Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 2770 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG Firewall v17 Email protection configuration not receiving inbound email

chrisnyork

I have configured Anti-spam protection to sophos xg firewall but when I'm testing the email. All I see in mail logs is rejected saying is relay not permitted for [public IP] 



This thread was automatically locked due to age.
Parents
  • 0

    Hello  ,

    Thank you for reaching out to the community, v17 is declared End-of-Life (EoL), and "Relay not permitted" for that try Added LAN subnet in the Host based relay Email > Relay settings > Host based relay

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Global Support & Services 


    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to Vivek Jagad

    Add to Vivek's post, the direction of the email is very important. If outbound emails, that would be in the "Host based relay" entries as per Vivek. But if its inbound emails, then it depends on the "Upstream host" entries. Normally it should have "Any" but for example if you have a smarthost receiving the emails before it gets to the XG, you will have the smarthost's IP address there so that it tells the XG to only receive emails from this host to make it secure.

Reply
  • 0 in reply to Vivek Jagad

    Add to Vivek's post, the direction of the email is very important. If outbound emails, that would be in the "Host based relay" entries as per Vivek. But if its inbound emails, then it depends on the "Upstream host" entries. Normally it should have "Any" but for example if you have a smarthost receiving the emails before it gets to the XG, you will have the smarthost's IP address there so that it tells the XG to only receive emails from this host to make it secure.

Children
No Data
Unfiltered HTML