Manuals / Fortinet / Computer Equipment / Network Card

Fortinet 3.0 MR4 manual

Models: 3.0 MR4

1 368

Download 368 pages 59.64 Kb

Page 367

www.fortinet.com

Image 367

Fortinet 3.0 MR4 manual

Contents

I R E F E R E N C E Trademarks Contents Get Set 122 157 167 198 237 275 Unset 353 Index 361 Page About this document About the FortiMail Secure Messaging PlatformService./H4 Execute restore config filenamestrAuthentication/TITLE/HEAD BODYH4You must authenticate to use thisFortiMail QuickStart Guides FortiMail documentationComments on Fortinet technical documentation Customer service and technical supportBypassbounceverify What’s new06-30004-0420-20080814 Set console page lengthint CLI command syntaxSet console Set allowaccess ping https ssh snmp http telnet Connecting to the CLIWelcome FortiMail-400 loginGet system interface To connect to the CLI using SSH CLI command branchesExecute Execute backup config namestr serveripv4 Backup configExecute restore Execute checklogdisk ChecklogdiskExecute checkmaildisk Execute checkmaildisk CheckmaildiskExecute checklogdisk Execute clearqueue ClearqueueExecute factoryreset FactoryresetFormatlogdisk Execute formatmaildisk Execute formatmaildiskbackupExecute formatlogdisk Execute formatmaildisk FormatmaildiskExecute formatmaildiskbackup FormatmaildiskbackupExecute formatmaildisk Execute clearqueue MaintainExecute maintain mailqueue clear age ageunit Execute maintain mailqueue clear age 23dExecute nslookup host mx nameserver NslookupExecute ping Execute traceroute Partitionlogdisk Execute partitionlogdisk logintExecute ping hostname hostipv4 PingExecute ping-option Execute ping-option option Ping-optionExecute ping Execute reboot RebootExecute reload Reload Execute rebootExecute reload Execute restore config image namestr serveripv4 RestoreExecute backup config Execute shutdown ShutdownExecute smtptest ipv4addrport domain domainstr SmtptestExecute smtptest 192.168.100.225 domain example.com Execute telnettest hostipv4port TelnettestExecute traceroute hostipv4 TracerouteExecute maintain Execute ping Execute update config Update configExecute updatecenter updatenow Updatecenter updatenowUpdatecenter updatenow Get Get alertemail configuration Alertemail configurationGet alertemail setting Get alertemail configuration Alertemail settingGet antivirus AntivirusGet as option Get History Get auth imap pop3 radius smtp AuthGet av profilename Get config searchstring ConfigGet console ConsoleGet fshd status Fshd statusGet ipprofile Is disabled, Difference are not allowedIppolicy Get ippolicy policynumberGet ippool namestr IppoolGet ipprofile Set ippool Set ippool addentry Get ipprofile profilename IpprofileGet ippolicy Get ldapprofile profile namestr LdapprofileGet limits LimitsGet log elog Log elogGet log logsetting Log logsettingSet log setting local Set log setting syslog Get log msisdn Log msisdnSet log msisdn Set log view fields Get log policy Log policyLog query Set log reportconfig qryGet log query FortiMail v3.0 New Log reportconfigGet log view event history spam virus Log viewGet mailserver MailserverGet mailserver access Mailserver accessGet mailserver archive Mailserver archiveGet mailserver archive exemptlist local policy remote Get mailserver localdomain Mailserver localdomainsMailserver smtp Get mailserver smtp settingGet mailserver systemquarantine Mailserver systemquarantineGet misc profilename Misc profileGet outcontent namestr OutcontentGet outpolicy Get outprofile Outpolicy Get outcontent Get outprofileGet outpolicy namestr Outprofile Get outcontent Get outpolicyGet outprofile namestr Get policy fqdn PolicyGet spam deepheader Spam deepheaderGet spam heuristic rules Spam heuristic rulesGet spam retrieval policy fqdnstr Spam retrieval policyGet system item SystemTime time Snmp thresholdStatus Time ntpAlias Group Ldap map Mail Map UserGet user item Get userpolicyGet userpolicy namestr UserpolicyGet