Cant change DKIM verification settings - XG v18.04 in MTA Mode

Question

I am currently running XG v18.04 (MR4), with MTA mode protecting my mail server. 
 I turned on DKIM Verification some time back, and it appears to be working. 
 I tried this evening to change the settings for DKIM Verification related to Qarantine vs reject, but keep getting a red pop-up warning "Couldnt delete DKIM verification" 
 I subsequently tried turning it completely off, changing other settings and cycling mail through Legacy mode and back to MTA to see if it cleared an issue, but keep getting the same pop-up warning. 
 Do I need to stop the MTA service in the CLI first or is there some inter-dependency for DKIM that I need to resolve first before I can make a simple settings change?

FormerMember · Accepted Answer

Hi NH1 , 
 Thank you for reaching out to the Community! 
 I was able to replicate this issue with SFOS v18 MR4. I also tried to replicate this issue on SFOS v18 MR3, but it works on MR3. 
 Could you please replicate the issue and collect the following logs from your firewall. 
 SSH into the XG firewall by following this KBA: Sophos XG Firewall: How to SSH to the firewall using PuTTY utility 
 
 To connect using SSH, you may use any SSH client to connect to port 22 of the SFOS device. 
 Select option 5 Device Management. 
 Select option 3 Advanced Shell. 
 
 Run the following command to collect applog: tail -f /log/applog.log 
 You also need to put the CSC service in debugging and collect csc logs. 
 Run the following command to put the csc service in debug: csc custom debug 
 Note: Run the same command to remove the service from debugging. 
 Run the following command to collect csc logs: tail -f /log/csc.log 
 I would suggest you open a support case and PM me the support case so that I can help with the follow-up. 
 Thanks,

FormerMember · Answer

Hi Christian Biere , 
 Apologies for the delayed response. 
 The fix for this issue is tentatively planned to be included in the v18 MR5 release. 
 Open a support case at support.sophos.com and mention the internal ID NC-67605 to get the patch for your firewall. Please PM me the support case number so that I can help with the follow-up. 
 Thanks,

FormerMember · Answer

Hi Sebastian Richter1 , 
 Check out the following documents for more information about the release of v18.0 MR5 and resolved issue list: 
 
 Resolved issues - Version 18.0 MR5 Build 574 . 
 Sophos release notes 
 
 Thanks,

FormerMember · Answer

Hi Christian Biere , 
 The hotfix has been released for this issue; please check if you've selected "Allow automatic installation of hotfixes under Backup & firmware > Firmware > Hotfix. 
 You could also verify the detail of this hotfix from the u2d logs. You could use the following command from the Advanced shell to confirm. 
 
 grep "sfsysupdate_NC-73542.tar.gz.gpg" u2d.log 
 
 Thanks,

Joan Miquel Gurdo · Answer

I found the error. The key need to be enclosed with the delimiters. This is due to a very short documentation in the manual. 
 Thanks and regards.

Cant change DKIM verification settings - XG v18.04 in MTA Mode

Top Replies