Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

2 hops for SMTP Traffic

Hi Community,

i was testing XG in MTA Mode. But my incomming mail traffic goes in circles.

I have a Mail Appliance for Encyption and Secure Mail Portal and an Exchange Server.

The Appliance is in DMZ, the Exchange is LAN.

I have a Policy for my Mail Domain that routes the Mail traffic to Mail Appliance.

The Mail Appliance then sends Mail Traffic for my Domain to the Exchange.

Internet < XG > DMZ Mail Appliance < XG > Exchange

How can i make Ignoring the XG the incomming SMTPTraffic between Mail Appliance and Exchange.

Or should i give the Exchange a SMTP Connector in the DMZ?

 



This thread was automatically locked due to age.
Parents
  • You should disable the SMTP scanning rule in firewall rules. Then let Mail Appliance directly pass the email to exchange via Port 25. 

  • Good Morning, 

    i checked this, and i still have this . 

    After i read your reply i realized i forgot to write all configs  i made.

    So i have a FW Rule between Exchange and Appliance both directions port 25 no Mail Scanning

    I have set under host Based Relay the Exchange und Appliance as allowed   (Eventually this ist the mistake ?)

    i have set Upstream hosts my Providers Mail Server Network

    My Goal is to use the Spam, Quaratine and AV from the sophos on incomming and outgoing mails to internet.

Reply
  • Good Morning, 

    i checked this, and i still have this . 

    After i read your reply i realized i forgot to write all configs  i made.

    So i have a FW Rule between Exchange and Appliance both directions port 25 no Mail Scanning

    I have set under host Based Relay the Exchange und Appliance as allowed   (Eventually this ist the mistake ?)

    i have set Upstream hosts my Providers Mail Server Network

    My Goal is to use the Spam, Quaratine and AV from the sophos on incomming and outgoing mails to internet.

Children
No Data