Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 13 replies
  • Answers 2 answers
  • Subscribers 6 subscribers
  • Views 3138 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM Home - Apple iCloud IMAP

Unks

Hello I have found different threads similar to this topic but with no specific answer.

I have Sophos UTM Home - ASG Software Firmware version: 9.713-19 Pattern version: 219285

and the problem that I have is that Icloud servers for outgoing email cannot be reached

I have added a web filter as follows

and an email rule in the firewall with the following services

for the firewall rule, I have added port 587 with no luck.

Any help would be appreciated. I really appreciate any help you can provide.



This thread was automatically locked due to age.
  • 0 in reply to Unks

    To be honest I don't know if creating a host group would really help because a user accessing smtp.mail.me.com would be doing DNS lookup for the IP of it and it should be resolvable by any DNS forwarder. I think and I might be wrong here, is that if the UTM is used as a recursive DNS resolver, it would keep the IP address of smtp.mail.me.com updated at all times if the IP address changes.

    I also don't think creating a firewall rule to allow outgoing SMTP service would help since the UTM allow all outgoing connections in the very last rule unless there is a rule above that would BLOCK it.

    If the last firewall rule is Source: Internal Network--->Service: ANY---->Destination: ANY, it should just allow the traffic.

    And I think that adding the SMTP service (port) to the allowed target services would be necessary only if the UTM web filtering proxy was in standard proxy mode and not transparent, but the UTM manual says otherwise. 

    • DNS group: Similar to DNS host, but can cope with multiple RRs (Resource Records) in DNS for a single hostname. It is useful for defining firewall rules and exceptions in transparent proxies. 

    Someone here might know more about it, but it definitely seems that the problem is that some of the IP addresses of the iCloud mail servers are not responding to pings so it's hard to tell if they are available.

  • 0 in reply to alan weir

    Here's what's going on, you can see for yourself.

    I performed an nslookup for smtp.mail.me.com, and the first IP address it resoved to responded to a ping, then a few seconds later it tried to ping a different IP address and was not reponding.

    The is definitely not a problem with any of the firewall settings on the UTM.

  • 0 in reply to alan weir

    That definitely makes a lot of sense, I did not try that since the beginning but it makes a lot of sense!, thanks for sharing!

Unfiltered HTML