SOPHOS XG mail log not showing any entries

Hi Youcef Rahmouni,

Thanks for reaching out to the Community! 

Try adding "-f" with the tail command:

• tail -f smtpd_main.log 

Thanks,

Hi,

It shows the same thing : 

THANKS !!!

Hi Youcef Rahmouni,

Thanks for the update.

Did you configure SMTP deployment mode in MTA? If yes, did you configure the SMTP route & scan policy under Policies & exceptions? To see the logs, you'd have to configure the email protection policies for your domain.

• Configure email protection in MTA mode

Also, check out the following document for Log file details.

Thanks,

Hi,

yes i configured SMTP deployment mode in MTA and yes i configured route & scan policy under Policies & exceptions and it worked perfectly for about one month.

Thanks.

Hi Youcef Rahmouni,

Could you please double-check the email protection license at Administration > Licensing > Module subscription details? 

Thanks,

Hello Youcef,

Additionally to what my co-worker Harsh has mentioned, double-check that you didn't create a DNAT rule with service set as ANY as this will bypass the MTA, right now the SMTPD is basically for an email to arrive at it, however, if you have DNAT the email can potentially still be delivered but the SMTPD log won't show any entry.

Regards,

Hello Youcef,

Additionally to what my co-worker Harsh has mentioned, double-check that you didn't create a DNAT rule with service set as ANY as this will bypass the MTA, right now the SMTPD is basically for an email to arrive at it, however, if you have DNAT the email can potentially still be delivered but the SMTPD log won't show any entry.

Regards,

Hi ,

for the email protection license its active, and for the DNAT i don't have any DNAT set to service any and still no mail logs are showing.

Hello there,

Thank you, we have sent you a PM, please take a look.

Regards,

Hello,

This issue got solved by removing an incorrectly configured DNAT rule, (DNAT rules with email-related services such as SMTP and SMTPS bypass the MTA mode) and re-creating the default MTA rule by changing from MTA to Legacy and back to MTA, so the system could rebuild the MTA default Firewall rule.

Regards,