This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Getting "Spam filter cannot query"

In the past the issue was a Sophos side, not my side.  Is this true again?  I can still browse so the firewall can get out port 80 just fine.

 

"

The spam filter daemon is unable to reach the database servers via HTTP. Please make sure that the device is able to send HTTP (TCP port 80) requests to the Internet. You may have to allow such traffic on upstream devices.

--"

 

https://community.sophos.com/products/unified-threat-management/f/mail-protection-smtp-pop3-antispam-and-antivirus/101402/warn-129-spam-filter-cannot-query-database-servers



This thread was automatically locked due to age.
Parents
  • Ports and URLs used by UTM:

    https://community.sophos.com/kb/en-us/126576

    Commtouch AS iprep%d.t.ctmail.com
    resolver%d.ast.ctmail.com
    80, 443  Anti Spam Scanner

    Commtouch is Cyren.

    Cyren, the external Anti SPAM Provider messed up with their DNS.

    https://status.cyren.com

    "an incorrect NS record for the domain ctmail.com started to propagate to DNS servers worldwide"

     

    Suggested action: Flush Sophos UTM DNS Cache

    Webadmin: Network Service / DNS click FlushResolverCache

     

    Our customers UTMs having problems again since 10.08.2019 03:00 again. Probably Cyren reversed some DNS manipulations again. That causes DNS Cache trouble on the UTMs again.

    I don't like that the UTM has problems with changing DNS registrations that it does not take notice of because it relies on it's old cached DNS entries....

  • Thanks for the update, but still no joy after the flush, guess I'm just going to have to wait for the DNS to propagate

  • This only hit one of my clients in the USA.  The last such message from their UTM came in 8 hours after the last post above mine here, so perhaps all is now well...

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • This only hit one of my clients in the USA.  The last such message from their UTM came in 8 hours after the last post above mine here, so perhaps all is now well...

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data