For some reason, with our UTM (software-based - 9.310-11) we're running into a situation where any messages that trigger a DLP rule result in the following error (this is the smtp proxy debugging log):
2015-04-21 08:44:14 SCANNER[24745]: [DLP] Custom expressions: Why is DLP broken?
SCANNER[24745] DIE at Tue Apr 21 08:44:14 2015 --------------------------------------------------------
Can't use string ("0") as a HASH ref while "strict refs" in use at smtpd.pl line 4134.
1 main::scanner
(note that the "Why is DLP broken?" string was a custom DLP rule I set up to test this)
One this message errors, no notification is sent to the sender, so they're unaware that the message was blocked. Based on our settings, the sender and administrator are supposed to receive notification when a DLP rule is triggered.
We've raised the issue with Sophos support and they're looking into it, but in the meantime, I'm wondering if anyone else has seen anything like this or has some thoughts on how to "cure" it.
Does anyone even know where on the UTM I might find 'smtpd.pl' to take a closer look at exactly what's failing?
thanks!
This thread was automatically locked due to age.
