Chapter 15 Security Profiles : Email filter : Email filter examples : Blocking email from a user
  
Blocking email from a user
Employees of the Example.com corporation have been receiving unwanted email messages from a former client at a company called example.net. The client’s email address is client@example.net. All ties between the company and the client have been severed, but the messages continue. The FortiGate unit can be configured to prevent these messages from being delivered.
To enable Email Filter
1. Go to Security Profiles > Email Filter > Profile.
2. Select the email filter profile that is used by the firewall policies handling email traffic from the email filter profile drop down list.
3. In the row Tag Location, select Subject for all three mail protocols.
4. In the row Tag Format, enter SPAM: in all three fields.
This means that normal spam will be tagged in the subject line.
5. Select Enable Spam Detection and Filtering.
6. Under Local Spam Filtering, enable Black White List and select Create New.
7. In the Black White List widget, select Create New.
8. Select Email Address Wildcard.
9. Enter client@example.net in the Pattern field.
If you wanted to prevent everyone’s email from the client’s company from getting through you could have used *@example.net instead.
10. Set the Action as Mark as Reject
11. Set the Status to Enable
12. Select OK.
Now that the email address list is created, you must enable the email filter in the email filter profile.
When this email filter profile is selected in a security policy, the FortiGate unit will reject any email message from an address ending with @example.net for all email traffic handled by the security policy.