{"id":97073,"date":"2020-10-16T02:42:25","date_gmt":"2020-10-16T00:42:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/fortimail-konfiguracziya-dlya-bystrogo-zapuska"},"modified":"2020-10-16T02:42:25","modified_gmt":"2020-10-16T00:42:25","slug":"fortimail-konfiguracziya-dlya-bystrogo-zapuska","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/fortimail-konfiguracziya-dlya-bystrogo-zapuska","title":{"rendered":"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/46facdd70ffebb280e4be30e911c2719.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV\u00edtejte! Dnes v\u00e1m uk\u00e1\u017eeme, jak prov\u00e9st po\u010d\u00e1te\u010dn\u00ed nastaven\u00ed po\u0161tovn\u00edho gatewaye. <noindex><a rel=\"nofollow\" href=\"https:\/\/fortiservice.com\/catalog\/fortimail\/\">FortiMail<\/a><\/noindex> \u2013 \u0159e\u0161en\u00ed spole\u010dnosti Fortinet pro ochranu e-mailu. V tomto \u010dl\u00e1nku se pod\u00edv\u00e1me na rozvr\u017een\u00ed, se kter\u00fdm budeme pracovat, a provedeme konfiguraci. <noindex><a rel=\"nofollow\" href=\"https:\/\/fortiservice.com\/catalog\/fortimail\/\">FortiMail<\/a><\/noindex>, pot\u0159ebnou k p\u0159ij\u00edm\u00e1n\u00ed a ov\u011b\u0159ov\u00e1n\u00ed e-mail\u016f, a tak\u00e9 otestujeme jej\u00ed funk\u010dnost. Na z\u00e1klad\u011b na\u0161ich zku\u0161enost\u00ed m\u016f\u017eeme s jistotou \u0159\u00edct, \u017ee proces je velmi jednoduch\u00fd, a i po minim\u00e1ln\u00ed konfiguraci lze vid\u011bt v\u00fdsledky. <noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Za\u010dn\u011bme s aktu\u00e1ln\u00edm rozvr\u017een\u00edm. Je zn\u00e1zorn\u011bno na obr\u00e1zku n\u00ed\u017ee. <br \/>\n<img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/23c69b4b5c97d0e784199d8af50ff4de.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVpravo vid\u00edme po\u010d\u00edta\u010d extern\u00edho u\u017eivatele, ze kter\u00e9ho budeme pos\u00edlat e-maily u\u017eivateli ve vnit\u0159n\u00ed s\u00edti. Ve vnit\u0159n\u00ed s\u00edti se nach\u00e1z\u00ed po\u010d\u00edta\u010d u\u017eivatele, \u0159adi\u010d dom\u00e9ny s DNS serverem a po\u0161tovn\u00ed server. Na okraji s\u00edt\u011b stoj\u00ed firewall \u2014 FortiGate, jeho\u017e hlavn\u00ed vlastnost\u00ed je konfigurace sm\u011brov\u00e1n\u00ed SMTP a DNS provozu.<\/p>\n<p>Zvl\u00e1\u0161tn\u00ed pozornost v\u011bnujeme DNS.<\/p>\n<p>Pro sm\u011brov\u00e1n\u00ed e-mail\u016f na internetu se pou\u017e\u00edvaj\u00ed dv\u011b DNS z\u00e1znamy \u2014 A z\u00e1znam a MX z\u00e1znam. Tyto DNS z\u00e1znamy se obvykle nastavuj\u00ed na ve\u0159ejn\u00e9m DNS serveru, ale kv\u016fli omezen\u00edm rozvr\u017een\u00ed jednodu\u0161e sm\u011brujeme DNS p\u0159es firewall (tj. extern\u00ed u\u017eivatel m\u00e1 jako DNS server zapsanou adresu 10.10.30.210).<\/p>\n<p>MX z\u00e1znam \u2014 z\u00e1znam, kter\u00fd obsahuje n\u00e1zev po\u0161tovn\u00edho serveru, jen\u017e zaji\u0161\u0165uje dom\u00e9nu, a tak\u00e9 prioritu tohoto po\u0161tovn\u00edho serveru. V na\u0161em p\u0159\u00edpad\u011b vypad\u00e1 takto: test.local -&gt; mail.test.local 10.<\/p>\n<p>A z\u00e1znam \u2014 z\u00e1znam, kter\u00fd p\u0159ev\u00e1d\u00ed dom\u00e9nov\u00e9 jm\u00e9no na IP adresu, u n\u00e1s to je: mail.test.local -&gt; 10.10.30.210.