Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 25 subscribers
  • Views 29086 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

MTA mode

SergejsAkantjevs

Hello!

I faced the problem with outlook configuration to use external mail servers for sending mail. External mail server requires authentication and use TLS (port 587).

All mails goes from outlook to XG and hangs in mail spool with ststus queued. After some time status became failed (destination unreachable).

If I configured the same external mail server to sent notifications from XG, it works fine.

XG is configured in MTA mode.



This thread was automatically locked due to age.
  • 0

    Serge,

    if you do not host an internal Mail Server, switch to legacy mode and use Email Client Template to scan and protect inbound/outbound emails.

    Regards

  • 0 in reply to lferrara

    Internal mail server I'm using too.

  • 0 in reply to SergejsAkantjevs

    Serge,

    can you share screenshots of your configuration?

    Thanks

  • 0 in reply to lferrara

    If need some additional/other configuration screen shots. Please ask...

  • 0 in reply to SergejsAkantjevs

    So it should be good. As I know, make sure that XG is sending email and it does not use another email relay.

    Also can you share the MTA settings under Email Protection menu?

    Also did you check the logs from advanced shell?

    cat /var/tslog/awarrenmta.log

    Thanks.

  • 0 in reply to lferrara

    There is no any another relay. Without XG mail goes perfectly.

    Yes I check log in advanced shell. But they didn't say much to me.

  • 0 in reply to SergejsAkantjevs

    The log shows internal host (=exchange) trying to send mail directly to port 25 remote server.

    Is your internal server configured to use XG as smart host?

  • 0 in reply to sixteen again

    In this particular case I'm not using internal mail server. My outlook client is configured to send mails through public accessable cloud mail server.

  • 0 in reply to SergejsAkantjevs

    Detailed debug log of MTA from CLI:

