We are using UTM as our mail gateway, lately, a lot of our users have received spoofing emails that appear from themself.
We use emailspooftest dotcom site to test our mail servers, and it detects the problem was
Internal authentication is not enforced.
Fix: On inbound email gateways, only allow specific IP addresses to send mail from internal domains or force an auth challenge for internal domains. This is typically a relay setting.
Could anyone suggest how to fix this problem in Sophos?
Thank you for your reply, are you referring to this page?
Hi dirkkotte,
I can confirm the SPF is configured ok, we tested it many times on different testing sites and there are no issues.
I did the "open-relay-test" as you suggested, which seems to be an open relay, any suggestions on how to fix it in UTM, our MX records are all pointing to the UTM 9 server
Yes, SPF filter is enabled
The results show as
SendSMTPCommand: You hung up on us after we connected. Please whitelist us. (connection lost)