user Page Set Set alertemail configuration mailto none Alertemail configuration mailtoSet alertemail deferq Set alertemail setting option Intervalminutes Alertemail deferqTriggervalue 000Set alertemail configuration mailto Set alertemail deferq Alertemail setting optionSet alertemail setting option optionlist none Set alertemail setting option diskfull quotafullSet antivirus enable disable Set as blacklistaction reject discard profile As blacklistactionSet as profile modify whitelistword Set ipprofile sendervalidation As bounceverifyTagexpiry ExpiryintSet as control autorelease delete release controlaccount As control autoreleaseAs control bayesian Set as profile modify bayesian Set as profile modify actions As greylist Set as profile modify greylist Set ipprofile mmsreputation As mmsreputationSet as profile namestr delete As profile deleteAs profile modify actions Webrelease Enable disableAs profile modify auto-release Auto-releaseAs profile modify bannedword Set as profile namestr modify bannedword enable disableSet as profile modify bannedwordlist Set as profile modify bannedword As profile modify bannedwordlistSet as control bayesian As profile modify bayesianFortiMail v3.0 MR1 checkip and headeranalysis added Enable disable CheckipAs profile modify deepheader HeaderanalysisDictprofile As profile modify dictionaryDictint As profile modify dnsbl Set as profile namestr modify dnsbl enable disableSet as profile modify dnsblserver Move-to newint As profile modify dnsblserverSet as profile modify dnsbl HoststrAs profile modify forgedip Set as profile namestr modify forgedip enable disableAs profile modify fortishield As profile modify greylist Set as profile namestr modify greylist enable disableAs profile modify heuristic Aggressive As profile modify imagespamDiscard forward As profile modify individualaction scannerScanner bannedword Subject rejectSet as control autorelease Set as spamreport As profile modify quarantineDays daysint As profile modify rewritercpt Bypassonauth As profile modify scanoptionsMaxsize sizeint As profile modify surbl Set as profile namestr modify surbl enable disableSet as profile modify surblserver Set as profile modify surbl As profile modify surblserverRename-to newstr Stag tagstr As profile modify tagsHtag tagstr HeaderAs profile modify virus Set as profile namestr modify virus enable disableAs profile modify whitelistword Set as profile namestr modify whitelistword enable disableSet as profile modify whitelistwordlist As profile modify whitelistwordlist Set as control autorelease Set as profile modify quarantine As spamreportAs trusted Set auth imap namestr rename-to newstr Auth imap rename-toSet auth imap server Option ssl secure Auth imap serverSet auth imap rename-to Serveripv4 Port portintSet auth pop3 namestr rename-to newstr Auth pop3 rename-toSet auth pop3 server Set auth pop3 rename-to Auth pop3 server110 Set auth radius namestr rename-to newstr Auth radius rename-toSet auth radius server Serveripv4 Secret Passwordstr DomainAuth radius server Set auth radius rename-toSet auth smtp namestr rename-to newstr Auth smtp rename-toSet auth smtp server Set auth smtp rename-to Auth smtp serverSet av avprofname delete Av deleteSet av avprofname modify actions discard reject Av modify actionsAv modify heuristic Set av avprofname modify heuristic enable disableAv modify heuristic heuristicaction Av modify scanner Set av avprofname modify scanner enable disableSet av avprofname rename-to newnamestr Av rename-toLineint 38400 57600 Mode batch lineSet system appearance Set system option Baudrate 9600Set content namestr delete Content deleteSet content modify filetype Set content modify monitor Content modify action Set content namestr modify bypassonauth enable disable Content modify bypassonauthSet content modify action Set content modify filetype Set content namestr modify defersize sizeint Content modify defersizeSet