Sophos Firewall

Discussions XG Firewall rule exclusions

Sophos Firewall requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 7 replies
Subscribers 27 subscribers
Views 1067 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG Firewall rule exclusions

666Trooper666 over 2 years ago

Hi,

First time poster, long time reader! Can someone please let a newby know if I need to specify all or just one within the XG Firewall rule exclusions?

Thanks!

This thread was automatically locked due to age.

Top Replies

rfcat_vk over 2 years ago in reply to 666Trooper666 +2 verified

Try creating a seperate rule for each server. ian

0 rfcat_vk over 2 years ago

Hi,

what are you trying to exclude?
ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 666Trooper666 over 2 years ago

Hi @rfcat_vk,

Just one server in this block all other for port 25.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 2 years ago in reply to 666Trooper666

Hi,

by default everything is blocked. You have to create rules to allow traffic out.

an

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 666Trooper666 over 2 years ago

OK thanks. It must be our routes then, as it is in the Allow Port 25 rule, both the Source Zone for the Device and the Source Device... Rule #1
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 2 years ago in reply to 666Trooper666

Source zone would be LAN, source network could be your mail server FQDN or IP address.

Ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 666Trooper666 over 2 years ago

Yes, that is all set. The other server in the Source Zone/Device works, just the other server in a different zone is having trouble. It might not be the Rule/routing as I can see the server be allowed via port 25 in the XG log viewer, but when I telnet from the server to EXO Port 25 I still get no response.
Cancel
Vote Up 0 Vote Down

Cancel
+1 rfcat_vk over 2 years ago in reply to 666Trooper666

Try creating a seperate rule for each server.

ian

XG115W - v19.5.1 mr-1 - Home

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +2 Vote Down

Cancel