Sophos Firewall

Discussions LOTS of to/from same email rejected in mail log

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 2 replies
Subscribers 26 subscribers
Views 952 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LOTS of to/from same email rejected in mail log

h3ctic over 4 years ago

As subject says, we are seeing LOTS of rejected entries in the mail log (Email - Mail logs)

Hovering over the status "Rejected" shows: "Sophos Anti Spam engine has blocked this Email because the sender's IP Adress is blacklisted."

It may seem like the XG has blacklisted a internal infected object.

How do I locate the IP adress in question?

This thread was automatically locked due to age.

Parents

0 FormerMember over 4 years ago

Hi h3ctic,

Thank you for reaching out to Sophos Community.

Go to Log viewer > Email and filter it either with the sender or recipient email address. You'll be able to see 'Src IP' over there.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 FormerMember over 4 years ago

Hi h3ctic,

Thank you for reaching out to Sophos Community.

Go to Log viewer > Email and filter it either with the sender or recipient email address. You'll be able to see 'Src IP' over there.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 h3ctic over 4 years ago in reply to FormerMember

Thank you for your answer.

Here is "Email - Mail logs"

Here is the result of filtering "Log viewer - Email"

It seems the "Log viewer - Email" only shows "Queued", "Delivered", "Warn", "Quarantine" and "Drop" - not the ones rejected by RBL.
Cancel
Vote Up 0 Vote Down

Cancel