<\/p>\n<p>Kdy\u017e se n\u00e1\u0161 extern\u00ed u\u017eivatel pokus\u00ed poslat e-mail na adresu an@test.local, po\u017e\u00e1d\u00e1 sv\u016fj DNS server o MX z\u00e1znam dom\u00e9ny test.local. N\u00e1\u0161 DNS server odpov\u00ed n\u00e1zvem po\u0161tovn\u00edho serveru \u2014 mail.test.local. Nyn\u00ed u\u017eivatel pot\u0159ebuje z\u00edskat IP adresu tohoto serveru, a proto znovu kontaktuje DNS pro A z\u00e1znam a z\u00edsk\u00e1 IP adresu 10.10.30.210 (ano, znovu ji:). M\u016f\u017ee poslat e-mail. Proto se pokou\u0161\u00ed nav\u00e1zat spojen\u00ed s z\u00edskanou IP adresou na portu 25. Pomoc\u00ed pravidel na firewallu je toto spojen\u00ed sm\u011brov\u00e1no na po\u0161tovn\u00ed server. <\/p>\n<p>Zkontrolujeme funk\u010dnost e-mailu ve st\u00e1vaj\u00edc\u00edm stavu \u0161ablony. K tomu na po\u010d\u00edta\u010di extern\u00edho u\u017eivatele pou\u017eijeme n\u00e1stroj swaks. Pomoc\u00ed n\u011bj lze otestovat funk\u010dnost SMTP odesl\u00e1n\u00edm zpr\u00e1vy p\u0159\u00edjemci s r\u016fzn\u00fdmi parametry. P\u0159edem byl na po\u0161tovn\u00edm serveru zaregistrov\u00e1n u\u017eivatel s e-mailem an@test.local. Zkus\u00edme mu poslat zpr\u00e1vu:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/5e6b65f51ac818413b35a84444e3cecb.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNyn\u00ed p\u0159ejdeme na stroj intern\u00edho u\u017eivatele a ujist\u00edme se, \u017ee zpr\u00e1va dorazila:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/6d1ef3d9043da8ef0e7992ab919d7841.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nZpr\u00e1va skute\u010dn\u011b dorazila (je zv\u00fdrazn\u011bna v seznamu). To znamen\u00e1, \u017ee \u0161ablona funguje spr\u00e1vn\u011b. Je \u010das p\u0159ej\u00edt k FortiMail. Dopln\u00edme na\u0161i \u0161ablonu: <\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/ca8c40cb32c251031246327bbcc5893e.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nFortiMail lze nasadit ve t\u0159ech re\u017eimech:<\/p>\n<ul>\n<li>Gateway \u2014 funguje jako plnohodnotn\u00fd MTA: p\u0159ij\u00edm\u00e1 ve\u0161kerou po\u0161tu, kontroluje ji a pot\u00e9 ji p\u0159epos\u00edl\u00e1 na po\u0161tovn\u00ed server;<\/li>\n<li>Transparent \u2014 nebo tak\u00e9 transparentn\u00ed re\u017eim. Umis\u0165uje se p\u0159ed server a kontroluje p\u0159\u00edchoz\u00ed i odchoz\u00ed po\u0161tu. Pot\u00e9 ji p\u0159ed\u00e1v\u00e1 na server. Nevy\u017eaduje \u017e\u00e1dn\u00e9 zm\u011bny v konfiguraci s\u00edt\u011b. <\/li>\n<li>Server \u2014 v tomto p\u0159\u00edpad\u011b je FortiMail plnohodnotn\u00fdm po\u0161tovn\u00edm serverem s mo\u017enost\u00ed vytv\u00e1\u0159en\u00ed po\u0161tovn\u00edch schr\u00e1nek, p\u0159ij\u00edm\u00e1n\u00ed a odes\u00edl\u00e1n\u00ed po\u0161ty, stejn\u011b jako s dal\u0161\u00edmi funkcemi. <\/li>\n<\/ul>\n<p>\nBudeme nasazovat FortiMail v re\u017eimu Gateway. P\u0159ejdeme do nastaven\u00ed virtu\u00e1ln\u00edho stroje. P\u0159ihla\u0161ovac\u00ed \u00fadaje \u2014 admin, heslo nen\u00ed nastaveno. P\u0159i prvn\u00edm p\u0159ihl\u00e1\u0161en\u00ed je t\u0159eba nastavit nov\u00e9 heslo.