Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Why are SMTP Mail "Reject" events not logged properly?

I can only see "Reject" events in the GUI when going to Email -> Mail logs.

I do not find them anywhere in any of the built-in logs and they are also not sent as audit logs.
The other SMTP Anti-spam events "Dropped" and "Delivered" are both logged in the "Mail" log in GUI, and sent as audit logs.

Is there any way to turn on logging of "Reject" events to audit logs?

Using: SFOS 20.0.0 GA-Build222

Background:
I use XG as MTA gateway with an internal MS Exchange server as my personal mailsolution and use an unique email address for each place i register online/offline.
This makes it easy to block/filter emailaddresses which has been compromised, but over the years, the number of addresses that has been compromised and the amount of incoming spam has made it a chore to go through all the Mail logs pages (up to ~100 per week now)
I go through the pages regulary to find out if there are any new email addresses that has been compromised, which usually means that the site has had an incident, and i should take some actions.

The plan was to instead read the XG mail log and compare it to a dump of the Exchange rule with the compromised emailaddresses, and if there were any new addresses with "Reject" or "Dropped" send myself an alert, but without access to the "Reject" events, this is not possible.



This thread was automatically locked due to age.