Fortinet FortiMail-100, Инструкция по установке

Страница: 85 / 174

Quick Start Wizard Step 6: Configuring access control rules and outgoing antispam and antivirus settings
FortiMail™ Secure Messaging Platform Version 4.0 Patch 1 Install Guide
Revision 2
85
http://docs.fortinet.com/ • Feedback
Step 6: Configuring access control rules and outgoing antispam
and antivirus settings
Step 6 of the Quick Start Wizard configures enables or disables antivirus scanning and
configures the intensity level of antispam scanning for email
outgoing from protected
domains.
Each antispam level (
Off , Low , Medium , and High ) is a default antispam profile that groups
settings for many antispam features. After completing the Quick Start Wizard, if you want
to enable, disable, or differently configure those features, you can use the advanced mode
of the web-based manager to create and/or modify the antispam profiles.
Step 6 also configures access control rules. Access control rules specify whether the
FortiMail unit will process and relay, reject, or discard email messages for SMTP sessions
that are initiated by SMTP clients.
Without any configured access control rules, the FortiMail unit’s access control prevents
SMTP clients from using your protected server or FortiMail unit as an open relay: senders
can deliver email incoming to protected domains, but cannot deliver email outgoing to
unprotected domains. For details, see the
FortiMail Administration Guide .
Usually, you must configure at least one access control rule to allow SMTP clients such as
your email users or email servers to send email to unprotected domains.
Exceptions include if you have not configured any protected domains, such as in
“Example 3: FortiMail unit for an ISP or carrier” on page 128 .
For example, if your protected domain, example.com, contains email addresses in the
format of user1@example.com, user2@example.com, etc., and you want to allow those
email addresses to send email to any external domain as long as they authenticate their
identities, you might configure the following access control rule:
To proceed to Step 7: Reviewing and saving the configuration , select Next > .
Table 5: Example access control rule
Sender Pattern
user*@example.com
Recipient Pattern
*
Sender IP/Netmask
0.0.0.0/0
Reverse DNS Pattern
*
Authentication Status
authenticated
Action
RELAY
Note: Access control rules can also match SMTP sessions based upon the use of TLS. To
configure access control rules with TLS, after using the Quick Start Wizard, use the
advanced mode of the web-based manager to create TLS profiles and select them in
access control rules. For details, see the
FortiMail Administration Guide .