<\/p>\n<p>Nyn\u00ed nakonfigurujeme virtu\u00e1ln\u00ed stroj pro p\u0159\u00edstup k webov\u00e9mu rozhran\u00ed. Tak\u00e9 je nutn\u00e9, aby m\u011bl stroj p\u0159\u00edstup k internetu. Nastav\u00edme rozhran\u00ed. Pot\u0159ebujeme pouze port1. Pomoc\u00ed n\u011bj se budeme p\u0159ipojovat k webov\u00e9mu rozhran\u00ed a tak\u00e9 bude pou\u017eit pro p\u0159\u00edstup na internet. P\u0159\u00edstup na internet je pot\u0159ebn\u00fd pro aktualizaci slu\u017eeb (podpisy antiviru atd.). Pro konfiguraci zad\u00e1me p\u0159\u00edkazy:<\/p>\n<p><i>config system interface<br \/>\nedit port 1<br \/>\nset ip 192.168.1.40 255.255.255.0<br \/>\nset allowaccess https http ssh ping<br \/>\nend<br \/>\n<\/i><br \/>\nNyn\u00ed nastav\u00edme routov\u00e1n\u00ed. K tomu mus\u00edme zadat n\u00e1sleduj\u00edc\u00ed p\u0159\u00edkazy:<\/p>\n<p><i>config system route<br \/>\nedit 1<br \/>\nset gateway 192.168.1.1<br \/>\nset interface port1<br \/>\nend<br \/>\n<\/i><br \/>\nP\u0159i zad\u00e1v\u00e1n\u00ed p\u0159\u00edkaz\u016f lze pou\u017e\u00edvat tabul\u00e1tor, abyste je nemuseli ps\u00e1t cel\u00e9. Tak\u00e9, pokud jste zapomn\u011bli, kter\u00fd p\u0159\u00edkaz by m\u011bl n\u00e1sledovat, m\u016f\u017eete pou\u017e\u00edt kl\u00e1vesu \u201c?\u201d. <br \/>\nNyn\u00ed zkontrolujeme p\u0159ipojen\u00ed k internetu. K tomu propingujeme Google DNS:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/911828be6a0e5c214fb3009d8ea72a92.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nJak vid\u00edme, internet u\u017e m\u00e1me. Po\u010d\u00e1te\u010dn\u00ed nastaven\u00ed typick\u00e1 pro v\u0161echna za\u0159\u00edzen\u00ed Fortinet byla provedena, nyn\u00ed m\u016f\u017eeme p\u0159ej\u00edt k konfiguraci p\u0159es webov\u00e9 rozhran\u00ed. K tomu otev\u0159eme str\u00e1nku spr\u00e1vy: <\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/8b62bbfb97d77f1c5bb6d4912434be10.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV\u0161imn\u011bte si, \u017ee je nutn\u00e9 p\u0159ej\u00edt na odkaz ve form\u00e1tu \/admin. Jinak se nedostanete na str\u00e1nku spr\u00e1vy. V\u00fdchoz\u00ed str\u00e1nka je v standardn\u00edm re\u017eimu konfigurace. Pro nastaven\u00ed budeme pot\u0159ebovat re\u017eim Advanced. P\u0159ejdeme do menu admin-&gt;View a p\u0159epneme re\u017eim na Advanced:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/91f6a1017ede4c6c4e71d1ac46f52331.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNyn\u00ed je t\u0159eba nahr\u00e1t zku\u0161ebn\u00ed licenci. To lze prov\u00e9st v menu License Information \u2192 VM \u2192 Update:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/58e41398b0b537845955e62f9a75a7fb.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPokud nem\u00e1te zku\u0161ebn\u00ed licenci, m\u016f\u017eete si ji vy\u017e\u00e1dat kontaktov\u00e1n\u00edm <noindex><a rel=\"nofollow\" href=\"https:\/\/fortiservice.com\/contacts\/\">n\u00e1m<\/a><\/noindex>.<\/p>\n<p>Po zad\u00e1n\u00ed licence by se za\u0159\u00edzen\u00ed m\u011blo restartovat. V budoucnu za\u010dne stahovat aktualizace sv\u00fdch datab\u00e1z\u00ed ze server\u016f. Pokud se to ned\u011bje automaticky, m\u016f\u017eete p\u0159ej\u00edt do menu System \u2192 FortiGuard a na kart\u00e1ch Antivirus, Antispam stisknout tla\u010d\u00edtko Update Now.<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/dd77c914fd424a4a4f9ccfb2e7fb5295.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPokud to nepom\u016f\u017ee, m\u016f\u017eete zm\u011bnit porty pou\u017e\u00edvan\u00e9 pro aktualizace. Obvykle po tom se v\u0161echny licence objev\u00ed. V\u00fdsledkem by to m\u011blo vypadat takto:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/5aebedb3db07c05686a7fae7642d1a81.