Getting "Spam filter cannot query"

Question

In the past the issue was a Sophos side, not my side. Is this true again? I can still browse so the firewall can get out port 80 just fine. 
 
 " 
 The spam filter daemon is unable to reach the database servers via HTTP. Please make sure that the device is able to send HTTP (TCP port 80) requests to the Internet. You may have to allow such traffic on upstream devices. 
 --" 
 
 https://community.sophos.com/products/unified-threat-management/f/mail-protection-smtp-pop3-antispam-and-antivirus/101402/warn-129-spam-filter-cannot-query-database-servers

LUHEZ · Answer

Ports and URLs used by UTM: 
 https://community.sophos.com/kb/en-us/126576

Commtouch AS 
 iprep%d.t.ctmail.com resolver%d.ast.ctmail.com 
 80, 443 
 Anti Spam Scanner

Commtouch is Cyren. 
 Cyren, the external Anti SPAM Provider messed up with their DNS. 
 https://status.cyren.com 
 "an incorrect NS record for the domain ctmail.com started to propagate to DNS servers worldwide" 
 
 Suggested action: Flush Sophos UTM DNS Cache 
 Webadmin: Network Service / DNS click FlushResolverCache 
 
 Our customers UTMs having problems again since 10.08.2019 03:00 again. Probably Cyren reversed some DNS manipulations again. That causes DNS Cache trouble on the UTMs again. 
 I don't like that the UTM has problems with changing DNS registrations that it does not take notice of because it relies on it's old cached DNS entries....