Configuring SMTP relay hosts

Configure one or more SMTP relays, if needed, to which the FortiMail unit will relay outgoing email. This is typically provided by your Internet service provider (ISP), but could be mail relays on your internal network.

When you configure mail server settings (“Configuring outgoing email options” on page 371), you can specify to use a relay host for outgoing email.

If the SMTP relay’s domain name resolves to more than one IP address, for each SMTP session, the FortiMail unit will randomly select one of the IP addresses from the result of the DNS query, effectively load balancing between the SMTP relays.

If you do not configure a relay, for outgoing email delivered by the built-in MTA, the FortiMail unit will instead query the DNS server for the MX record of the mail domain in the recipient’s email address (RCPT TO:), and relay the email directly to that mail gateway. For details, see “When FortiMail uses the proxies instead of the built-in MTA” on page 415.

Server relay is ignored if the FortiMail unit is operating in transparent mode, and “Use client-specified SMTP server to send email” on page 422 (for outgoing connections) or “Use this domain’s SMTP server to deliver the mail” on page 389 (for incoming connections containing outgoing email messages) is enabled.

To configure STMP relays

1. Go to Mail Settings > Settings > Relay Host List. You can configure a maximum of 5 relays.
2. Click New.
3. Configure the following:

GUI item               Description

Name                  Enter a descriptive name for this relay host.

Host name/IP      Enter the domain name or IP address of an SMTP relay.

Port                  Enter the TCP port number on which the SMTP relay listens.

This is typically provided by your Internet service provider (ISP).

GUI item	Description
Use SMTPS	Enable to initiate SSL- and TLS-secured connections to the SMTP relay if it supports SSL/TLS. When disabled, SMTP connections from the FortiMail unit’s built-in MTA or proxy to the relay will occur as clear text, unencrypted. This option must be enabled to initiate SMTPS connections.
Authentication Required	If the relay server requires use of the SMTP AUTH command, enable this option, click the arrow to expand the section and configure: •      User name: Enter the name of the FortiMail unit’s account on the SMTP relay. •      Password: Enter the password for the FortiMail unit’s user name. •      Authentication type: Available SMTP authentication types include: • AUTO (automatically detect and use the most secure SMTP authentication type supported by the relay server) • PLAIN (provides an unencrypted, scrambled password) •      LOGIN (provides an unencrypted, scrambled password) •      DIGEST-MD5 (provides an encrypted hash of the password) •      CRAM-MD5 (provides an encrypted hash of the password, with hash replay prevention, combined with a challenge and response mechanism)

Configuring global disclaimers

The Mail Settings > Settings > Disclaimer tab lets you configure system-wide disclaimer messages.A disclaimer message is text that is generally attached to email to warn the recipient that the email contents may be confidential.

Disclaimers can be appended to both incoming and outgoing email. For an explanation of directionality, see “Incoming versus outgoing email messages” on page 454.

To access this part of the web UI, your administrator account’s:

• Domain must be System
• access profile must have Read or Read-Write permission to the Others category

For details, see “About administrator account permissions and domains” on page 290.

To configure disclaimer messages

1. Go to Mail Settings > Settings > Disclaimer.
2. Configure the following:

GUI item                                   Description

Allow per-domain settings Enable to allow protected domains to select from either the system-wide disclaimer messages, configured below, or their own separate disclaimer messages.

Disable to require that all protected domains use the system-wide disclaimer messages.

If this option is disabled, domain-specific disclaimers cannot be configured. For information on configuring disclaimer messages specific to a protected domain, see “Disclaimer for a domain” on page 398.

For incoming messages
Disclaimer in incoming message header	Enable to append a disclaimer message to the message header of incoming messages, then enter the disclaimer message. The maximum length is 256 characters.
Disclaimer in incoming message body	Enable to append a disclaimer message to the message body of incoming messages, then enter the disclaimer message. The maximum length is 1024 characters.
For outgoing messages
Disclaimer in outgoing message header	Enable to append a disclaimer message to the message header of outgoing messages, then enter the disclaimer message. The maximum length is 256 characters.
Disclaimer in outgoing message body	Enable to append a disclaimer message to the message body of outgoing messages, then enter the disclaimer message. The maximum length is 1024 characters.
Enable disclaimer exclusion list	If you do not want to insert disclaimers to the email messages from certain senders or to certain recipients, you can enable this option. For details about disclaimer exclusion list, see “Configuring disclaimer exclusion list” on page 375.