Internal SFP Check fail (FORTIMAIL)

[admin_kshb]

Dear Community,

We have a Fortimail VM in our Network and activated SFP & DKIM.

So far so good, from external it works fine but internal we figured out some troubles.

Explanation:

Computer in Our Network with Powershell

send-mailmessage -to receiver@contoso.com -subject TestFromlab -from robert@microsoft.com -smtpserver mail.constoso.com

screenshot Outlook

screenshot Fortimail Log

The Fortimail Version: v6.4.6(GA), build459, 2021.12.09

Any Tipps where exactly the option is?

I controlled all Options dont found a solution

sry for my English

greetings Michael

[Anonymous]

Hello @admin_kshb ,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[gmichailidis]

Dear @admin_kshb,

As you mentioned, the mail is sent from a computer in your network and the client IP in the logs is "10.99.1.106".

- In this case, the SPF will be skipped since the email is coming from a private IP address.
No SPF check is performed for direct connections from RFC 1918 private IP addresses.

Source:
Managing antispam profiles - https://docs.fortinet.com/document/fortimail/7.2.0/administration-guide/352990/configuring-antispam-...

- Regarding the DKIM check, this should be performed if the message is signed with a valid signature.
You can verify if a received email is really signed by checking its header, where you will see a header similar to: "DKIM-Signature: v=1; a=rsa-sha256; d=example.com; [...]"

Sincerely,
Georgios Michailidis