To judge an email message as spam is quite subjective. Most people easily agree on some email message as being spam, such as the never ending messages of Viagra ads and Nigeria scam messages. Some may include all advertisements and newsletters as spam, others may consider newsletters as legitimate email.

FortiGuard use the industry standard's definition of spam as Unsolicited Bulk Email (UBE). Unsolicited means that the Recipient has not granted verifiable permission for the message to be sent and the sender has no discernible relationship with all or some of the recipients. Bulk means the message is sent as part of a larger collection of messages, all having substantively identical content.

A message is considered spam if both Unsolicited and Bulk. Unsolicited Email can be normal email, such as first contact enquiries, job enquiries, and sales enquiries. Bulk Email can be normal email, such as subscriber newsletters, customer communications, discussion lists. The message content is generally irrelevant in determining whether a message is spam though most are commercial in nature. There is spam that fraudulently promotes penny stocks in the classic pump-and-dump scheme. There is spam that promotes religious beliefs.

• The recipient's personal identity and context are irrelevant because the message is equally applicable to many other potential recipients
• And, the recipient has not verifiably granted deliberate, explicit, and still-revocable permission for it to be sent.

Spam submitted will be analyzed, their signatures will be extracted and added to our spam signature database, which makes FortiGuard AntiSpam detecting and filtering similar spam. We appreciate your submitting spam samples, but do not respond to them because of the volume.

For Microsoft Outlook:

1. Open Microsoft Outlook
2. Create a new email to submitspam@service.fortinet.com
3. Drag the message(s) you want to submit from the "message listing" pane into the body of the new message window you just created.
4. Send the message.

1. In Outlook menu, click "Tools" -> "Options"
2. In "Preference" tab, click "Email Options..." button in "Email" section
3. In the drop-down section "When forwarding a message," choose "Attach original message text"
4. Click "OK"

For Microsoft Outlook Express:

1. Open Microsoft Outlook Express
2. Right-click the message you want to submit, click "Forward As Attachment"
3. Put submitspam@service.fortinet.com to "To:" address
4. Click "Send"

For Thunderbird/Mozilla/Netscape:

1. Open Thunderbird/Mozilla/Netscape mail
2. Create a new email to submitspam@service.fortinet.com
3. Drag the message(s) you want to submit from the "message listing" pane into the 'attachment' area of the new message window you just created.
4. Send the message

1. Click "Edit" -> "Preference"
2. In Composition section, there is a drop-down option for "Forward messages". Choose "As Attachment".
3. Click "OK"/"Close"

For Lotus Notes Client:

1. Open Lotus Domio Client
2. Open the spam email which would like to submit.
3. From Menu View -> Show -> Page Source
4. Select the entire page source and copy the selected content.
5. Paste it to a notepad and save it as spamsample.eml.
6. Create a new email with the spam email as an RFC-822 MIME encoded attachment.
7. In the To box, type: submitspam@service.fortinet.com
8. Send the message.

If you notice a false positive, a clean message marked as spam by FortiGuard AntiSpam Service, or if you believe an IP address, URL, or email address is blacklisted incorrectly, you can either:

• Send a request following Signature Lookup
• Or, email the request to:
  
    
  
  

If you are the email sender who had an email message incorrectly blocked:

• Send us the error message you received. The error message shall look like this:
  
  

  ---

  mail.xxx.xxx #5.7.1 smtp;554 5.7.1 This message has been blocked because it contains FortiGuard - AntiSpam blocking URL/IP(s).(black url/ip xxx.xxx)
  
  

If you are a Fortinet customer:

• Send us the AntiSpam log messages obtained from FortiGate, FortiClient or FortiMail, including your Fortinet product's serial number. The AntiSpam log from FortiGate shall look like this:
  
  

  ---

  Feb 26 19:15:13 xx.xx.com date=2006-02-26 time=19:15:14 device_id=FGT-xxxxxxxxxxx log_id=xxxxxxx type=emailfilter subtype=smtp pri=notice vd=root src=xxx.xxx.xxx.xxx dst=xxx.xxx.xxx.xxx src_int=wan1 dst_int=internal service=smtp status=detected from="xxx@xxx.com" to="xxxx@xxx.net" msg="The email contains FortiGuard - AntiSpam blocking URL(s).(black url xx.xxxx.xxx)"