Restrict number of sent emails by domain user/user

[vvanja]

Hello,

FortiMail 

We're using FortiMail in Gateway mode.

We want to limit number of emails an user can send.

All of the email traffic which gets into FortiMail goes from mail servers.

As far I've seen there are only Session limits which I m afraid might block the mail servers instead of users.

Any ideas?

Thanks in advance.

[AEK · Accepted solution]

Hello vvanja

Ref :  https://docs.fortinet.com/document/fortimail/7.4.1/administration-guide/40774/configuring-protected-...

Sender address rate control

For users under this domain, you can rate control how much each user can send email.

1. Go to Domain & User > Domain > Domain.
2. Either click New to create a protected domain or double-click a domain to modify it.
3. Click to expand Advanced Setting.
4. Click to expand Sender Address Rate Control.
5. For email users under this domain, you can configure the following rate control settings per user:

• Maximum number of messages per half hour. The default value is 30.
• Maximum number of recipients per half hour. The default value is 60.
• Maximum data size per half hour (MB). The default value is 100 MB.
• Maximum number of spam messages per half hour. The default value is 5.
• Send email notification upon rate control violations and select a notification profile

[PhongPham]

Hello,

#FortiMail  

Please help me answer the following question:

For the parameter "Maximum number of spam messages per half hour. The default value is 5," what recommendation does Fortinet provide, as the default value of 5 seems quite low?

Thanks

[PhongPham]

Hello,

#FortiMail  

Please help me answer the following questions:

For the parameter "Maximum number of spam messages per half hour. The default value is 5," what recommendation does Fortinet provide, as the default value of 5 seems quite low?

Thanks

[AEK]

Hello Phong

Usually the default values are the recommended ones. So you should keep the default value (5) unless there is a specific requirement for your case.

[PhongPham]

Hi #Fortinet

I am integrating the FortiMail and Trellix DLP system with the following flow:

User -> MTA Server --> FortiMail (routes mail without X-RCIS Action) --> DLP (Allow/Block) --> FortiMail -> Outbound

However, after completing the integration, if a user sends 5 emails within 30 minutes, the fifth email is flagged as spam.

We understand that the issue lies with the setting for "Maximum number of spam messages per half hour," which has a default value of 5.

Our current solution is to increase the value of "Maximum number of spam messages per half hour."

Please help us with the following:

1. What is the recommended value for "Maximum number of spam messages per half hour" for an ISP? Could you provide reference documentation?
2. Will changing this value affect any other operations in FortiMail?

Thanks

[AEK]

Hello

If I understand well your concern, I think your clients are actually sending spam mails, which is stopped after 5 spam mails.

The solution here is not to change the above mentioned value but the solution is to find why your clients are sending mails that are considered as spam.

If you don't fix this then other mail servers may tag you as spammers and your IP will be in public spam DBs.