emails stuck in smtp spool with error

Thanks for your reply  
Outbound emails are sent without an attachment, but when you add an attachment the error in smtp spool is Scanner timeout 

Hi ssali prosper,

Thanks for the update. 

Would it be possible for you to share the screenshot of how the SMTP route and scan policy configured on the firewall? 

We'd need to check the smtpd_main logs in debugging to identify the issue. 

Follow the steps to put the smtpd service in debugging, try to send an email with an attachment, and collect the smtpd_main logs, and you may obscure your email and IP address for discretion. 

Follow this KB Article to SSH into the XG firewall: Sophos XG Firewall: How to SSH to the firewall using PuTTY utility

Select Option 5 (Device Management) > Option 3 (Advance Shell)

Run this command to put the smtpd service in debug:

• service smtpd:debug -d -s nosync

Please check out the following KBA to locate and capture the logs: Sophos XG Firewall: Where to find log files?

Once you capture the access_server logs in debugging, run the same command to put smtpd service in normal running mode. 

Run this command to check service status :

•  service -S | grep smtpd

Thanks,

Hi ssali prosper,

Thanks for the update. 

Would it be possible for you to share the screenshot of how the SMTP route and scan policy configured on the firewall? 

We'd need to check the smtpd_main logs in debugging to identify the issue. 

Follow the steps to put the smtpd service in debugging, try to send an email with an attachment, and collect the smtpd_main logs, and you may obscure your email and IP address for discretion. 

Follow this KB Article to SSH into the XG firewall: Sophos XG Firewall: How to SSH to the firewall using PuTTY utility

Select Option 5 (Device Management) > Option 3 (Advance Shell)

Run this command to put the smtpd service in debug:

• service smtpd:debug -d -s nosync

Please check out the following KBA to locate and capture the logs: Sophos XG Firewall: Where to find log files?

Once you capture the access_server logs in debugging, run the same command to put smtpd service in normal running mode. 

Run this command to check service status :

•  service -S | grep smtpd

Thanks,

Above is the screenshot of mail manager in sophos utm 9 webadmin where am trying to release all those mails but they keep returning back to the smtp spool.

On viewing the message delivery log says Scanner Timeout

Hi Ssali and welcome to the UTM Community!

What version of UTM - 9.705?  What hardware is this running on?  Model or RAM & CPU if not a Sophos appliance.

Please copy here the lines from the SMTP Live Log when you Retry releasing one of those mails.

Does this happen with any other sender?  With any other recipient?

Cheers - Bob