    SFV2C4_SO01_SFOS 16.05.2 MR-2# service awarrenmta:debug -d -s nosync
    200 OK
    SFV2C4_SO01_SFOS 16.05.2 MR-2# tail -f /log/awarrenmta.log
    MESSAGE   Mar 28 09:02:21 [4145960704]: calculate_max_storage_size: max storage size = 26435108864, min free size = 528702177
    MESSAGE   Mar 28 09:02:21 [4145960704]: look_into_cache_storage: finished loding mails. used space = 3060,attachement size = 0, mail count = 1
    ERROR     Mar 28 09:02:21 [4145960704]: Mail pickup directory already exist
    MESSAGE   Mar 28 09:02:21 [4145960704]: awarrenmta is running as root. This can be dangerous.Please provide valid 'User' and 'Group' in config file
    MESSAGE   Mar 28 09:02:21 [4145960704]: Daemon initialization complete
    MESSAGE   Mar 28 09:02:21 [3876129600]: AV Client,DNS Client, CTIPD started successfully
    ERROR     Mar 28 09:02:21 [3876129600]: ct_do_work: write failed: Connection refused
    ERROR     Mar 28 09:02:21 [3876129600]: scan_file_for_virus(): connect_to_av_server() failed
    ERROR     Mar 28 09:02:21 [0x20000001]: VirusScan: Failed for Session 20000001
    MESSAGE   Mar 28 09:53:32 [4145960704]: Toggling log level to: INFO
    MESSAGE   Mar 28 09:54:11 [3876657984]: Firewall Info: [client fd: 26 fwid: 5 connid: 890804736 uid: 0 gid: 0 sport: 2752 ]
    MESSAGE   Mar 28 09:54:11 [0x20000003]: New SMTP Session Initialized 172.16.0.100:49162 ==> 194.152.32.10:587
    INFO      Mar 28 09:54:11 [0x20000003]: Response: 220 Sophos ESMTP ready
    INFO      Mar 28 09:54:11 [0x20000003]: Request: 'EHLO TANGO'
    INFO      Mar 28 09:54:11 [0x20000003]: Response: 250-Sophos Hello TANGO [172.16.0.100] 250 STARTTLS
    INFO      Mar 28 09:54:11 [0x20000003]: Request: 'STARTTLS'
    INFO      Mar 28 09:54:11 [0x20000003]: Response: 220 Ready to start TLS
    ERROR     Mar 28 09:54:11 [0x20000003]: read_client_hello: recv() failed for Resource temporarily unavailable.
    INFO      Mar 28 09:54:11 [0x20000003]: h-ver '0' , chel-ver '0'
    ERROR     Mar 28 09:54:11 [0x20000003]: Still didn't get enough data to read client hello
    INFO      Mar 28 09:54:11 [0x20000003]: valid client hello
    INFO      Mar 28 09:54:11 [0x20000003]: h-ver '5' , chel-ver '5'
    INFO      Mar 28 09:54:11 [0x20000003]: initializing ssl session with ss client ctx
    INFO      Mar 28 09:54:11 [0x20000003]: SSL session established with client: '172.16.0.100'
    INFO      Mar 28 09:54:12 [0x20000003]: Request: 'HELO TANGO'
    INFO      Mar 28 09:54:12 [0x20000003]: Response: 250 Sophos Hello TANGO [172.16.0.100]
    INFO      Mar 28 09:54:12 [0x20000003]: Request: 'MAIL FROM: <stln@inbox.lv>'
    INFO      Mar 28 09:54:12 [3876129600]: Profile 'Mails' is configured for domain 'stln@inbox.lv'.
    INFO      Mar 28 09:54:12 [0x20000003]: Response: 250 OK
    INFO      Mar 28 09:54:12 [0x20000003]: Request: 'RCPT TO: <test.stln@gmail.com>'
    INFO      Mar 28 09:54:12 [3876129600]: Profile is not configured for 'test.stln@gmail.com'
    INFO      Mar 28 09:54:12 [0x20000003]: Response: 250 OK
    INFO      Mar 28 09:54:12 [0x20000003]: Request: 'DATA'
    INFO      Mar 28 09:54:12 [0x20000003]: Response: 354
    INFO      Mar 28 09:54:12 [3876129600]: header[0] = 'From: "INBOX" <stln@inbox.lv>'
    INFO      Mar 28 09:54:12 [3876129600]: header[1] = 'To: <test.stln@gmail.com>'
    INFO      Mar 28 09:54:12 [3876129600]: header[2] = 'Subject: test 2'
    INFO      Mar 28 09:54:12 [3876129600]: header[3] = 'Date: Tue, 28 Mar 2017 09:54:12 +0300'
    INFO      Mar 28 09:54:12 [3876129600]: header[4] = 'Message-ID: <000001d2a790$1c5b2430$55116c90$@lv>'
    INFO      Mar 28 09:54:12 [3876129600]: header[5] = 'MIME-Version: 1.0'
    INFO      Mar 28 09:54:12 [3876129600]: header[6]= 'Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01D2A7A9.41A85C30"'
    INFO      Mar 28 09:54:12 [3876129600]: header[7] = 'X-Mailer: Microsoft Office Outlook 12.0'
