Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG Bug: Cannot send Backups using Amazon SES

Hi Folks,

Sophos XG appears to have a bug where it doesn't interact with some SMTP servers properly.

In this case Amazon SES (Simple Email Services) cannot be used with Sophos XG for sending Backups. Other notifications work fine but backups generate the following SMTP error: 

2024-03-30 22:57:43.705Z [1390] rTNXBs-m6OVmh-6I ** rhys@myemail.xyz F=<fwxg01@mydomain.com> P=<fwxg01@mydomain.com> R=router_for_notifications T=notification_smtp H=email-smtp.ap-southeast-2.amazonaws.com [3.24.9.22]:587 I=[123.124.125.126]:50972 X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=yes DN="/CN=email-smtp.ap-southeast-2.amazonaws.com": SMTP error from remote mail server after end of data: 554 Transaction failed: In parameter list <0x000d0x000a name="Backup_[Serial]_SO01_SFOS-20.0.0-GA-Build222_31Mar2024_11.57.24">, expected ';', got "name" DT=1.168s

It appears that there is something malformed in the backup emails which is non-compliant with the SMTP protocol which AWS enforces rigorously. 

I am running the free home license so cannot log a support call. This issue has been raised elsewhere in the forum, but we don't yet have a fix The value that the free license brings to the wider Sophos ecosystem is that tech enthusiasts like me, can spend our own time troubleshooting and diagnosing issues and then report them here in the forum. I know the Sophos team values the wider Sophos community so I do hope they will take the opportunity to improve the product for all and resolve this issue.

Kind Regards

Rhys



This thread was automatically locked due to age.
Parents
  • Hello  ,

    Thank you for reaching out to the community, SMTP error 554 indicates that the mail server did not accept the email. Several reasons typically cause this error: Invalid Recipient Address - There are invalid recipient email addresses; in rare cases, the recipient email address may have been suspended or disabled. It could also be BAD DNS record, blocklist, policy violation..etc. So verify the email address, SPF, DKIM or DMARC records, blacklist, syntax...

    Please double check with the syntax, for further troubleshooting you can also a log a service request.

    We have locked an investigation at: NC-133157.

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Global Support & Services 

    Log a Support Case | Sophos Service Guide
    Best Practices – Support Case


    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

  • I will watch this one with interest; one of our techs runs SFOS at home and found the same issue, and it really looked to him as some sort of issue with SES just flat out not liking these emails.  Other SMTP relay services worked fine.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • I will watch this one with interest; one of our techs runs SFOS at home and found the same issue, and it really looked to him as some sort of issue with SES just flat out not liking these emails.  Other SMTP relay services worked fine.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data