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNastav\u00edme spr\u00e1vn\u00fd \u010dasov\u00fd p\u00e1smo, to bude u\u017eite\u010dn\u00e9 p\u0159i zkoum\u00e1n\u00ed log\u016f. K tomu p\u0159ejdeme do menu System \u2192 Configuration:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/b4ef191401aebd965b88e669ccbdc9a9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTak\u00e9 nastav\u00edme DNS. Jako prim\u00e1rn\u00ed DNS server nastav\u00edme intern\u00ed DNS server, a jako z\u00e1lo\u017en\u00ed ponech\u00e1me DNS server, kter\u00fd poskytuje Fortinet.<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/5dd7a2efe5fed01a30f35bdfaab7d724.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNyn\u00ed se dostaneme k tomu nejzaj\u00edmav\u011bj\u0161\u00edmu. Jak jste si mo\u017en\u00e1 v\u0161imli, v\u00fdchoz\u00ed re\u017eim za\u0159\u00edzen\u00ed je Gateway. Proto ho nemus\u00edme m\u011bnit. P\u0159ejdeme do pole Domain &amp; User \u2192 Domain. Vytvo\u0159\u00edme novou dom\u00e9nu, kterou je t\u0159eba chr\u00e1nit. Zde mus\u00edme uv\u00e9st pouze n\u00e1zev dom\u00e9ny a adresu po\u0161tovn\u00edho serveru (m\u016f\u017eeme tak\u00e9 uv\u00e9st jeho dom\u00e9nov\u00e9 jm\u00e9no, v na\u0161em p\u0159\u00edpad\u011b mail.test.local):<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/76418772be88f52c58da89f596c0ecd7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNyn\u00ed pot\u0159ebujeme uv\u00e9st jm\u00e9no pro n\u00e1\u0161 po\u0161tovn\u00ed br\u00e1nu. Bude se pou\u017e\u00edvat v MX a A z\u00e1znamech, kter\u00e9 budeme muset zm\u011bnit pozd\u011bji:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/4e958e31dc7513e1fb6770b713fc418b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nZ polo\u017eek Host Name a Local Domain Name vznik\u00e1 FQDN, kter\u00e9 se pou\u017e\u00edv\u00e1 v DNS z\u00e1znamech. V na\u0161em p\u0159\u00edpad\u011b FQDN = fortimail.test.local.<\/p>\n<p>Nyn\u00ed nastav\u00edme pravidlo pro p\u0159\u00edjem. Pot\u0159ebujeme, aby v\u0161echna e-maily, kter\u00e9 p\u0159ich\u00e1zej\u00ed zven\u010d\u00ed a jsou p\u0159i\u0159azeny u\u017eivateli v dom\u00e9n\u011b, byly p\u0159eposl\u00e1ny na po\u0161tovn\u00ed server. K tomu p\u0159ejdeme do menu Policy \u2192 Access Control. P\u0159\u00edklad nastaven\u00ed je uveden n\u00ed\u017ee:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/a8b337855a161cb03b3195135c52d64b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPod\u00edvejme se na kartu Recipient Policy. Zde m\u016f\u017eete stanovit ur\u010dit\u00e1 pravidla pro kontrolu e-mail\u016f: pokud po\u0161ta p\u0159ich\u00e1z\u00ed z dom\u00e9ny example1.com, je t\u0159eba ji kontrolovat mechanismy, kter\u00e9 jsou nastaveny speci\u00e1ln\u011b pro tuto dom\u00e9nu. Ji\u017e je zde nainstalov\u00e1no v\u00fdchoz\u00ed pravidlo pro v\u0161echny e-maily, a v sou\u010dasn\u00e9 dob\u011b n\u00e1m vyhovuje. S t\u00edmto pravidlem se m\u016f\u017eete sezn\u00e1mit na obr\u00e1zku n\u00ed\u017ee:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/2e045f29469c9df720a3c7a5473ce332.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nT\u00edmto m\u016f\u017eeme pova\u017eovat nastaven\u00ed na FortiMail za dokon\u010den\u00e9. Mo\u017en\u00fdch parametr\u016f je ve skute\u010dnosti mnohem v\u00edce, ale pokud bychom za\u010dali zkoumat v\u0161echny \u2014 mohli bychom napsat knihu :) Na\u0161\u00edm c\u00edlem je spustit FortiMail v testovac\u00edm re\u017eimu s minim\u00e1ln\u00edm \u00fasil\u00edm. <\/p>\n<p>Zb\u00fdvaj\u00ed dv\u011b v\u011bci \u2014 zm\u011bnit MX a A z\u00e1znamy a tak\u00e9 zm\u011bnit