Mail Protection: SMTP, POP3, Antispam and Antivirus Mail Delay when receiving mail from Microsoft Cloud (Office 365)

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 5 replies
Subscribers 5 subscribers
Views 2531 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mail Delay when receiving mail from Microsoft Cloud (Office 365)

GernotMeyer over 2 years ago

Hi, we have multiple Sophos UTM and also XGs in place. running very fine except...

...all Mails from Office365 to Sophos are EVERY time delay for 15 minutes.

So I went to mail header and figured out to all mails from Microsoft:

srvvsophos exim-in[8614]: 2021-11-24 18:04:55 1mpvhW-0002Ew-1h Greylisting: Greylisted 40.107.135.43

Every mail from office365 is every time greylisted. They NEVER leave that.

Turning off greylisting in Sophos . All fine.

I will not believe that Office365 cloud is greylisted 24X365...

Any hints?

Best from Berlin

Gernot

This thread was automatically locked due to age.

Parents

0 BAlfson over 2 years ago

Hallo Gernot,

Kiekema hier: https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide

I'lI bet you can use just a few of the IPv4 subnets from there for a greylisting exception. You can see what IPs were greylisted and then passed in November with:

zgrep 'Successful greylist retry' /var/log/smtp/2021/11/*|grep -oP ' from .*? \('|sort -n|uniq -c|more

Please let us know which subnets you used.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 2 years ago

Hallo Gernot,

Kiekema hier: https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide

I'lI bet you can use just a few of the IPv4 subnets from there for a greylisting exception. You can see what IPs were greylisted and then passed in November with:

zgrep 'Successful greylist retry' /var/log/smtp/2021/11/*|grep -oP ' from .*? \('|sort -n|uniq -c|more

Please let us know which subnets you used.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data