Configuring mail settings : Configuring the built-in MTA and mail server : Configuring mail server settings : Configuring local host settings
Configuring local host settings
Provide the name and SMTP information for the mail server.
GUI item
Description
Host name
Enter the host name of the FortiMail unit.
Displays the FortiMail unit’s fully qualified domain name (FQDN) is in the format:
<host-name>.<local-domain-name>
such as fortimail-400.example.com, where fortimail‑400 is the “Host name” and example.com is the “Local domain name”.
Note: The FQDN of the FortiMail unit should be different from that of protected SMTP servers. If the FortiMail unit uses the same FQDN as your mail server, it may become difficult to distinguish the two devices during troubleshooting.
Note: You should use a different host name for each FortiMail unit, especially when you are managing multiple FortiMail units of the same model, or when configuring a high availability (HA) cluster. This will let you to distinguish between different members of the cluster. If the FortiMail unit is in HA mode, the FortiMail unit will add the host name to the subject line of alert email messages. For details, see “Configuring alert email”.
Local domain name
Enter the local domain name to which the FortiMail unit belongs.
The local domain name is used in many features such as email quarantine, Bayesian database training, quarantine report, and delivery status notification (DSN) email messages.
Displays the FortiMail unit’s fully qualified domain name (FQDN) is in the format:
<host-name>.<local-domain-name>
such as fortimail-400.example.com, where fortimail-400 is the “Host name” and example.com is the “Local domain name”.
Note: The IP address should be globally resolvable into the FQDN of the FortiMail unit if it will relay outgoing email. If it is not globally resolvable, reverse DNS lookups of the FortiMail unit’s domain name by external SMTP servers will fail. For quarantine reports, if the FortiMail unit is operating in server mode or gateway mode, DNS records for the local domain name may need to be globally resolvable to the IP address of the FortiMail unit. If it is not globally resolvable, web and email release/delete for the per-recipient quarantines may fail.
Note: The “Local domain name” is not required to be different from or identical to any protected domain. It can be a subdomain or different, external domain.
For example, a FortiMail unit whose FQDN is fortimail.example.com could be configured with the protected domains example.com and accounting.example.net.
SMTP server port number
Enter the port number on which the FortiMail unit’s SMTP server will listen for SMTP connections. The default port number is 25.
SMTP over SSL/TLS
Enable to allow SSL- and TLS-secured connections from SMTP clients that request SSL/TLS.
When disabled, SMTP connections with the FortiMail unit’s built-in MTA must occur as clear text, unencrypted.
Note: This option must be enabled to receive SMTPS connections. However, it does not require them. To enforce client use of SMTPS, see “Configuring access control rules”.
SMTPS server port number
Enter the port number on which the FortiMail unit’s built-in MTA listens for secure SMTP connections. The default port number is 465.
This option is unavailable if SMTP over SSL/TLS is disabled.
SMTP MSA service
Enable let your email clients use SMTP for message submission on a separate TCP port number from deliveries or mail relay by MTAs.
For details on message submission by email clients as distinct from SMTP used by MTAs, see RFC 2476.
SMTP MSA port number
Enter the TCP port number on which the FortiMail unit listens for email clients to submit email for delivery. The default port number is 587.
POP3 server port number
Enter the port number on which the FortiMail unit’s POP3 server will listen for POP3 connections. The default port number is 110.
This option is available only if the FortiMail unit is operating in server mode.
Default domain for authentication
If you set one domain as the default domain, users on the default domain only need to enter their user names without the domain part for webmail/SMTP/IMAP/POP3 authentication, such as user1. Users on the non-default domains must enter both the user name part and domain part to authentication, such as user2@example.com.
Webmail access
Enable to redirect HTTP webmail access to HTTPS.