content modify bypassonauth Set content modify filetype Blocked Content modify filetypeSet content modify action Set content modify monitor FiletypestrSet content modify monitor action Content modify monitorReplace review Content modify monitor actionAction none None155 Fshd Set ippolicy delete Set ippolicy move Set ippolicy policyintScan Ippolicy actionSet ippolicy policyint action scan reject tempfail PolicyintSet ippolicy policyint as namestr Ippolicy asIppolicy auth Set ippolicy policyint av namestr Ippolicy avSet ippolicy policyint content namestr Ippolicy contentSet ippolicy policyint delete Ippolicy deleteSet ippolicy Set ippolicy move Ippolicy exclusive Set ippolicy policyint exclusive enable disableSet ippolicy policyint ip namestr Ippolicy ipSet ippolicy policyint match clientipv4/mask Ippolicy match gateway and server modes0.0/0 Ippolicy match transparent modeSet ippolicy match gateway and server modes Clientipv4/maskSet ippolicy policyint move newint Ippolicy moveSet ippolicy Set ippolicy delete Ippolicy smtp Set ippool namestr Ipv4 Ippool addentrySet ippool namestr addentry ipv4 sizeint Set ippool Set ippool delentry Set ippool delete Get ippoolSet ippool Set ippool addentry Set ippool delete Get ippool Ippool delentrySet ippool namestr delentry rangeIDint RangeIDintSet ippool namestr delete Ippool delete174 Ipprofile check Integer seconds SenddsnSender SpliceIpprofile connection Set ipprofile namestr delete Ipprofile deleteSet ipprofile rename Increment int Ipprofile errorInitialdelay int Free intIpprofile headermanipulation Rset int Ipprofile limitEmails int Ipprofile list Ipprofile mmsreputation Set ipprofile namestr rename newstr Ipprofile renameSet ipprofile delete Ipprofile senderreputation Ipprofile sendervalidation 187 Connection Ipprofilesetting ratecontrolSet ipprofilesetting ratecontrol connection message RatecontrolAsavstate Ldapprofile profile asavAntispam asstr Antivirus avstrSet ldapprofile clearallcache Ldapprofile clearallcacheLdapprofile profile auth Set ldapprofile profile namestr clearcache Ldapprofile profile clearcache389 Ldapprofile profile fallbackserverFallbackserver hoststr Serveripv4Ldapprofile profile group Ldapprofile profile option Ldapprofile profile pwd Ldapprofile profile routing Server hoststr Ldapprofile profile serverSecure none ssl Ldapprofile profile user Ldapprofile profile user Set Adminperdomint AdminintLimits domain-level Domainint Limits system-level generalProfilesint Set limits system-level groups groupsint membersint Limits system-level groupsSet limits system-level mail-users usersint Limits system-level mail-usersLimits system-level other-profiles Outgoingint Limits system-level policiesSet limits system-level policies ipint outgoingint Ipint207 Set log msisdn enable disable Log policy destination event Log policy destination history Detected none Log policy destination spamInfected none Log policy destination virusLog reportconfig direction Domainname3 Log reportconfig domainDomainname1 Domainname2Emailaddr3 Log reportconfig mailtoEmailaddr1 Emailaddr2Log reportconfig period Qry querystr1 Log reportconfig qryQuerystr2 Querystr3 Datesint Log reportconfig schedule hourSchedule hour daily Days daysstr datesEmergency Log setting consoleEnable disable Loglevel SeverityintegerLog setting local Log setting syslog Log setting syslog Set Log view fields Loglevel event Log view loglevelHistory spam virus Loglevel Senderpattern Patternstr AuthenticatedRule number Set moveRelay reject MR4 Added authenticated and tlsprofileTlsprofile Profilestr Permission okMailserver archive account Set mailserver archive exemptlist exemptid ? Mailserver archive exemptlistSet mailserver archive local quota quotaint Mailserver archive local quotaBody Mailserver archive policySet mailserver archive policy policyid ? Recipient subjectMailserver archive remote Set mailserver deadmail value Mailserver deadmailSmtps