pravidla port forwarding na firewallu. <\/p>\n<p>MX z\u00e1znam test.local -&gt; mail.test.local 10 je t\u0159eba zm\u011bnit na test.local -&gt; fortimail.test.local 10. Obvykle se b\u011bhem pilotn\u00edch projekt\u016f p\u0159id\u00e1v\u00e1 druh\u00fd MX z\u00e1znam s vy\u0161\u0161\u00ed prioritou. Nap\u0159\u00edklad:<\/p>\n<p>test.local -&gt; mail.test.local 10<br \/>\ntest.local -&gt; fortimail.test.local 5<\/p>\n<p>P\u0159ipom\u00edn\u00e1m, \u017ee \u010d\u00edm men\u0161\u00ed \u010d\u00edslo po\u0159ad\u00ed preference po\u0161tovn\u00edho serveru v MX z\u00e1znamu, t\u00edm vy\u0161\u0161\u00ed je jeho priorita. <\/p>\n<p>A z\u00e1znam nelze zm\u011bnit, proto jednodu\u0161e vytvo\u0159\u00edme nov\u00fd: fortimail.test.local -&gt; 10.10.30.210. Vn\u011bj\u0161\u00ed u\u017eivatel se bude obracet na adresu 10.10.30.210 p\u0159es port 25 a firewall p\u0159esm\u011bruje spojen\u00ed na FortiMail. <\/p>\n<p>Abychom zm\u011bnili pravidlo p\u0159esm\u011brov\u00e1n\u00ed na FortiGate, je t\u0159eba zm\u011bnit adresu ve p\u0159\u00edslu\u0161n\u00e9m objektu Virtual IP:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/f4c84af7cb6914725fbd06d291fa5c01.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nV\u0161echno je p\u0159ipraveno. Poj\u010fme to zkontrolovat. Znovu po\u0161leme e-mail z po\u010d\u00edta\u010de vn\u011bj\u0161\u00edho u\u017eivatele. Nyn\u00ed p\u0159ejdeme na FortiMail do menu Monitor \u2192 Logs. V poli History m\u016f\u017eeme vid\u011bt z\u00e1znam o tom, \u017ee e-mail byl p\u0159ijat. Pro z\u00edsk\u00e1n\u00ed dal\u0161\u00edch informac\u00ed m\u016f\u017eete kliknout na z\u00e1znam prav\u00fdm tla\u010d\u00edtkem my\u0161i a vybrat polo\u017eku Details:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/e0ca44e2a6729359a571c3f15c34ab71.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPro \u00faplnost kontroly zkontrolujeme, zda m\u016f\u017ee FortiMail v aktu\u00e1ln\u00ed konfiguraci blokovat e-maily obsahuj\u00edc\u00ed spam a viry. K tomu po\u0161leme testovac\u00ed virus eicar a testovac\u00ed e-mail, kter\u00fd jsme na\u0161li v jedn\u00e9 z datab\u00e1z\u00ed spamov\u00fdch e-mail\u016f (http:\/\/untroubled.org\/spam\/). Po tom se op\u011bt p\u0159epneme do menu pro zobrazen\u00ed log\u016f:<\/p>\n<p><img decoding=\"async\" alt=\"FortiMail \u2013 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed\" src=\"\/wp-content\/uploads\/2020\/10\/59721618bd2c689b48b21550cd79db31.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nJak vid\u00edme, jak spam, tak i e-mail s virem byly \u00fasp\u011b\u0161n\u011b rozpozn\u00e1ny. <\/p>\n<p>Tato konfigurace je dostate\u010dn\u00e1 k zaji\u0161t\u011bn\u00ed z\u00e1kladn\u00ed ochrany proti vir\u016fm a spam\u016fm. Funkce FortiMail v\u0161ak t\u00edmto nekon\u010d\u00ed. Pro efektivn\u011bj\u0161\u00ed ochranu je t\u0159eba prozkoumat dostupn\u00e9 mechanismy a p\u0159izp\u016fsobit je podle sv\u00fdch pot\u0159eb. V budoucnu pl\u00e1nujeme p\u0159edstavit dal\u0161\u00ed, pokro\u010dilej\u0161\u00ed funkce tohoto e-mailov\u00e9ho br\u00e1ny.<\/p>\n<p>Pokud m\u00e1te n\u011bjak\u00e9 pot\u00ed\u017ee nebo dotazy k \u0159e\u0161en\u00ed, pi\u0161te je do koment\u00e1\u0159\u016f, pokus\u00edme se na n\u011b co nejrychleji odpov\u011bd\u011bt. <\/p>\n<p>\u017d\u00e1dost o zku\u0161ebn\u00ed licenci k testov\u00e1n\u00ed \u0159e\u0161en\u00ed si m\u016f\u017eete nechat. <noindex><a rel=\"nofollow\" href=\"https:\/\/fortiservice.com\/contacts\/\">zde<\/a><\/noindex>. <\/p>\n<p>Autor: Alexej Nikulin. In\u017een\u00fdr v oblasti informa\u010dn\u00ed bezpe\u010dnosti Fortiservice.