Fortinet 3.0 MR4 specs

www.fortinet.com

Image 368

Fortinet 3.0 MR4 manual

Contents

I R E F E R E N C E Trademarks Contents Get Set 122 157 167 198 237 275 Unset 353 Index 361 Page About the FortiMail Secure Messaging Platform About this document Execute restore config filenamestr Authentication/TITLE/HEADBODYH4You must authenticate to use this Service./H4 FortiMail documentation FortiMail QuickStart Guides Customer service and technical support Comments on Fortinet technical documentation What’s new Bypassbounceverify 06-30004-0420-20080814 Set console CLI command syntaxSet console page lengthint Connecting to the CLI Set allowaccess ping https ssh snmp http telnet Get system interface FortiMail-400 loginWelcome CLI command branches To connect to the CLI using SSH Execute Execute restore Backup configExecute backup config namestr serveripv4 Execute checkmaildisk ChecklogdiskExecute checklogdisk Execute checklogdisk CheckmaildiskExecute checkmaildisk Clearqueue Execute clearqueue Factoryreset Execute factoryreset Execute formatlogdisk Execute formatmaildisk Execute formatmaildiskbackupFormatlogdisk Formatmaildisk Execute formatmaildisk Execute formatmaildisk FormatmaildiskbackupExecute formatmaildiskbackup Maintain Execute maintain mailqueue clear age ageunitExecute maintain mailqueue clear age 23d Execute clearqueue Execute ping Execute traceroute NslookupExecute nslookup host mx nameserver Execute partitionlogdisk logint Partitionlogdisk Execute ping-option PingExecute ping hostname hostipv4 Execute ping Ping-optionExecute ping-option option Execute reload RebootExecute reboot Execute reload Execute rebootReload Execute backup config RestoreExecute restore config image namestr serveripv4 Shutdown Execute shutdown Execute smtptest 192.168.100.225 domain example.com SmtptestExecute smtptest ipv4addrport domain domainstr Telnettest Execute telnettest hostipv4port Execute maintain Execute ping TracerouteExecute traceroute hostipv4 Update config Execute update config Updatecenter updatenow Execute updatecenter updatenow Updatecenter updatenow Get Get alertemail setting Alertemail configurationGet alertemail configuration Alertemail setting Get alertemail configuration Antivirus Get antivirus Get as option Get History Auth Get auth imap pop3 radius smtp Get av profilename Config Get config searchstring Console Get console Fshd status Get fshd status Is disabled, Difference are not allowed IppolicyGet ippolicy policynumber Get ipprofile Get ipprofile Set ippool Set ippool addentry IppoolGet ippool namestr Ipprofile Get ipprofile profilename Get ippolicy Ldapprofile Get ldapprofile profile namestr Limits Get limits Log elog Get log elog Set log setting local Set log setting syslog Log logsettingGet log logsetting Set log msisdn Set log view fields Log msisdnGet log msisdn Log policy Get log policy Get log query Set log reportconfig qryLog query Log reportconfig FortiMail v3.0 New Log view Get log view event history spam virus Mailserver Get mailserver Mailserver access Get mailserver access Get mailserver archive exemptlist local policy remote Mailserver archiveGet mailserver archive Mailserver localdomains Get mailserver localdomain Get mailserver smtp setting Mailserver smtp Mailserver systemquarantine Get mailserver systemquarantine Misc profile Get misc profilename Get outpolicy Get outprofile OutcontentGet outcontent namestr Get outpolicy namestr Get outcontent Get outprofileOutpolicy Get outprofile namestr Get outcontent Get outpolicyOutprofile Policy Get policy fqdn Spam deepheader Get spam deepheader Spam heuristic rules Get spam heuristic rules Spam retrieval policy Get spam retrieval policy fqdnstr System Get system item Snmp threshold StatusTime ntp Time time User Get user itemGet userpolicy Alias Group Ldap map Mail Map Get user UserpolicyGet userpolicy namestr Page Set Set alertemail deferq Set alertemail setting option Alertemail configuration mailtoSet alertemail configuration mailto none Alertemail deferq Triggervalue000 Intervalminutes Alertemail setting option Set alertemail setting option optionlist noneSet alertemail setting option diskfull quotafull Set alertemail configuration mailto Set alertemail deferq Set antivirus enable disable Set as profile modify whitelistword As blacklistactionSet as blacklistaction reject discard profile As bounceverify TagexpiryExpiryint Set ipprofile sendervalidation As control autorelease Set as control autorelease delete release controlaccount As control bayesian Set as profile modify bayesian Set as profile modify actions As greylist Set as profile modify greylist As mmsreputation Set ipprofile mmsreputation As profile delete Set as profile namestr delete As profile modify actions Enable disable As profile modify auto-releaseAuto-release Webrelease Set as profile modify bannedwordlist Set as profile namestr modify bannedword enable disableAs profile modify