virus logo AntiSpam Service

FortiGuard Antispam provides a comprehensive and multi-layered approach to detect and filter spam processed by organizations. Dual-pass detection technology can dramatically reduce spam volume at the perimeter, giving you unmatched control of email attacks and infections. Additionally, FortiClient endpoint agents can block spam messages on remote computers and mobile devices.

Search if IP, URL, Email, or Hash is on the blocklist
Your signature is not on the blocklist
Your signature is on the blocklist.
Is this an error? Click here to Request a Review

0

New and updated anti-spam signatures every week

Version Updates

IP Update 104.57879 56 minutes ago    
URL Update 97.54116 53 minutes ago    
Checksum Update 84.46836 55 minutes ago    

Reduces volume of spam at your perimeter with dual- pass detection technology.

Push and pull options give you the fastest possible security updates

Frequently Asked Questions

If you notice a false positive, a clean message marked as spam by FortiGuard AntiSpam Service, or if you believe an IP address, URL, or email address is blocked incorrectly, you can either:

If you are the email sender who had an email message incorrectly blocked please send us the error message you received. The error message should look like the following: 

mail.xxx.xxx #5.7.1 smtp;554 5.7.1 This message has been blocked because it contains
FortiGuard - AntiSpam blocking URL/IP/Email/Hash(s).(black url/ip/email/hash xxx.xxx)

If you are a Fortinet customer please send us the AntiSpam log messages obtained from FortiGate, FortiClient or FortiMail, including your Fortinet product's serial number. The AntiSpam log from FortiGate should look like the following: 

Feb 26 19:15:13 xx.xx.com date=2006-02-26 time=19:15:14 device_id=FGT-xxxxxxxxxxx log_id=xxxxxxx
type=emailfilter subtype=smtp pri=notice vd=root src=xxx.xxx.xxx.xxx dst=xxx.xxx.xxx.xxx
src_int=wan1 dst_int=internal service=smtp status=detected from="xxx@xxx.com" to="xxxx@xxx.net"
msg="The email contains FortiGuard - AntiSpam blocking URL(s).(black url xx.xxxx.xxx)"

Please fill out this form and provide details of the problem encountered. Please include the Fortinet hardware or software product used including model, os and/or software version number as appropriate.

Submitted spam will be analyzed, and their signatures will be extracted to be added to our spam signature database. This helps to improve the FortiGuard AntiSpam detection and filtering for similar spam. We appreciate your submitted spam samples, but do not respond to them due to the high volume of submissions.

Submission Instructions:

For Microsoft Outlook:


Method 1:
  1. Open Microsoft Outlook
  2. Create a new email to submitspam@fortinet.com
  3. Drag the message(s) you want to submit from the "message listing" pane into the body of the new message window you just created.
  4. Send the message.
Method 2:
Set Outlook to forward email as original attachment by
  1. In Outlook menu, click "Tools" -> "Options"
  2. In "Preference" tab, click "Email Options..." button in "Email" section
  3. In the drop-down section "When forwarding a message," choose "Attach original message text"
  4. Click "OK"
From now on, you can simply click the "Forward" button in Outlook and set submitspam@fortinet.com as the "To:" address to submit a spam.

For Microsoft Outlook Express:


  1. Open Microsoft Outlook Express
  2. Right-click the message you want to submit, click "Forward As Attachment"
  3. Set submitspam@fortinet.com as the "To:" address
  4. Click "Send"

For Thunderbird/Mozilla/Netscape:


Method 1:
  1. Open Thunderbird/Mozilla/Netscape mail
  2. Create a new email to submitspam@fortinet.com
  3. Drag the message(s) you want to submit from the "message listing" pane into the 'attachment' area of the new message window you just created.
  4. Send the message
Method 2:
Set Thunderbird/Mozilla/Netscape to forward email as original attachment by
  1. Click "Edit" -> "Preference"
  2. In Composition section, there is a drop-down option for "Forward messages". Choose "As Attachment".
  3. Click "OK"/"Close"
From now on, you can simply click the "Forward" button in Thunderbird/Mozilla/Netscape and set submitspam@fortinet.com as the "To:" address to submit a spam.

For Lotus Notes Client:


  1. Open Lotus Domio Client
  2. Open the spam email which would like to submit.
  3. From Menu View -> Show -> Page Source
  4. Select the entire page source and copy the selected content.
  5. Paste it to a notepad and save it as spamsample.eml.
  6. Create a new email with the spam email as an RFC-822 MIME encoded attachment.
  7. In the To box, type: submitspam@fortinet.com
  8. Send the message.

For Web Based Mail Clients:


If you are using web-based mail like yahoo or gmail, please forward the spam email as an attachment instead of inline text.