1. Simulation of FortiMail with MSISDN
Jeremy Andreas
Channel Manager Indonesia
Fortinet Confidental

2. BackGround
The Customer is interesting about Fortimail ability to block spam and log MSISDN from mobile users. They want to look at their self (do PoC), but they don’t want to do at their real network. So we must create a simulation about it.
Fortinet Confidental

3. SPAMMER’S MSISDN CAN BE LOGGED LISTEN FOR RADIUS MESSAGE
Diagram for PoC
LOGICAL DIAGRAM
TRANSPARENT MODE
MTAs
INTERNET
OUTGOING SMTP
radclient
MUAs
SPAMMER’S MSISDN CAN BE LOGGED
LISTEN FOR RADIUS MESSAGE
Radius Server : IAS
PHYSICAL DIAGRAM
switch
radclient
INTERNET
Radius Server : IAS
Fortinet Confidental

4. Devices Need and Configuration
FortiMail with MSISDN enable
To enable the msisdn log, you can type:
Fortimail# set log msisdn enable
To see the log of msisdn you can type:
Fortimail# get log msisdn
Radius Server: IAS
Configure to forward Radius Accounting to FortiMail with standard Radius Accounting Port (1813)
Radius Client: radclient from freeradius
Simulate the accounting request to IAS with sending :
echo
"Acct-Status-Type=1,Framed-IP-Address= ,Calling-Station-Id= " | radclient acct testing123”
Mail Bomber software
Configure to send mass mailer (acting like a spammer)
Switch
Fortinet Confidental

5. How to Work
RadClient simulate the Accounting Packet to IAS. In radclient you can type:
echo
"Acct-Status-Type=1,Framed-IP-Address= ,Calling-Station-Id= " | radclient acct testing123”
Radius Server (IAS) forward the Radius Accounting Packet to FortiMail
FortiMail received the accounting and log the MSISDN and mapped it with mail traffic
The Spam traffic will be block and we can get the MSISDN for the spammer.
Fortinet Confidental