trace a email

[Mels]

Hi all, We have 2 Fortimails in gateway mode, for several protected domains. I want define an incoming " ip policies" , I see in the log that the Destination is always the ip address of the Fortimail itself. If I want to use special antispam settings for a domain, is it correct that I do that in the Recipient Policies? Is there a way of tracing a test email, so I can see which rules are effected? I want to know if the email goes thru the defined policy rules. On for example Cisco, I can do a test and see the process order of the defined policy. Thanks in advance for the help, Mels

[emnoc]

For the 1st part, yes the destination address is that of the MX entry which is always your fortinet(s). For the 2nd part, recipient policies, trumps address policies. So if you want to trace a email, use the logging and filter search on the recipient Tracing is not as straight forward good as a IronPort , but you can search the logs for the action, src, etc.....

[npassion]

For the 2nd part, there is " policy ID" field in history log. It tells you what IP / recipient polices matched the email.

[Mels]

Thanks for the response, but I can' t see a " policy ID" field, see the screenprint

[ehlo]

mkooijman, I believe this is a new feature in version 5. What is your build? ehlo

[Mels]

our release is now: 4.0 build 528 patch 4 We are planning soon the upgrade to version 5.