IMAP/POP Scans and Relaying

Hello there,

Good day and thanks for reaching out to Sophos Community and hope you are well.

May we check if you happen to enable SMTP relay on WAN as per this doc guide: https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/HowToArticles/EmailConfigureEmailProtectionMTA/index.html#allow-and-protect-inbound-emails

Thanks for your time and patience and thank you for choosing Sophos

Cheers,

Hello there,

Good day and thanks for reaching out to Sophos Community and hope you are well.

May we check if you happen to enable SMTP relay on WAN as per this doc guide: https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/HowToArticles/EmailConfigureEmailProtectionMTA/index.html#allow-and-protect-inbound-emails

Thanks for your time and patience and thank you for choosing Sophos

Cheers,

Hello Raphael,

That option was not turned however after I turned it on, still no inbound email or log/spool messages.

The link you provided is for internal email server only, correct?  I noticed in my initial post I failed to clarify I do not have an internal mail server.  The email I use is from my ISP.

Kerry

Hello there,

Thanks for these information. does the sender receives NDR whenever the FW rule is enabled and recepient did not receive the mail? kindly share if there's any

Kindly check as well smtpd_main.log if it would have any details regarding incoming emails, kindly run this on Advance shell: 

tail -f  /log/smtpd_main.log

Also, might these be your use case/setup? https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Email/HowToArticles/EmailConfigureProtectionCloudMailServerMTA/index.html#cloud-hosted-mail-server-network-diagram

If yes, kindly try to follow the configuration steps and kindly let us know how it goes. 

Many thanks for your time and patience and thank you for choosing Sophos

Cheers,

Raphael,

Thanks for the reply.

Sender does not receive anything with FW rule enabled.

tail -f  /log/smtpd_main.log displays the following:

21601 1 queue-runner process running
21601 1 queue-runner process running
21601 1 queue-runner process running
21601 1 queue-runner process running
21601 1 queue-runner process running
21601 1 queue-runner process running
21601 1 queue-runner process running
21601 1 queue-runner process running
21601 1 queue-runner process running
21601 1 queue-runner process running

The link you provide appears to be for my own mail server in the cloud as it requires MX record change which I cannot do as it is my ISP's mail server.

I would like to relay any mail from inside my network from the XG firewall to the internet.  I also would like to scan for spam and AV any emails coming into my network via the FW first.  We use 3 different email services, local ISP, Google and Proton Mail.

Kerry