Sophos Email customers using IP-based mailflow rule connectors must migrate to certificate-based configuration by March 31st. To see if you're affected Click Here.

Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 8 replies
  • Subscribers 20 subscribers
  • Views 8061 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Message Size Limit and Exchange NDR message

Andrea Rinaldi

Hi all.

I wish to know if it is possible to change the inbound messaze size limit.

We have an Exchange Server that cannot send back the NDR message when the size limit is reached.

So people never know if a message has been delivered or not to the recipient.

Any solution?



Added tags
[edited by: Raphael Alganes at 1:50 PM (GMT -7) on 24 May 2023]
  • 0

    Hi  

    The Inbound message Size limit can not be changed. Would you share more details regarding the issue you're facing? We can try to work for a fix for that.

    Regards

    Jaydeep

  • 0 in reply to Jaydeep

    Hello,

    we have the same problem. Our Exchange 2010 server has a mailsize limit of 20 Mb. The mail server that try to send us a mail more large, receive from Sophos Gateway an ok message, therefore for the sender thinks that the mail was received correctly.

    When the Sophos Gateway try to send the mail to our exchange server, it receive the message '5.3.4 Message size exceeds fixed maximum message size'.

    The problem is that the sender doesn't receive any NDR.

    Can you help us ?

    Thank you

  • 0 in reply to Roberto Bianchi1

    Yes, the problem is identical.

    Our Exchange has a size limit on inbount set to 20MB, when the Sophos Mail has a size limit of 50.

    When users send message sized 30MB, the NDR message is generated by Exchange, but not received from sender.... 

  • 0 in reply to Andrea Rinaldi

    I enabled the transport connector log and i have found the transaction between our Exchange server and Sophos with the error 5.3.4:

     

    2019-12-31T12:41:58.111Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,0,10.10.81.20:25,52.29.100.147:38476,+,,
    2019-12-31T12:41:58.111Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,1,10.10.81.20:25,52.29.100.147:38476,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
    2019-12-31T12:41:58.111Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,2,10.10.81.20:25,52.29.100.147:38476,>,"220 <OUR MAIL SERVER> Microsoft ESMTP MAIL Service ready at Tue, 31 Dec 2019 13:41:57 +0100",
    2019-12-31T12:41:58.127Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,3,10.10.81.20:25,52.29.100.147:38476,<,EHLO outbound-52-29-100-147-eu-central-1.prod.hydra.sophos.com,
    2019-12-31T12:41:58.127Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,4,10.10.81.20:25,52.29.100.147:38476,>,250-<OUR MAIL SERVER>.<OUR DOMAIN.LAN> Hello [52.29.100.147],
    2019-12-31T12:41:58.127Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,5,10.10.81.20:25,52.29.100.147:38476,>,250-SIZE,
    2019-12-31T12:41:58.127Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,6,10.10.81.20:25,52.29.100.147:38476,>,250-PIPELINING,
    2019-12-31T12:41:58.127Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,7,10.10.81.20:25,52.29.100.147:38476,>,250-DSN,
    2019-12-31T12:41:58.127Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,8,10.10.81.20:25,52.29.100.147:38476,>,250-ENHANCEDSTATUSCODES,
    2019-12-31T12:41:58.127Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,9,10.10.81.20:25,52.29.100.147:38476,>,250-STARTTLS,
    2019-12-31T12:41:58.127Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,10,10.10.81.20:25,52.29.100.147:38476,>,250-AUTH NTLM,
    2019-12-31T12:41:58.127Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,11,10.10.81.20:25,52.29.100.147:38476,>,250-8BITMIME,
    2019-12-31T12:41:58.127Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,12,10.10.81.20:25,52.29.100.147:38476,>,250-BINARYMIME,
    2019-12-31T12:41:58.127Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,13,10.10.81.20:25,52.29.100.147:38476,>,250 CHUNKING,
    2019-12-31T12:41:58.142Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,14,10.10.81.20:25,52.29.100.147:38476,<,MAIL FROM:<SENDER MAIL ADDRESS@GMAIL.COM> SIZE=33114769,
    2019-12-31T12:41:58.142Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,15,10.10.81.20:25,52.29.100.147:38476,*,Tarpit for '0.00:00:05',
    2019-12-31T12:42:03.150Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,16,10.10.81.20:25,52.29.100.147:38476,>,552 5.3.4 Message size exceeds fixed maximum message size,
    2019-12-31T12:42:03.166Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,17,10.10.81.20:25,52.29.100.147:38476,<,RSET,
    2019-12-31T12:42:03.166Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,18,10.10.81.20:25,52.29.100.147:38476,*,Tarpit for '0.00:00:05',
    2019-12-31T12:42:08.173Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,19,10.10.81.20:25,52.29.100.147:38476,>,250 2.0.0 Resetting,
    2019-12-31T12:42:08.189Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,20,10.10.81.20:25,52.29.100.147:38476,<,QUIT,
    2019-12-31T12:42:08.189Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,21,10.10.81.20:25,52.29.100.147:38476,>,221 2.0.0 Service closing transmission channel,
    2019-12-31T12:42:08.189Z,<OUR MAIL SERVER>\Default <OUR MAIL SERVER>,08D78D67A2EC9746,22,10.10.81.20:25,52.29.100.147:38476,-,,Local

    But i didn't find any trace about NDR message and/or a log that show that it was blocked by Sophos. Have you found it ?

  • 0

    Hi,

     

    we're facing the same issue

    any news on this?

     

    br

  • 0 in reply to MarioR

    I visited this issue a while back and took note about the current behavior.

    Central is very handy with the size of the current message size limit (50 mb). 

    I would rather recommend to increase the Mail server size as well to keep one line with Central. 

     

    Central does not generate a NDR for this message, that is correct. 

    Maybe you could revisit the policy of *0 mb on Exchange. 

    I would also recommend to open a Support Case to rise the attention. 

    __________________________________________________________________________________________________________________

  • 0

    Hi,

     

    we ran into other problems:

    Central sends NDRs by itselt - tested with 60MB mails

     

    But Central does not forward NDRs from exchange - tested with 30MB mails, with a 20MB limit at exchange.

    The Mail was rejected but the sender never received a NDR.

     

    Setting exchange limit to 50MB or higher is our current workaround. But we got customers, which want to reject much smaller mails too.

     

    br

  • 0 in reply to MarioR

    Notice some customer report, that this feature is now included.

    Feel free to report your experience and if the NDR will be forwarded. 

    __________________________________________________________________________________________________________________

Unfiltered HTML