DROP Rule Doesn't Work - Trying Block IP Proxy SPAM

Question

I created a rule (I put it on top) that drops a given list of Ips. The problem is that I continue and receive emails, which despite being rejected, should not even reach that point. I know that all those emails are from the same IP that counts in the SPAMMER list that I created. Can someone help me with this? 
 Now at least it seems to be blocking forever. But there were times when some escaped and were sent. Result, constantly on blacklists ... delists requests .... Sick of it. 
 But what I would like was for DROP to work and stop seeing those attempts to use our email server to send SPAM. 
 
 Thanks you all

LuCar Toni · Accepted Answer

There are certain modules, which are actually picking up the traffic before the firewall. WAF and Email are one of those. 
 If you want to avoid this on a IP basis, simply create a blackhole NAT. DNAT the traffic of those IPs port 25 to a non existing IP. It will pickup the traffic before the Email module gets it.

emmosophos · Answer

Hello there, 
 Thank you for contacting the Sophos Community! 
 Could you please confirm your settings for Scan Outbound and Relay settings? 
 Make sure you have Scan Oubound enabled and for Relay Settings only your Email server is allowed to send email. 
 Regards,

DROP Rule Doesn't Work - Trying Block IP Proxy SPAM

Top Replies