bannedword As profile modify bannedwordlist Set as profile modify bannedword As profile modify bayesian Set as control bayesian Enable disable Checkip As profile modify deepheaderHeaderanalysis FortiMail v3.0 MR1 checkip and headeranalysis added Dictint As profile modify dictionaryDictprofile Set as profile modify dnsblserver Set as profile namestr modify dnsbl enable disableAs profile modify dnsbl As profile modify dnsblserver Set as profile modify dnsblHoststr Move-to newint Set as profile namestr modify forgedip enable disable As profile modify forgedip As profile modify fortishield Set as profile namestr modify greylist enable disable As profile modify greylist As profile modify heuristic As profile modify imagespam Aggressive As profile modify individualaction scanner Scanner bannedwordSubject reject Discard forward Days daysint As profile modify quarantineSet as control autorelease Set as spamreport As profile modify rewritercpt Maxsize sizeint As profile modify scanoptionsBypassonauth Set as profile modify surblserver Set as profile namestr modify surbl enable disableAs profile modify surbl Rename-to newstr As profile modify surblserverSet as profile modify surbl As profile modify tags Htag tagstrHeader Stag tagstr Set as profile namestr modify virus enable disable As profile modify virus Set as profile modify whitelistwordlist Set as profile namestr modify whitelistword enable disableAs profile modify whitelistword As profile modify whitelistwordlist As spamreport Set as control autorelease Set as profile modify quarantine As trusted Set auth imap server Auth imap rename-toSet auth imap namestr rename-to newstr Auth imap server Set auth imap rename-toServeripv4 Port portint Option ssl secure Set auth pop3 server Auth pop3 rename-toSet auth pop3 namestr rename-to newstr 110 Auth pop3 serverSet auth pop3 rename-to Set auth radius server Auth radius rename-toSet auth radius namestr rename-to newstr Passwordstr Domain Auth radius serverSet auth radius rename-to Serveripv4 Secret Set auth smtp server Auth smtp rename-toSet auth smtp namestr rename-to newstr Auth smtp server Set auth smtp rename-to Av delete Set av avprofname delete Av modify actions Set av avprofname modify actions discard reject Set av avprofname modify heuristic enable disable Av modify heuristic Av modify heuristic heuristicaction Set av avprofname modify scanner enable disable Av modify scanner Av rename-to Set av avprofname rename-to newnamestr 38400 57600 Mode batch line Set system appearance Set system optionBaudrate 9600 Lineint Set content modify filetype Set content modify monitor Content deleteSet content namestr delete Content modify action Set content modify action Set content modify filetype Content modify bypassonauthSet content namestr modify bypassonauth enable disable Set content modify bypassonauth Set content modify filetype Content modify defersizeSet content namestr modify defersize sizeint Content modify filetype Set content modify action Set content modify monitorFiletypestr Blocked Content modify monitor Set content modify monitor action Content modify monitor action Action noneNone Replace review 155 Fshd Set ippolicy policyint Set ippolicy delete Set ippolicy move Ippolicy action Set ippolicy policyint action scan reject tempfailPolicyint Scan Ippolicy as Set ippolicy policyint as namestr Ippolicy auth Ippolicy av Set ippolicy policyint av namestr Ippolicy content Set ippolicy policyint content namestr Set ippolicy Set ippolicy move Ippolicy deleteSet ippolicy policyint delete Set ippolicy policyint exclusive enable disable Ippolicy exclusive Ippolicy ip Set ippolicy policyint ip namestr Ippolicy match gateway and server modes Set ippolicy policyint match clientipv4/mask Ippolicy match transparent mode Set ippolicy match gateway and server modesClientipv4/mask 0.0/0 Set ippolicy Set ippolicy delete Ippolicy moveSet ippolicy policyint move newint Ippolicy smtp Set ippool namestr Ippool addentry Set ippool namestr addentry ipv4 sizeintSet ippool Set ippool delentry Set ippool delete Get ippool Ipv4 Ippool delentry Set ippool namestr delentry rangeIDintRangeIDint Set ippool Set ippool addentry Set ippool delete Get ippool Ippool delete Set ippool namestr delete 174 Ipprofile check Senddsn SenderSplice Integer seconds Ipprofile connection Set ipprofile rename Ipprofile deleteSet ipprofile namestr delete Ipprofile error Initialdelay intFree int Increment int Ipprofile headermanipulation Emails int Ipprofile limitRset int Ipprofile list Ipprofile mmsreputation Set ipprofile delete Ipprofile renameSet ipprofile namestr rename newstr Ipprofile senderreputation Ipprofile sendervalidation 187 Ipprofilesetting ratecontrol Set ipprofilesetting ratecontrol connection messageRatecontrol Connection Ldapprofile profile asav Antispam asstrAntivirus avstr Asavstate Ldapprofile clearallcache Set ldapprofile clearallcache Ldapprofile