The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
When performing message forensics, you may find messages discarded for the reason of "ipblocked." These messages are discarded due to Sophos's Blacklisted Sender IP service. Reasons are identified by expanding the message details from the Mail Logs search pane.
Policy Rule:Sophos Blacklisted Sender IP Discarded:For reason: ipblocked
There are two options that you can use to allow the message to pass (assuming the message is legitimate).
If the IP address is known to be incorrectly detected by our service, follow the link below.
You are taken to the page shown below.
Enter the IP address in the text box, and click Submit. A page will be displayed, explaining the reason the IP was listed by our service. You then have the opportunity to request that the address be exempt, as shown in the example below.
You can whitelist the host or sender by editing the Allow list in Configuration -> Policy -> Allow/Block lists
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.