portnumber Mailserver portnumberPop3 Portnumber Smtp PortnumberSet mailserver proxy smtp unknown Mailserver proxy smtp interfaceHide Mailserver proxy smtp unknownSet mailserver proxy smtp unknown hide original Set mailserver proxy smtp interfacePort portnumber AuthenticationEnable disable Username namestr Mailserver relayserverStarttime hhmm Mailserver smtp deferbigmsgStoptime hhmm Set mailserver smtp delivery noesmtp yes no Mailserver smtp deliveryMailserver smtp dsn Mailserver smtp ldapdomaincheck Mailserver smtp queue Mailserver smtpauth Mailserver smtpssl Set mailserver smtpssl enabled disabledDir Type disableMailserver smtp storage Client typeClient server Mailserver smtp storage cquarSet mailserver smtp storage cquar type client Mailserver smtp storage cquar Set Set content modify action Set content modify monitor action Set misc profile namestr delete Misc profile deleteSet misc profile rename-to Set misc profile namestr modify quota quotaint Misc profile modify quotaQuotaint Misc profile modify userstatus Set misc profile namestr modify userstatus enable disableUserstatus Webmailaccess Misc profile modify webmailaccessSet misc profile namestr rename-to newstr Misc profile rename-toSet misc profile delete Set outcontent namestr delete Outcontent deleteSet outcontent modify action Set outcontent modify monitor Outcontent modify actionForward reject Set outcontent namestr modify bypassonauth enable disable Outcontent modify bypassonauthSet outcontent modify action Set outcontent modify filetype Outcontent modify filetype Reject replace Outcontent modify monitor actionReview Set outcontent modify monitor action Outcontent modify monitorTags header enable 259 Set outpolicy userstr delete Outpolicy profile deleteSet outpolicy move-to Set outpolicy rename-to Outpolicy modify Set outpolicy userstr move-to newint Outpolicy move-toSet outpolicy profile delete Set outpolicy rename-to Set outpolicy userstr rename-to newstr Outpolicy rename-toSet outpolicy profile delete Set outpolicy move-to Set outprofile profile namestr delete Outprofile profile deleteSet outprofile profile rename-to Outprofile profile modify actions Review enable disableNamestr Outprofile profile modify bannedword Outprofile profile modify bannedwordlist Outprofile profile modify bayesian Outprofile profile modify deepheader Outprofile profile modify dictionary Outprofile profile modify dnsbl Set outprofile profile namestr modify dnsbl enable disableOutprofile profile modify dnsblserver Outprofile profile modify fortishield Outprofile profile modify greylist Outprofile profile modify heuristic Enable disable Upper-levelOutprofile profile modify imagespam Action Outprofile profile modify individualaction scannerOutprofile profile modify scanoptions Outprofile profile modify surbl Set outprofile profile namestr modify surbl enable disableOutprofile profile modify surblserver Outprofile profile modify tags Outprofile profile modify virus Set outprofile profile namestr modify virus enable disableSet outprofile profile modify whitelistwordlist Outprofile profile modify whitelistwordSet outprofile profile modify whitelistword Outprofile profile modify whitelistwordlistSet outprofile profile namestr rename-to newstr Outprofile profile rename-toSet outprofile profile delete 286 Set policy fqdnstr delete Policy deleteSet policy modify rename-to Policy fqdnstr Policy modify addassociationAddassociation fqdn Policy modify bverifyaddr Set policy fqdnstr modify bverifyaddr disable ldap smtpSet policy modify verifyaddr Fallbackhost Hostipv4 Policy modify fallbackFallbackport Portint Policy modify ip Policy modify issubdomain Set policy fqdnstr modify issubdomain enable disableSet policy fqdnstr modify ldapasav profile profilestr Set policy fqdnstr modify ldapasav state enable disableSet policy fqdnstr modify ldaprouting state enable disable Policy modify ldapSet policy fqdnstr modify