profile auth Ldapprofile profile clearcache Set ldapprofile profile namestr clearcache Ldapprofile profile fallbackserver Fallbackserver hoststrServeripv4 389 Ldapprofile profile group Ldapprofile profile option Ldapprofile profile pwd Ldapprofile profile routing Secure none ssl Ldapprofile profile serverServer hoststr Ldapprofile profile user Ldapprofile profile user Set Limits domain-level AdminintAdminperdomint Profilesint Limits system-level generalDomainint Limits system-level groups Set limits system-level groups groupsint membersint Limits system-level mail-users Set limits system-level mail-users usersint Limits system-level other-profiles Limits system-level policies Set limits system-level policies ipint outgoingintIpint Outgoingint 207 Set log msisdn enable disable Log policy destination event Log policy destination history Log policy destination spam Detected none Log policy destination virus Infected none Log reportconfig direction Log reportconfig domain Domainname1Domainname2 Domainname3 Log reportconfig mailto Emailaddr1Emailaddr2 Emailaddr3 Log reportconfig period Querystr2 Querystr3 Log reportconfig qryQry querystr1 Log reportconfig schedule hour Schedule hour dailyDays daysstr dates Datesint Log setting console Enable disable LoglevelSeverityinteger Emergency Log setting local Log setting syslog Log setting syslog Set Log view fields History spam virus Loglevel Log view loglevelLoglevel event Patternstr Authenticated Rule numberSet move Senderpattern MR4 Added authenticated and tlsprofile TlsprofileProfilestr Permission ok Relay reject Mailserver archive account Mailserver archive exemptlist Set mailserver archive exemptlist exemptid ? Mailserver archive local quota Set mailserver archive local quota quotaint Mailserver archive policy Set mailserver archive policy policyid ?Recipient subject Body Mailserver archive remote Mailserver deadmail Set mailserver deadmail value Mailserver portnumber Pop3 PortnumberSmtp Portnumber Smtps portnumber Mailserver proxy smtp interface Set mailserver proxy smtp unknown Mailserver proxy smtp unknown Set mailserver proxy smtp unknown hide originalSet mailserver proxy smtp interface Hide Authentication Enable disable Username namestrMailserver relayserver Port portnumber Stoptime hhmm Mailserver smtp deferbigmsgStarttime hhmm Mailserver smtp delivery Set mailserver smtp delivery noesmtp yes no Mailserver smtp dsn Mailserver smtp ldapdomaincheck Mailserver smtp queue Mailserver smtpauth Set mailserver smtpssl enabled disabled Mailserver smtpssl Type disable Mailserver smtp storageClient type Dir Set mailserver smtp storage cquar type client Mailserver smtp storage cquarClient server Mailserver smtp storage cquar Set Set content modify action Set content modify monitor action Set misc profile rename-to Misc profile deleteSet misc profile namestr delete Quotaint Misc profile modify quotaSet misc profile namestr modify quota quotaint Userstatus Set misc profile namestr modify userstatus enable disableMisc profile modify userstatus Misc profile modify webmailaccess Webmailaccess Set misc profile delete Misc profile rename-toSet misc profile namestr rename-to newstr Outcontent delete Set outcontent namestr delete Forward reject Outcontent modify actionSet outcontent modify action Set outcontent modify monitor Set outcontent modify action Set outcontent modify filetype Outcontent modify bypassonauthSet outcontent namestr modify bypassonauth enable disable Outcontent modify filetype Review Outcontent modify monitor actionReject replace Tags header enable Outcontent modify monitorSet outcontent modify monitor action 259 Set outpolicy move-to Set outpolicy rename-to Outpolicy profile deleteSet outpolicy userstr delete Outpolicy modify Set outpolicy profile delete Set outpolicy rename-to Outpolicy move-toSet outpolicy userstr move-to newint Set outpolicy profile delete Set outpolicy move-to Outpolicy rename-toSet outpolicy userstr rename-to newstr Set outprofile profile rename-to Outprofile profile deleteSet outprofile profile namestr delete Namestr Review enable disableOutprofile profile modify actions Outprofile profile modify bannedword Outprofile profile modify bannedwordlist Outprofile profile modify bayesian Outprofile profile modify deepheader Outprofile profile modify dictionary Set outprofile profile namestr modify dnsbl enable disable Outprofile profile modify dnsbl Outprofile profile modify dnsblserver Outprofile profile modify fortishield Outprofile profile modify greylist Enable disable Upper-level Outprofile profile modify heuristic Outprofile profile modify imagespam Outprofile profile modify individualaction scanner Action Outprofile profile modify scanoptions Set outprofile profile namestr modify surbl enable disable Outprofile profile modify surbl Outprofile profile modify surblserver Outprofile profile modify tags Set outprofile profile namestr