Fortinet FortiGate FortiGate-4000, Руководство администратора, Страница: 225 / 390

Firewall Protection profile
FortiGate-4000 Administration Guide 01-28006-0012-20041105
225
The following options are available for web category filtering through the protection
profile. See
“Category block” on page 329 for more category blocking configuration
options.
Configuring spam filtering options
Figure 109:Protection profile spam filtering options
The following options are available for spam filtering through the protection profile.
See
“Spam filter” on page 335 for more spam filter configuration options.
Enable category block (HTTP
only) Enable FortiGuard category blocking.
Block unrated websites
(HTTP only) Block any web pages that have not been rated by the web
filtering service.
Provide details for blocked
HTTP 4xx and 5xx errors
(HTTP only) Display a replacement message for 4xx and 5xx HTTP errors.
If the error is allowed through then malicious or objectionable
sites could use these common error pages to circumvent web
category blocking.
Allow websites when a rating
error occurs (HTTP only) Allow web pages that return a rating error from the web
filtering service.
Category The FortiGuard web filtering service provides many categories
by which to filter web traffic. You can set the action to take on
web pages for each category. Choose from allow, block, or
monitor.
IP address BWL check Black/white list check. Enable or disable checking incoming IP
addresses against the configured spam filter IP address list. (SMTP
only.)
RBL & ORDBL check Enable or disable checking traffic against configured Real-time
Blackhole List and Open Relay Database List servers.
IP address FortiShield
check Enable or disable the Fortinet spam filtering IP address blacklist:
FortiShield. See “FortiShield IP address black list and spam filter”
on page 337 for a description of this service.
HELO DNS lookup Enable or disable looking up the source domain name (from the
SMTP HELO command) in the Domain Name Server.
E-mail address BWL
check Enable or disable checking incoming email addresses against the
configured spam filter email address list.