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/fortiservice\/blog\/522560\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u043c! \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0435\u043c, \u043a\u0430\u043a \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0448\u043b\u044e\u0437\u0430 FortiMail \u2013 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Fortinet \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0412 \u0445\u043e\u0434\u0435 \u0441\u0442\u0430\u0442\u044c\u0438 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043c\u0430\u043a\u0435\u0442, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u0443\u0434\u0435\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e FortiMail, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0443\u044e \u0434\u043b\u044f \u043f\u0440\u0438\u0435\u043c\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0438\u0441\u0435\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u0443\u0435\u043c \u0435\u0451 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c. \u041e\u0441\u043d\u043e\u0432\u044b\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u043e\u043f\u044b\u0442\u0435, \u043c\u043e\u0436\u0435\u043c \u0441\u043c\u0435\u043b\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043e\u0447\u0435\u043d\u044c \u043f\u0440\u043e\u0441\u0442, \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97074,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97073","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u043c!\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/fortimail-konfiguracziya-dlya-bystrogo-zapuska\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47FortiMail \u2014 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u043c!\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/fortimail-konfiguracziya-dlya-bystrogo-zapuska\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-16T00:42:25+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-16T00:42:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47FortiMail \u2014 konfigurace pro rychl\u00e9 spu\u0161t\u011bn\u00ed | ProHoster","description":"V\u00edtejte!","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/fortimail-konfiguracziya-dlya-bystrogo-zapuska","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47FortiMail \u2014 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u043c!","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/fortimail-konfiguracziya-dlya-bystrogo-zapuska","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-16T00:42:25+00:00","article:modified_time":"2020-10-16T00:42:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97073","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:27:24","updated":"2022-09-28 12:37:51","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/97073","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=97073"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/97073\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/97074"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=97073"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=97073"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=97073"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}