Firewall Email Protection Logs Empty

Question

Hi, 
 I just installed a Mailcow mail server, add Firewall rule to allow SMTP services and DNAT + SNAT to our mail server. 
 It's works both inbound and outbound email delivery. Now I try to configure Email Protection in MTA mode, following this guidance : 
 https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/HowToArticles/EmailConfigureEmailProtectionMTA/index.html 
 Our Firewall is Sophos XG 310. 
 However, email logs is alwasy empty, even inbound and outbound email successed. 
 
 My question is : 
 1. How could I ensure this email protection is work ? 
 2. In my Firewall Rule (to allow inbound traffic for IMAP/POP3/SMTP) , if I enable "scan email content", then inbound email won't come. It's pending actually. Because when I disable those "scan email content", those email will coming later.

Kindly need advice. 
 Regards, 
 
 Fandi

Raphael Alganes · Answer

Hello Trio, 
 Suspect that a DNAT rule for email-related services is being used for the traffic 
 Kindly try to remove it and verify the MTA configuration: https://docs.sophos.com/nsg/sophos-firewall/21.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/HowToArticles/EmailConfigureEmailProtectionMTA/index.html 
 A firewall rule should be created automatically to allow SMTP/SMTPS traffic. We recommend that you keep this rule at the top of the firewall rule. 
 Regards,