Email Smart Host not working?

It works on my end. My smarthost requires port 587 along with authentication. Double check your ISP requirements on their incoming SMTP connections. 

Your ISP is allowing relay from their IP pool without authentication which is fine. Wish the logging was more verbose on XG to actually see whats going on[8-|]

EDIT: You can try going through awarrenmta.log in /log directory but there is a lot of clutter with messages of ciphers etc...

tail -f awarrenmta.log may give you some hints if you want to retest.

Hi,

Please run mta service in debug mode: service awarrenmta:debug -d -s nosync

And share the awarrenmta.log

Thanks for the suggestions.

I have been using the ISP smart host on the upstream mail server for about 18months now (it doesn’t have very good AV integration).

I copied all of the settings from that server and checked them against published configuration with no luck.

Putting those settings back into the upstream mail server worked so it wasn’t a settings issue unfortunately!

I will do this and let you know the results.

Thanks

Hello Ian

I use the smart host feature for relay with Port 25 to my upstream e-mail delivery service, also authentication is configured - it works well on my side.
My Sophos is running on a VM (KVM) system.

I enabled SMTP relay functionality on the WAN Interface via System -> Administration -> Device Access, but no further rule was needed to send E-Mail outbound.

My Setup looks like:

LAN (Mail clients) ----- FW-DMZ ------ Mailserver ------ FW outbound in MTA mode ------ Internet with upstream delivery service

The mail client send mails to the Mailserver sitting in the DMZ, the Mailserver send mails to the Sophos Mail MTA, the Mail MTA send mails via Smart-host to the upstream service.

Hi Have a simmilar issue. I updated two Sophos XG 16 to 17 Beta 1. On both I have the problem, that when I activate the smarthost, all mails are bounced.

If I use the same smarthost settings for Notification (Administration - Notification Settings), I can send my notifications. But not if I use the Internal Mail Server option with Smarthost Enabled.

Any ideas?

Thanks

Hi StefanBoldt ,

csc custom debug

take logs /log/csc.log /log/cschelper.log

You can use below command and copy to linux machine

SG135_XN01_SFOS 17.0.0 Beta-1# scp <Source_File> <Username>@<server_ip>:<Destination_Folder>/

SG135_XN01_SFOS 17.0.0 Beta-1# scp applog.log qa@10.198.36.170:r/

You can also copy the logs from screen

Hi StefanBoldt,

Meanwhile, Please share your setup details and firewall configuration details.

Also check the drop-packet-capture , when you are sending mail with smart host enable

deeptibhavsar said:

Hi,

Please run mta service in debug mode: service awarrenmta:debug -d -s nosync

And share the awarrenmta.log

 

I have sent a PM with regards to where you want the awarrentmta file sent

I think this section may be pertinent to the issues:

ERR   Oct 05 21:06:29 [T___WORKER]: ct_do_work: write failed: Connection refused
MSG   Oct 05 21:06:29 [0xc0000075]: spam scanning failed,unable to connect local ctasd
INF   Oct 05 21:06:29 [T___WORKER]: matchpolicy: sender profile is avail
INF   Oct 05 21:06:29 [0xc0000075]: SCANCONTENT AV: 4 TFT: 0 DLP: 0 SANDSTORM: 0
ERR   Oct 05 21:06:29 [T___WORKER]: ensure_avd_connection(): connect_to_av_server() failed
ERR   Oct 05 21:06:29 [0xc0000075]: VirusScan: Failed for Session c0000075
MSG   Oct 05 21:06:29 [0xc0000075]: S='###SENDERADDRESS###' R='###RECEIVERADDRESS###' subject='Test' Size='3657' Status='Mail delivery failure. Could not connect to Anti-Virus Service.'

If you need the rest of the file, please let me know