    INFO      Mar 28 09:54:12 [3876129600]: header[8]= 'Thread-Index: AdKnkBrSEpHaV1kxQ6G2cP8CgTqE6A=='
    INFO      Mar 28 09:54:12 [3876129600]: header[9] = 'Content-Language: en-us'
    INFO      Mar 28 09:54:12 [3876129600]: header[10] = 'x-cr-hashedpuzzle: AFVH Absl A0DS BLWz B7XM CGjT C9lJ Emh8 E0tw FHh3 Fc8h GB8v GpLO G+qS HDYJ HO2d;1;dABlAHMAdAAuAHMAdABsAG4AQABnAG0AYQBpAGwALgBjAG8AbQA=;Sosha1_v1;7;{BFFF52DF-21DE-4DD1-A622-C3CD880BE851};cwB0AGwAbgBAAGkAbgBiAG8AeAAuAGwAdgA=;Tue, 28 Mar 2017 06:54:11 GMT;dABlAHMAdAAgADIA'
    INFO      Mar 28 09:54:12 [3876129600]: header[11] = 'x-cr-puzzleid: {BFFF52DF-21DE-4DD1-A622-C3CD880BE851}'
    INFO      Mar 28 09:54:12 [3876129600]: header[12] = ''
    INFO      Mar 28 09:54:12 [3876129600]: header[0] = 'Content-Type: text/plain; charset="us-ascii"'
    INFO      Mar 28 09:54:12 [3876129600]: header[1] = 'Content-Transfer-Encoding: 7bit'
    INFO      Mar 28 09:54:12 [3876129600]: header[2] = ''
    INFO      Mar 28 09:54:12 [0x20000003]: Response: 250 Queued id=%p
    INFO      Mar 28 09:54:12 [0x20000003]: Response: 88888888
    INFO      Mar 28 09:54:12 [3876129600]: Profile 'Mails' is configured for domain 'stln@inbox.lv'.
    INFO      Mar 28 09:54:12 [3876129600]: Profile is not configured for 'test.stln@gmail.com'
    INFO      Mar 28 09:54:12 [3876129600]: header[0] = 'From: "INBOX" <stln@inbox.lv>'
    INFO      Mar 28 09:54:12 [3876129600]: header[1] = 'To: <test.stln@gmail.com>'
    INFO      Mar 28 09:54:12 [3876129600]: header[2] = 'Subject: test 2'
    INFO      Mar 28 09:54:12 [3876129600]: header[3] = 'Date: Tue, 28 Mar 2017 09:54:12 +0300'
    INFO      Mar 28 09:54:12 [3876129600]: header[4] = 'Message-ID: <000001d2a790$1c5b2430$55116c90$@lv>'
    INFO      Mar 28 09:54:12 [3876129600]: header[5] = 'MIME-Version: 1.0'
    INFO      Mar 28 09:54:12 [3876129600]: header[6]= 'Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01D2A7A9.41A85C30"'
    INFO      Mar 28 09:54:12 [3876129600]: header[7] = 'X-Mailer: Microsoft Office Outlook 12.0'
    INFO      Mar 28 09:54:12 [3876129600]: header[8]= 'Thread-Index: AdKnkBrSEpHaV1kxQ6G2cP8CgTqE6A=='
    INFO      Mar 28 09:54:12 [3876129600]: header[9] = 'Content-Language: en-us'
    INFO      Mar 28 09:54:12 [3876129600]: header[10] = 'x-cr-hashedpuzzle: AFVH Absl A0DS BLWz B7XM CGjT C9lJ Emh8 E0tw FHh3 Fc8h GB8v GpLO G+qS HDYJ HO2d;1;dABlAHMAdAAuAHMAdABsAG4AQABnAG0AYQBpAGwALgBjAG8AbQA=;Sosha1_v1;7;{BFFF52DF-21DE-4DD1-A622-C3CD880BE851};cwB0AGwAbgBAAGkAbgBiAG8AeAAuAGwAdgA=;Tue, 28 Mar 2017 06:54:11 GMT;dABlAHMAdAAgADIA'
    INFO      Mar 28 09:54:12 [3876129600]: header[11] = 'x-cr-puzzleid: {BFFF52DF-21DE-4DD1-A622-C3CD880BE851}'
    INFO      Mar 28 09:54:12 [3876129600]: header[12] = ''
    INFO      Mar 28 09:54:12 [3876129600]: header[0] = 'Content-Type: text/plain; charset="us-ascii"'
    INFO      Mar 28 09:54:12 [3876129600]: header[1] = 'Content-Transfer-Encoding: 7bit'
    INFO      Mar 28 09:54:12 [3876129600]: header[2] = ''
    INFO      Mar 28 09:54:12 [3876129600]: header[0] = 'Content-Type: text/html; charset="us-ascii"'
    INFO      Mar 28 09:54:12 [3876129600]: header[1] = 'Content-Transfer-Encoding: quoted-printable'
    INFO      Mar 28 09:54:12 [3876129600]: header[2] = ''
    INFO      Mar 28 09:54:12 [0x20000005]: message id 'c0000001-1490684052' for current mail
    INFO      Mar 28 09:54:12 [3876129600]: matchpolicy: sender profile is avail
    INFO      Mar 28 09:54:12 [0x20000005]: SPAM Check Result:
    'X-CTCH-PVer: 0000001
    X-CTCH-Spam: Unknown
    X-CTCH-VOD: Unknown
    X-CTCH-Flags: 0
    X-CTCH-RefID: str=0001.0A0C0205.58DA0895.0047,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
    X-CTCH-Score: 0.000
    X-CTCH-ScoreCust: 0.000
    X-CTCH-Rules:'
    INFO      Mar 28 09:54:12 [3876129600]: matchpolicy: sender profile is avail
