Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.
Hello,
I come from Sophos UTM, now I am configuring an XGS series.
I need to allow an external public IP address to access to SMTP replay. I tried to add the IP to Replay Settings - Allow relay from hosts/networks but it does not work. It seems that the only way to allow external IP is to enable SMTP replay for WAN interface in ADMINISTRATION - SMTP Relay, but in this way all external IP address are enabled.
Any ideas?
Thanks!
Hello eclipse79 ,
Thank you for reaching out to the community, yes that would be the right way to do it | enable the SMTP relay on the WAN side. And you can mention the specific host/networks you want it to be relayed:
Thanks & Regards,
_______________________________________________________________
Vivek Jagad | Team Lead, Technical Support, Global Customer Experience
Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
You could do a Blacklist DNAT for everything except your WAN IP.
This would be the workaround for your situation.
What you do:
Configure it as usual. Additionally setup a DNAT Rule for a own created Internetv4 object.
The internet v4 object could be something like: 
You create an additional object like Internetv4 which leaves out your particular IP Address.
With the new object(s) you will generate a blackhole NAT rule and move everything else to nowhere.
Essentially this would lead to: Every Host in WAN will be redirected to nothing and not to the SMTP MTA except your wanted IP. This will work, is a little bit more work to create but fulfills the requirement.
__________________________________________________________________________________________________________________