modify virus enable disable Outprofile profile modify virus Outprofile profile modify whitelistword Set outprofile profile modify whitelistwordlist Outprofile profile modify whitelistwordlist Set outprofile profile modify whitelistword Set outprofile profile delete Outprofile profile rename-toSet outprofile profile namestr rename-to newstr 286 Set policy modify rename-to Policy deleteSet policy fqdnstr delete Addassociation fqdn Policy modify addassociationPolicy fqdnstr Set policy modify verifyaddr Set policy fqdnstr modify bverifyaddr disable ldap smtpPolicy modify bverifyaddr Fallbackport Portint Policy modify fallbackFallbackhost Hostipv4 Policy modify ip Set policy fqdnstr modify issubdomain enable disable Policy modify issubdomain Set policy fqdnstr modify ldapasav state enable disable Set policy fqdnstr modify ldaprouting state enable disablePolicy modify ldap Set policy fqdnstr modify ldapasav profile profilestr Policy modify mxflag Set policy fqdnstr modify mxflag 0 Policy modify tp Set policy fqdnstr modify tp zoneintr yes no yes noFqdnstr Zoneintr Policy modify user Set policy delete Set policy modify rename-to Smtp disable Policy modify verifyaddrSet policy modify bverifyaddr Verifyaddr ldap Set policy delete Policy modify rename-toSet policy fqdnstr rename-to newfqdnstr Set spam deepheader confidence confidenceint Confidence95.0000 Confidenceint Set as control autorelease System admin Set system option Set user System appearance Set console System autoupdate pushaddressoverride Set system autoupdate pushaddressoverride disable System autoupdate pushupdate Set system autoupdate pushupdate enable disable Set system autoupdate schedule enable disable daily hhmm System autoupdate scheduleSet system autoupdate schedule enable disable every hhmm System autoupdate tunneling Address addrip4Port portnum Username Usernamestr System ddns Set system disclaimer allowdomain enable disable System disclaimer allowdomain System disclaimer incoming System disclaimer outgoing System dns Autobackup enable disable Enable disable Initiate enable disableSystem fortimanager Central-management Set system ha config 20001 System ha configSet system ha config portinteger timeoutinteger System ha takeover command Disabled AnyCpeerinteger Cpeeripv4 Primary-localipv4 10.0.0.1Netmaskipv4 255.255.255.0 Set system ha interface port5 10.0.0.4 Set system ha interface port5 10.0.0.2Set system ha interface port5 10.0.0.3 317 Set system ha data dataportinteger timeoutinteger Set system ha config 20002System ha data Dataportinteger System ha datadir System ha lservice Set system ha lservice pprts 30Ports hd Checktimeinteger System ha mode Set system ha mode modeSet system ha mode cmaster Mode mode System ha monitor Set system ha monitor port 20000 20Heartbeatportinteger 20000 323 Set system ha on-failure off restore slave RestoreSystem ha on-failure Set system ha on-failure slave Set system ha passwd Passw4D System ha passwdSet system ha passwd passwdstr System ha remote-as-heartbeat Set system ha remote-as-heartbeat enable disableSet system ha remote-as-heartbeat enable System ha restart restore resync Set system ha restart restore resyncSet system ha resync Restart System ha rservice Set system ha rservice pop 10.10.10.2 25 30 20 System ha takeover Set system ha takeover port5 add 10.10.10.2 System ha takeover System hostname Set system hostname hostnamestr System interface config System interface mode dhcp Set system interface intfstr mode dhcpConnection Disable Defaultgw Disable System interface mode static Set system interface intfstr mode static ip addrip4 maskip4 System opmode Set system opmode gateway server transparent Set system option option1 value1 Set system admin Set system appearanceSystem option System route number System snmp community Set system snmp sysinfo threshold System snmp sysinfo threshold Set system snmp community System time manual Set system time ntp System time ntp Set system time manual Set system admin Set user System usrgrp Set user alias name namestr member addr addr Set user alias name namestr addmember addr addrSet user map internalname intstr externalname extstr Set user ldap map domain domainname profile ldapprofilename User pki Set userpolicy namestr delete Userpolicy deleteSet userpolicy move-to Set userpolicy rename-to Userpolicy modify AsstrAvstr Miscstr Set userpolicy namestr move-to newint Userpolicy move-toSet userpolicy delete Set userpolicy rename-to Set userpolicy namestr rename-to newstr Userpolicy rename-toSet userpolicy delete Set userpolicy move-to 352 Unset Unset alertemail configuration Unset ldapprofile profile namestr Unset log reportconfig namestr Unset mailserver configuration Unset system configuration Unset user configuration User transparent and gatewayAlias name aliasstr Map name mapstr Ldap map domain domainint User serverGroup name groupstr Index Dkim 186 DNS 363 Smtp 365 366