Sophos Firewall

Discussions Smtp enable on XG firewall

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 6 replies
Subscribers 27 subscribers
Views 9481 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Smtp enable on XG firewall

sindbad over 7 years ago

Hi all,

I want to enable SMTP on the XG firewall.

I opened the service SMTP from LAN to WAN

I did a telnet and it's still not open.

Am I missing something? Would love to hear from you.

Thank you

Regards

This thread was automatically locked due to age.

0 rfcat_vk over 7 years ago

Hi,

please post a copy of your firewall rule and where it sits in the rule list.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 sindbad over 7 years ago in reply to rfcat_vk

[deleted]
Cancel
Vote Up 0 Vote Down

Cancel
0 sindbad over 7 years ago in reply to sindbad

It seems that port 25 is blocked by my ISP. Only through SSL port 587 is allowed.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to sindbad

Hi,

A couple of points.

1/. you can use a business rule to scan imap/s and smtp/s rather than a network rule (you will need to install a certificate on your PC/macs etc

2/. the mail rule will need to be near the top

3/. why do you feel you need the crypto rule? If have configured your other rules correctly that port will not be open and dropped by default.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 sindbad over 7 years ago in reply to rfcat_vk

1. A business rule for allowing SMTP/IMAP from LAN to WAN?

2. I will place the mail rule to the top

3. I will remove the crypto rule. So if I don't put an ALLOW rule, it is automatically blocked? So I don't need a REJECT rule?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 7 years ago in reply to sindbad

If you don't have any incoming rules it is blocked, if you enable scanning on incoming rules it should be picked up, but blocking the port isn't going to stop it being picked up by a user from either a bad site or part of a mail message.

Ian
Cancel
Vote Up 0 Vote Down

Cancel