Strange XG 18 Mail Log Entries

Question

I don't understand the two entries below: 1) mschravenriemer@yahoo.de (whe dont'know who is) send a message dropped by firewall (nothing strange). 
 2) firewall@ourdomain.it send a message to mschravenriemer@yahoo.de with subject malware detected. This is very strange. firewall@ourdomain.it is the mail address used by XG to send notification, but it should send to an internal address not to external address. The mail server isn't an open relay. The frontend mail server has not recived the message.

Peter-Paul Gras · Accepted Answer

Go to: Email > Policies & Exceptions Select your [Default scan policy] 
 Do you have the [Notify snder] option enabled under the Malware protection section? 
 Like this:

Fabio Marziani · Answer

Your esponse is very good; it explain everything. 
 I will have to study more Sophos XG. 
 Ps: I have immediatly disabled the notify sender after your response.

Strange XG 18 Mail Log Entries

Top Replies