Hello all, we are using our Sophos XGS-Firewall as a SMTP proxy with MTA. We have an Exchange Hybrid environment. The mail flow right now is as following: OUTBOUND: Exchange Online -> The internet INBOUND: The Internet -> XGS -> Exchange OnPrem…

Hello Everyone Short description about our current Setup. We have Sophos UTM using as Mail relay solution for all of our internal Applications and Printers. The UTM is connected to M365 which is our Mail server. the UTM is not a Gateway for our normal…

Hello, we have the following problem: Three of our server / applications do not support OAuth for the moment, so we need an locally smtp server inside our network. For the moment we use simple postfix, authenticated users only from specific internal…

Hi all! I hope this is just a small question and easy to answer. We have a XGS 2300 with SFOS v20 deployed and we use it as our snmp proxy. We get a lot of mails from "spameri @ tiscali.it" which are rightfully rejected. Now, I would like to set up…

Hello, as from here I can configure "Require sender email domains" to enforce TLS negotiation ( whitelisting ). Beside this I can configure "Skip TLS negotiation" ( blacklisting ). For compliance and legal reason I need to configure TLS negotiation…

Hi folks, a while ago I had issues with SASI not logging all iMaps traffic. The issue has been partially resolved by changing firewall mail rules. A new issue is I receive over 1000 spam messages a day from the same sites via the mail post office…

Hello, I'm trying to configure SMTP on Sophos Firewall ( SFOS 20.0.0 GA-Build222) : everything is running smoothly in IPv4, but Firewall is blocking outgoing IPv6 SMTP traffic : I tried to define all kinds of (IPv6) rules to allow this traffic…

Hello, I come from Sophos UTM, now I am configuring an XGS series. I need to allow an external public IP address to access to SMTP replay. I tried to add the IP to Replay Settings - Allow relay from hosts/networks but it does not work. It seems that…

Hi, are SOFS and SG UTM affected by CVE-2023-51766 (Sender Spoofing by SMTP)?

Have already been referred here: https://doc.sophos.com/nsg/sophos-firewall/19.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/GeneralSettings/index.html#smtp-settings I wonder if any of you guys can share with me what and why your settings…

Hello, We use 2 WAN interfaces but want to route the outgoing SMTP traffic via one interface. What would be the best approach here?

Hi, I am prepairing configuration to use XGS as MTA and I have some questions which I don't find answers to. Current situation: External MX and MAIL-out server are used, Exchange is set up locally. We have /24 public IPs on that site and only…

Hi, and thanks in advance for any help. we have some items in the smtp quarantine that cannot be deleted from the console. Can we ssh into the firewall and delete form the file level? I have found a directory /var/quarantine but not not sure if I…

Is the firewall (MTA mode) not accepting SMTP with SSL/TLS also on port 465/587? My Epson printer is not able to connect on 465/587 with the firewall: /log/smtpd_main.log -> nothing in log /log/smtpd_reject.log -> nothing in log ACL violation? Source…

If you have a port forwarding rule (DNAT) to forward incoming SMTP (25) and SMTPS (587) traffic to mail servers based on the ports, and enabled SMTP scan on the Firewall-rule. The STARTTLS will not work on port 587 for the SMTPS connection and will result…

Hello, I need to change target port to internl exchange server to port 5252. MTA mode uses port 25 as normal. Cause of reicipent filter with callout needed, this is not working on smtp port 25, cause of exchange implementation. This have to setup…

Hi guys, we have problems with SMTP File protection and S/MIME mails. File protection is active and configured with Block file types "ALL". MIME white list is configured. Now, external S/MIME encrypted Mails are getting filterd: ontent-Type: text…

I'm working on setting up a Sophos XG and would LOVE to use the Sophos XG's mail systems to be the 'exfil' mail server with a specific HELO name and a specific IP address on the system. The system has multiple WAN IPs and because not all of them are…

Hi, i need some help. We send from a internal postfix server about 3000 mails to customers. Some of the mails bounced, because of some limits in XG SMTP Services. I received this errors message in postfix.log 550 Mail Submission Rate is too high…

Hi, I have emails with an 88% probability of spam that are not being quarantined. I would like to change this check: for example, if an email has the 70% of spam probability, then will be quarantined. Is it possibile?

So, we upgraded to 18.5.3 and receive a lot more SPAM than usual I created two cases and Sophos has no solultion to fix this at the moment. So that is enhanced plus support value ... The only option would be a downgrade to 18.5.2 or wait a few month…

I was wondering if anyone else is having issues with the email filter, the additional subscription on-prem Exchange 2019 server XGS3100 is the latest build (upgraded from UTM) the spam filter is useless and letting through a lot of spam, does…

Hello Community. Sophos XG Firewall Firmware Version 18.5.3. We have too many of False Positive, and false negatives. The quality of Spam filtering is very poor. It is letting too many stupid emails go through. Checking the Logs, there are random…

Hello @all, I can't save the settings under Email / General settings / SMTP Settings. No changes can be made, Mode is MTA and SFOS 18.5.3 MR-3-Build408 is installed. How can I solve that? Many thanks TBC

After the 18.5.3 MR-3 update control center shows that SMTPD is dead. Via advanced console 5 - 3 I restarted the smtpd service service smtpd:restart -d -s nosync. service antispam:restart -d -s nosync. This did not solve it. I tried stopping…