Cannot get SMTP MTA to accept mail on port 587

Hi GiZZoR,

We've moved this thread to the XG Firewall group from the UTM Firewall Community group as it’s better suited here. 

You could change the port from the console with the following command: 

• set service-param SMTP add port 587

Let us know how it turns out for you once you change the port. 

• Sophos XG Firewall: How to SSH to the firewall using PuTTY utility
• Type 4 to access the Device console

Thanks,

Hi ,

Found this article:
https://support.sophos.com/support/s/article/KB-000035698?language=en_US

I see your command says "SMTP", but the article says "SMTPS". Which one is it? Or doesn't it matter?
I've already got this (below), but I still cannot access port 587.

Thanks

Hi GiZZoR,

It depends on the downstream server if it supports the TLS connection or not; based on that, you could add SMTP/SMTPS ports.

However, this default port is already supported with the MTA configuration, and you wouldn't need to use that command. 

When you try to connect to the XG firewall on port 587, run a packet capture from the GUI and post the screenshot: 

I'd suggest you check out the following document to ensure the configuration is correct: Configure email protection in MTA mode.

• Monitor traffic using Packet Capture Utility in the Sophos XG Firewall GUI

Thanks,

This what the packet capture shows:

And yes, SMTP relay is enabled for the Zones currently in use:

Hi GiZZoR,

Could you please check the Email Protection license at Administration > Licensing > Module subscription details? 

Thanks,

Hi GiZZoR,

Is smtpd service running on your firewall? Run the following command from the Advanced Shell to check: 

• service -S | grep smtpd

Thanks,

Hi GiZZoR,

Is smtpd service running on your firewall? Run the following command from the Advanced Shell to check: 

• service -S | grep smtpd

Thanks,

I can connect to the service if I telnet to 587 when in the Advanced Shell:

Edit: The hostname and IP that is redacted are assigned to WAN.