This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to force MTA to send emails with STARTTLS on port 587?

Hello,

I'm in the process of setting up my own mail server and I can receive emails without a problem but egress is blocked on SMTP port 25 by my ISP:

Jun 27 02:05:01 localhost postfix/smtp[12768]: connect to alt2.gmail-smtp-in.l.google.com[142.250.152.26]:25: Connection timed out

I have created a NAT rule to re-route port 25 to either port 465 or 587 but it doesn't seem to make a difference as I still get the same error reported above, even though I see this NAT rule's usage counter increasing.

Is there a way to force XG Firewall's MTA to always send mail using a port other than 25, say enforcing the use of STARTTLS on port 587?

Thanks in advance.

This thread was automatically locked due to age.

0 FormerMember over 4 years ago

Hi T J3, Welcome to Sophos Community.

You can set it through the CLI. SSH into the firewall > Option 4 Console > set service-param SMTP add port 587

Use this article for your reference: https://community.sophos.com/sophos-xg-firewall/f/discussions/120112/xg18-mta-mode-and-port-465-587-for-tls-ssl-email-protection
Cancel
Vote Up 0 Vote Down

Cancel
0 T J3 over 4 years ago in reply to FormerMember

Hi , unfortunately the guide you included is for the XG firewall to accept emails on port 587 and act as a relay for downstream systems/clients up to it, which is not what I'm looking for... I need to be able to send emails from XG on that port.
Cancel
Vote Up 0 Vote Down

Cancel