Hey Guys
I have a customers site where we use the MTA system in the Sophos XG to relay mail for the onsite MFP devices for the scan to email function.
The MTA engine then Smart Hosts the emails to the customers Gmail service for end delivery.
Have had this set up for more than a year and it has been working quite well in the V17.5 firmware.
While onsite this week I upgraded the firewall to V18.0.379 firmware.
And the Email relay function stopped working.
Internally generated emails were sending fine (Alerts, SAR reports, ect) but anything from the LAN side to be relayed would fail. The emails would be displayed in the Mail Spool and just sit there as failed.
Internally generated emails would arrive in the spool and immediately fail, then after about 5 minutes they would send through.
After trying different things, I eventually changed the Email Service from MTA mode to Legacy Mode, then reverted it back to MTA mode.
Now the system is again relaying the emails as expected.
There is still a couple of issues in the V18 MTA.
New emails arrive in the Mail Spool, they get queued for delivery and then they fail. But about 30 seconds later the delivery is retried, and the emails send. My assumption is that the emails may be attempting to be sent while the Antivirus engine is still scanning, so it is locked and fails.
Also any system generated messages (Tunnel Notifications, Heartbeat Notifications, ect) are now displayed in the log, but do not list them as coming from localhost as they did previously in V17.5.9. External Emails are logged with their Sending IP address, and the internal reports (SAR Report) are generated by the Sophos and sent with the Localhost address as their source.
But information for those using the MTA if you upgrade the XG to V18
This thread was automatically locked due to age.
