MTA Mode corrupting attachments

Hey Hey,

I haven't had the time to completely test this yet but I've discovered MTA mode in 17.5 has been corrupting attachments in messages (when accessed via both OWA & Outlook). So far I've witnessed the following behaviour:

1. PDF files are being corrupted with Malware scanning enabled (dual anti-virus, primary engine Sophos)

a) PDF files do not get corrupted when Malware scanning is diabled in the MTA policy.

2. Document files (namely .docx, .xlsx, etc.) are being corrupted regardless of Malware or File protection settings being enabled or disabled in the policy.

The corruption of files stopped after reverting firmware back to 17.1.3. More info to come when I get some more time to test.

Parents

0 deeptibhavsar over 5 years ago

Hi Benjamin,

Thank you for the feedback.

Contacting to you on PM for further details.

Regards,

Deepti
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 SPandya over 5 years ago in reply to deeptibhavsar

We too tried to reproduce your issue with pdf and all other types of files with suggested XG configuration. We could not reproduce the issue. Could you please share the logs (/log/smtpd*) to me on IM ?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 HuberChristian over 5 years ago in reply to SPandya

By the way... Same issue here with Bare-LFs as with FileProtection (See here https://community.sophos.com/products/xg-firewall/sophos-xg-beta-programs/sfos-v17-5-early-access/f/sophos-xg-17-5-early-access/108541/mta-if-mail-is-blocked-by-file-protection-error-message-is-missleading)

Additionally, the Log Message is missleading. It's my Mailserver behind XG Firewall who does not accept BareLFs. Log Message shows as it would be blocked by XG and not by the Mailserver behind.

Please send me Spam gueselkuebel@sg-utm.also-solutions.ch
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 SPandya over 5 years ago in reply to HuberChristian

Hi Christian,

Bare LF thing on your thread was identified as issue and will come fix in next firmware.

The issue reported by here Benjamin appears to be something else and which is not reproducible by multiple community users and engineering team.

Benjamin Payne Appreciate if you could provide us ssh access or logs for investigation.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 SPandya over 5 years ago in reply to HuberChristian

Hi Christian,

Bare LF thing on your thread was identified as issue and will come fix in next firmware.

The issue reported by here Benjamin appears to be something else and which is not reproducible by multiple community users and engineering team.

Benjamin Payne Appreciate if you could provide us ssh access or logs for investigation.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data