XG Firewall v18 MR-5: Feedback and experiences

HI all,

Setup a new XG 18.0.5 MR-5 today, found that if I setup "External email server" for notifications, then mails are still picked up by internal MTA. I have deleted the default fw rule for SMTP (Legacy mode).

What have I missed since the emails are not delivered directly to the external server?

Emails are always send by XGs internal Mail Server. 

The difference between "External Email Server" and Internal Email Server is: If you choose internal Email server, XG will send the Email to whatever Email Address personally. With External Email Server, it always send the Email via SMTP to the external Server first. See: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/learningContent/EmailNotificationSettings.html

Yes exactly what I thought, but when I choose External, I can see all the messages bouncing inside the Email --> mail log of the Sophos Firewall, and no entries in the logs on the external server?!

This worked before.

Yes exactly what I thought, but when I choose External, I can see all the messages bouncing inside the Email --> mail log of the Sophos Firewall, and no entries in the logs on the external server?!

This worked before.

Can you check on packet capture / CLI tcpdump, if the system tries to reach your mailserver via 0.0.0.0 ?