dose it possible to use a dedicated line for (GSSMO and SMTP) Upload only?

Look for posts about multipath rules.   This is the most recent one.

https://community.sophos.com/products/unified-threat-management/f/management-networking-logging-and-reporting/104975/interface-multipath-rules-with-slow-and-fast-connection

Hi DouglasFoster

Could you check the above post and screenshots please.

Thanks

Ahmed Fawzi

Not my skillset.   That's why I directed you to the posts on multipath, rather than answering your question directly.   Hopefully someone else will chime in.

You need to go back to the KBA for Multipath.

https://community.sophos.com/kb/en-us/118457

Most of your rules are not correct. 

And be careful with LAN as Source. If the proxy or something like that generates the traffic, you need to use ANY or Your uplink interfaces. 

You need to use: 

By Interface: Select an interface from the Bind Interface drop-down list. All traffic applying to the rule will be routed over this interface. In case of an interface failure and no other matching rules, the connection falls back to default behavior.

And you need to take a look at the google HTTPs Rule. As far as i can see, this could be covered by proxy and breaks. 

Hi ManBearPig

and thank you for your support,

i did every thing on multipath section on that link

https://community.sophos.com/kb/en-us/118457#Multipath%20Rules

but till now there is no traffic go to that interface

i tried 

Internal (address) -> SMTP -> Iinterface-3

 Internal (Network) -> SMTP -> Iinterface-3

Any-> SMTP -> Iinterface-3

Internal (Network) -> Any-> Iinterface-3

added that interface to Uplink Balancing

remove that interface from Uplink balancing

i think there is a problem with this device, i relay start hate Sophos

Lets start with the basics.

Do you use any kind of Proxy? Email Proxy, HTTP proxy or something like that? 

Can you show me the Dashboard and Screenshots of this rule: 

Any-> SMTP -> Iinterface-3

Because, as long the interface is not on Error, this should bind all SMTP traffic to Port Interface-3. 

Maybe your SNAT Rule is not correct? Could be an issue. Take a look at the SNAT / MASQ Rule. 

Hello

i know the rule is simple to setup, but the device completely ignore it at all

please find the screen shoots attached,

and even if i wait for hours monitor this dashboard (in time all company send emails including me for testing), 

i only got a very tiny traffic, like the below image.

What you think?

Thanks

Ahmed Fawzi

Seems like the Multipath Rule is still incorrect.

Please send a screenshot of this rule in edit mode. 

please find a screenshot for the rule in edit mode,

thanks

Ahmed Fawzi

please find a screenshot for the rule in edit mode,

thanks

Ahmed Fawzi

Please use:

Source: ANY

Service SMTP

Destination INTERNETv4 

ltf. Persistence - Bind to Interface 

Select your WAN interface, which you want to use. 

what

ltf. Persistence - Bind to Interface 

mean?

if i select 'by interface', i just got a select menu to select another interface.

are that what you mean?

Yes, sorry, tried this out of my head. 

but my 3rd interface doesn't show there, i just got the other ADSL Line.

dose i have to add the line to uplink balance to see it there?

and if yes, how to be sure that line will be used for SMTP only not for any other traffic,

its 4G line and will be finished so fast if browsing or POP3 use it.

Ok lets start from the beginning.

Multipath is only available for Uplink Interfaces. So basically you put all your "WAN" Interfaces in the Uplink balancing. 

if you do not configure any Multipath rule, UTM will load balance everything depending on the little wrench. 

You can influence this with Multipath, because multipath rules will "overwrite" the load balancing.

So you will most likely put your unwanted Interface on 0 in the scheduler and create the Multipath Rule like explained. 

This will bind the Traffic SMTP no matter what to the Interface. 

Now every SMTP connection outgoing should use the Interface selected above and only this interface. You should not see any traffic except SMTP on this interface. 

that what i do on my side

added the interface to uplink balance, then change ITS wight to 0 to avoid 'uplink balance' to use this interface,

then edit the rule as below,

and in the last check for the dashboard i see the SMTP traffic still use WAN interface#1 :(

Perform a tcpdump on the Shell and verify there. 

And do you have other multipath rules? 

Hi,

Thank you for keep trying to help on this,

I will try to run that command when back to work after about 10 hours from now,

And there is no active multipath rule, I 'm sure every rule there is disabled else for SMTP to 3rd interface.

Thanks

Ahmed Fawzi

Hi

i tried to run this command 'tcpdump' though SSH by putty tool,

but i got an error '-bash: tcpdump: command not found',

so i think the command need more parameters (which i don't know).

so can you please tell me what to test there,

Thanks

Ahmed Fawzi

Were you logged in as root?

Cheers - Bob