same issue here. I installed 9.510 on my SG 105W at home. I´m not using mail protection, but I checked the mail manager before and after the installation.
After the installation i get the same error message "invalid request".
Maybe mail manager is no longer necessary... Sophos fixed the quarantine report release option for end users (NUTM-9836) instead ;)
2018:07:20-09:25:01 sophos-2 exim-in[32250]: 2018-07-20 09:25:01 TLS error on connection from <Senders Mail Server>:34983 (renegotiation not allowed): error:00000000:lib(0):func(0):reason(0)
The connection closed and the mail would not be processed.
As a workaround, RCPT Verification in AD works as expected.
As another workaround i had added <any> under SMTP/Advanced in the Box 'Skip TLS Negotiation Hosts/Networks' and now Callout is working as before...
2018:07:20-09:25:01 sophos-2 exim-in[32250]: 2018-07-20 09:25:01 TLS error on connection from <Senders Mail Server>:34983 (renegotiation not allowed): error:00000000:lib(0):func(0):reason(0)
The connection closed and the mail would not be processed.
As a workaround, RCPT Verification in AD works as expected.
As another workaround i had added <any> under SMTP/Advanced in the Box 'Skip TLS Negotiation Hosts/Networks' and now Callout is working as before...
But i think its not a good way to disable TLS...
Marco
I had these issues before in 9.509 and haven't yet upgraded to 9.510. Skipping TLS negotiation is not wise, there are some hosts that simply won't communicate without it so you'll loose mails (try to send from Gmail and you will likely get a delivery message from Gmail hours later than you sent the mail and your mail most likely will not be delivered to your mailbox).
Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.
No luck. After switching to TLS 1.2 the same error occurs:
2018-07-30 11:23:13 [46.254.125.74] F=<prvs=074914ada1=sender> R=<rcpt> Verifying recipient address with callout
2018:07:30-11:23:13 sophos-2 exim-in[50277]: 2018-07-30 11:23:13 TLS error on connection from <mailserver> (renegotiation not allowed): error:00000000:lib(0):func(0):reason(0)
