This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG imap/s and pop3/s incoming scanned

This morning I decided it was time to do something about the junk mail.

I think Billybob wrote a long post on this subject.

I found the pop3/s and imap/s are unable to block/quarantine messages. Further I created a list but found that is only usable in SMTP/s rules.

Yes, I could build a mail server and use all the smtp functions, but I am not sure I really want to. Would be good to learn, but..... shouldn't have to.

Also having trouble identifying how the mail rules are applied.

I can put in place smtp outgoing rules to stop any bad guy takeover of a machine and using it for spam.

Sad.

This thread was automatically locked due to age.

Parents

0 lferrara over 8 years ago

Rfcat_vk,

I am using POP3s and IMAPs scanning since v15.

I can say that you can block only malware and mark email as SPAM by changing the headers. No other actions are allowed.

In order to create a email filter, you can use the email clients template from Business Application Rule and then adjust the Spam filters under Email > Policies.

I opened a feature request to have more actions/filters for IMAP/POP3:

http://ideas.sophos.com/forums/330219-sophos-xg-firewall/suggestions/10614834-pop3-imap-more-scanning-option

Also the POP3s filters stucks most of the time and email are not even downloaded:

https://community.sophos.com/products/xg-firewall/v16beta/f/sfos-v16-beta-issues-bugs/79793/pop3s-email-scanning---email-are-not-downloaded-possible-bug

I have to try again because a bug has been fixed by v16.05 MR1.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 8 years ago in reply to lferrara

Hi Luk,

yes, I have been using imap/s and pop3/s scanning since v15, but this morning I tried to tighten the rules so I don't get so much junk mail.

I know what caused the junk mail, but it is too late to fix the source. A hotel I was staying at appears to have had their email compromised because i can pin the spam start date to my stay at the hotel and registration.

data control list can only be used in smtp scanning, not much use for pop3 or imap users.

Even when you setup mail policy, you still cannot reject or quarantine imap/s or pop3/s messages they are all passed through.

You have to change the message subject and then setup a filter on your mail client, not very efficient or user friendly.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to rfcat_vk

We have to wait until Sophos decides to add more features and security filters on IMAP/POP3.

It seems that it does not have high priority.

Let's vote the feature request!

[:S]
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 8 years ago in reply to rfcat_vk

We have to wait until Sophos decides to add more features and security filters on IMAP/POP3.

It seems that it does not have high priority.

Let's vote the feature request!

[:S]
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 JanSadlik over 5 years ago in reply to lferrara

Hi,

The years are flying and the POP3 / IMAP SPAM REJECT function is not there. If XG is able to identify spam in POP3 / IMAP protocols, adding REJECT should not be that difficult. When will we see this? v19? v20?

Regards
Jan
Cancel
Vote Up 0 Vote Down

Cancel