Configuring dictionary options

The Dictionary section of antispam profiles lets you configure the FortiMail unit to use dictionary profiles to determine if the email is likely to be spam. If the FortiMail unit considers email to be spam, it performs the associated action.

Before you can use this feature, you must have existing dictionary profiles. For information on creating dictionary profiles, see “Configuring dictionary profiles” on page 586.

When dictionary scanning is enabled and an email is found to contain a dictionary word, FortiMail units add X-FEAS-DICTIONARY: to the message header, followed by the dictionary word or pattern found in the email. The header may be useful for troubleshooting purposes, when determining which dictionary word or pattern caused an email to be blocked.

Unlike banned word scans, dictionary scans are more resource-intensive. If you do not require dictionary features such as regular expressions, consider using a banned word scan instead.

To configure dictionary scan options

1. When configuring an antispam profile, enable Dictionary in the AntiSpam Profile dialog.
2. Click the arrow to expand
3. From Action, select the action profile that you want the FortiMail unit to use if the heuristic scan finds spam email.

For more information, see ““Configuring antispam action profiles” on page 516.

4. From the With dictionary group drop-down list, select the name of a group of dictionary profiles to use with the dictionary scan. Or, from the With dictionary profile drop-down list, select the name of a dictionary profile to use with the dictionary scan.
5. In the Minimum dictionary score field, enter the number of dictionary term matches above which the email will be considered to be spam. Note that the score value is based on individual dictionary profile matches, not the dictionary group matches.
6. Continue to the next section, or click Create or OK to save the antispam profile.

Configuring banned word options

The Banned word section of antispam profiles lets you configure the FortiMail unit to consider email messages as spam if the subject line and/or message body contain a prohibited word. When a banned word is found, the FortiMail unit treats the email as spam and performs the associated action.

When banned word scanning is enabled and an email is found to contain a banned word, the FortiMail unit adds X-FEAS-BANNEDWORD: to the message header, followed by the banned word found in the email. The header may be useful for troubleshooting purposes, when determining which banned word or phrase caused an email to be blocked.

Unlike dictionary scans, banned word scans do not support regular expressions. .

To configure banned word scan options

1. When configuring an antispam profile, enable Banned word in the AntiSpam Profile
2. From Action, select the action profile that you want the FortiMail unit to use if the banned word scan finds spam email.

For more information, see “Configuring antispam action profiles” on page 516.

3. Next to Banned word, click Configuration.

A pop-up window appears, showing the words or phrases that will be prohibited by this profile. You can add or delete words on this window.

Figure 208:Banned word list

4. Click New, then enter the banned word in the field that appears.
5. Select Subject to have the subject line inspected for the banned word. If the check box is clear, the subject line is not inspected.
6. Select Body to have the message body inspected for the banned word. If the check box is clear, the message body is not inspected.
7. Click OK.
8. Continue to the next section, or click Create or OK to save the antispam profile.