted, you could whitelist their signature urls.

[PKH]

Hi abelio

thanks for answering, i thouged that... But, how can i trust signature urls? I know how to whitliste email adresses, but urls... ?

[Dirty_Wizard_FTNT]

On 5.3: AntiSpam > URL Exempt List.

On 5.4: Security > URL Exempt List.

[Carl_Windsor_FTNT]

Can you DM me a sample of the Sig URLs which are triggering?

[PKH]

It's not easy, it's a lot different because we work with many companies and doctors. Most of the links are on their homepage and on their Facebook page.

I think i have to go another way...

[Carl_Windsor_FTNT]

Then I am surprised that they are triggering the block, unless you have the FML to quarantine on unrated.    Can you share the relevant logs?

[PKH]

What kind of Logs exact do u need?

in eatch html signatures are jpg or png, this is also a reason to quarantine for the FortiMail... i see in the Log that each picture is scaned by antivirus with result "clean" but on next step there is an rult to quarantine images/jpg and images/png

Make that sense when the FM scaned with result clean?

[Carl_Windsor_FTNT]

>What kind of Logs exact do u need?

Find a few examples where there is a block in the History Log, right mouse click the log and Cross Search (Message) > 10 Minutes then download the resulting logs.