This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Host based Relay still gets Greylisted

Alexander Liebert1 over 2 years ago

Hello,

we got a Sophos XG in MTA Mode Firmware Version: SFOS 18.5.2 MR-2

Now i got the following Szenario.

We set up Exchange Hybrid.

we got Centralized Mailflow from Cloud through our on Prem Exchange.

I added all EOP Servers to Host based Relay from: Office 365 URLs and IP address ranges - Microsoft 365 Enterprise | Microsoft Docs

The Mails still get Greylisted.

What is going on here?

Any solution to this?

Alternative i Would like to NAT from an alternative external IP directly to my Exchange, but it is impossible to get NAT SMTP beside to MTA mode working.

This thread was automatically locked due to age.

Parents

0 Vivek Jagad over 2 years ago

Hello Alexander Liebert1,

Thank you for reaching out to the community, the current version of the SFOS is already declared EoL

Kindly update the firmware and see if the issue still persist !!

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Alexander Liebert1 over 2 years ago in reply to Vivek Jagad

Ok, we updatet our Firewall to SFOS 19.0 GA

The problem still occours.

I Added the Exchange Online ip Adresses as allowed Hosts, and the Mails still get greylisted.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to Alexander Liebert1

In my experience, Greylisting is a old feature with little to none real value anymore. It will most likely not stop any kind of campaigns nowadays. SFOS officially do not support a M365 setup anymore due the lack of possibilities to restrict the sending of domains (this could be a potential security problem, as SFOS/UTM does not check, who is sending the email).

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni over 2 years ago in reply to Alexander Liebert1

In my experience, Greylisting is a old feature with little to none real value anymore. It will most likely not stop any kind of campaigns nowadays. SFOS officially do not support a M365 setup anymore due the lack of possibilities to restrict the sending of domains (this could be a potential security problem, as SFOS/UTM does not check, who is sending the email).

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Alexander Liebert1 over 2 years ago in reply to LuCar Toni

asside from that, it should work.

And if M365 is not supported, why do the KB Artikles still get updatet?

https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/HowToArticles/EmailMicrosoftO365Setup/index.html
Cancel
Vote Up 0 Vote Down

Cancel