mxflag 0 Policy modify mxflagZoneintr Policy modify tpSet policy fqdnstr modify tp zoneintr yes no yes no FqdnstrSet policy delete Set policy modify rename-to Policy modify userVerifyaddr ldap Smtp disablePolicy modify verifyaddr Set policy modify bverifyaddrSet policy fqdnstr rename-to newfqdnstr Policy modify rename-toSet policy delete Confidenceint Set spam deepheader confidence confidenceintConfidence 95.0000Set as control autorelease Set system option Set user System adminSet console System appearanceSet system autoupdate pushaddressoverride disable System autoupdate pushaddressoverrideSet system autoupdate pushupdate enable disable System autoupdate pushupdateSet system autoupdate schedule enable disable every hhmm System autoupdate scheduleSet system autoupdate schedule enable disable daily hhmm Username Usernamestr System autoupdate tunnelingAddress addrip4 Port portnumSystem ddns System disclaimer allowdomain Set system disclaimer allowdomain enable disableSystem disclaimer incoming System disclaimer outgoing System dns Central-management Autobackup enable disableEnable disable Initiate enable disable System fortimanagerSet system ha config portinteger timeoutinteger System ha configSet system ha config 20001 Cpeeripv4 System ha takeover command DisabledAny Cpeerinteger255.255.255.0 Primary-localipv410.0.0.1 Netmaskipv4Set system ha interface port5 10.0.0.3 Set system ha interface port5 10.0.0.2Set system ha interface port5 10.0.0.4 317 Dataportinteger Set system ha data dataportinteger timeoutintegerSet system ha config 20002 System ha dataSystem ha datadir Checktimeinteger System ha lserviceSet system ha lservice pprts 30 Ports hdMode mode System ha modeSet system ha mode mode Set system ha mode cmaster20000 System ha monitorSet system ha monitor port 20000 20 Heartbeatportinteger323 Set system ha on-failure slave Set system ha on-failure off restore slaveRestore System ha on-failureSet system ha passwd passwdstr System ha passwdSet system ha passwd Passw4D Set system ha remote-as-heartbeat enable Set system ha remote-as-heartbeat enable disableSystem ha remote-as-heartbeat Restart System ha restart restore resyncSet system ha restart restore resync Set system ha resyncSystem ha rservice Set system ha rservice pop 10.10.10.2 25 30 20 System ha takeover Set system ha takeover port5 add 10.10.10.2 System ha takeover Set system hostname hostnamestr System hostnameSystem interface config Defaultgw Disable System interface mode dhcpSet system interface intfstr mode dhcp Connection DisableSet system interface intfstr mode static ip addrip4 maskip4 System interface mode staticSet system opmode gateway server transparent System opmodeSystem option Set system admin Set system appearanceSet system option option1 value1 System route number System snmp community Set system snmp sysinfo threshold Set system snmp community System snmp sysinfo thresholdSet system time ntp System time manualSet system time manual System time ntpSystem usrgrp Set system admin Set userSet user ldap map domain domainname profile ldapprofilename Set user alias name namestr member addr addrSet user alias name namestr addmember addr addr Set user map internalname intstr externalname extstrUser pki Set userpolicy move-to Set userpolicy rename-to Userpolicy deleteSet userpolicy namestr delete Miscstr Userpolicy modifyAsstr AvstrSet userpolicy delete Set userpolicy rename-to Userpolicy move-toSet userpolicy namestr move-to newint Set userpolicy delete Set userpolicy move-to Userpolicy rename-toSet userpolicy namestr rename-to newstr 352 Unset Unset alertemail configuration Unset ldapprofile profile namestr Unset log reportconfig namestr Unset mailserver configuration Unset system configuration Map name mapstr Unset user configurationUser transparent and gateway Alias name aliasstrGroup name groupstr User serverLdap map domain domainint Index Dkim 186 DNS 363 Smtp 365 366