    INFO      Mar 28 09:54:12 [0x20000005]: SCANCONTENT AV: 4 TFT: 0 DLP: 0 SANDSTORM: 0
    INFO      Mar 28 09:54:12 [3876129600]: connect_to_av_server(): connected to av server
    INFO      Mar 28 09:54:12 [0x20000005]: handle_clean(): Antivirus Scanned result: Clean -1
    INFO      Mar 28 09:54:12 [0x20000005]: handle_clean(): Antivirus Scanned result: Clean -1
    INFO      Mar 28 09:54:12 [3876129600]: matchpolicy: sender profile is avail
    MESSAGE   Mar 28 09:54:12 [0x20000005]: [0x200000050] FROM: stln@inbox.lv , TO: test.stln@gmail.com
    INFO      Mar 28 09:54:12 [3876129600]: got pref 5
    INFO      Mar 28 09:54:12 [3876129600]: connecting to server
    INFO      Mar 28 09:54:12 [3876129600]: Relate with Firewall rule id: 5 mtuple flags: 2
    MESSAGE   Mar 28 09:54:12 [0x20000005]: Mail Transaction Started from 172.16.0.100:49162 to 64.233.163.27:25 (fdid:29)
    INFO      Mar 28 09:54:12 [0x20000005]: Connecting to server ...
    INFO      Mar 28 09:54:14 [0x20000004]: Request: 'QUIT'
    INFO      Mar 28 09:54:14 [0x20000004]: Response: 221 Sophos closing connection
    ERROR     Mar 28 09:54:27 [0x20000005]: Connection ('64.233.163.27:25') failed. client: '172.16.0.100:49162'
    INFO      Mar 28 09:54:27 [3876129600]: got pref 10
    INFO      Mar 28 09:54:27 [3876129600]: connecting to server
    INFO      Mar 28 09:54:27 [3876129600]: Relate with Firewall rule id: 5 mtuple flags: 2
    MESSAGE   Mar 28 09:54:27 [0x20000005]: Mail Transaction Started from 172.16.0.100:49162 to 64.233.189.27:25 (fdid:26)
    INFO      Mar 28 09:54:27 [0x20000005]: Connecting to server ...
    ERROR     Mar 28 09:54:42 [0x20000005]: Connection ('64.233.189.27:25') failed. client: '172.16.0.100:49162'
    INFO      Mar 28 09:54:42 [3876129600]: got pref 20
    INFO      Mar 28 09:54:42 [3876129600]: connecting to server
    INFO      Mar 28 09:54:42 [3876129600]: Relate with Firewall rule id: 5 mtuple flags: 2
    MESSAGE   Mar 28 09:54:42 [0x20000005]: Mail Transaction Started from 172.16.0.100:49162 to 74.125.28.27:25 (fdid:26)
    INFO      Mar 28 09:54:42 [0x20000005]: Connecting to server ...
    ERROR     Mar 28 09:54:57 [0x20000005]: Connection ('74.125.28.27:25') failed. client: '172.16.0.100:49162'
    INFO      Mar 28 09:54:57 [3876129600]: got pref 30
    INFO      Mar 28 09:54:57 [3876129600]: connecting to server
    INFO      Mar 28 09:54:57 [3876129600]: Relate with Firewall rule id: 5 mtuple flags: 2
    MESSAGE   Mar 28 09:54:57 [0x20000005]: Mail Transaction Started from 172.16.0.100:49162 to 173.194.67.27:25 (fdid:26)
    INFO      Mar 28 09:54:57 [0x20000005]: Connecting to server ...
    ERROR     Mar 28 09:55:12 [0x20000005]: Connection ('173.194.67.27:25') failed. client: '172.16.0.100:49162'
    INFO      Mar 28 09:55:12 [3876129600]: got pref 40
    INFO      Mar 28 09:55:12 [3876129600]: connecting to server
    INFO      Mar 28 09:55:12 [3876129600]: Relate with Firewall rule id: 5 mtuple flags: 2
    MESSAGE   Mar 28 09:55:12 [0x20000005]: Mail Transaction Started from 172.16.0.100:49162 to 64.233.191.27:25 (fdid:26)
    INFO      Mar 28 09:55:12 [0x20000005]: Connecting to server ...
    ERROR     Mar 28 09:55:27 [0x20000005]: Connection ('64.233.191.27:25') failed. client: '172.16.0.100:49162'
    ERROR     Mar 28 09:55:27 [3876129600]: Failed to route through MX falling back to orig dst 0
    INFO      Mar 28 09:55:27 [3876129600]: connecting to server
    INFO      Mar 28 09:55:27 [3876129600]: Relate with Firewall rule id: 5 mtuple flags: 2
    MESSAGE   Mar 28 09:55:27 [0x20000005]: Mail Transaction Started from 172.16.0.100:49162 to 194.152.32.10:25 (fdid:26)
    INFO      Mar 28 09:55:27 [0x20000005]: Connecting to server ...
    ERROR     Mar 28 09:55:43 [0x20000005]: Connection ('194.152.32.10:25') failed. client: '172.16.0.100:49162'
    INFO      Mar 28 09:55:43 [0x20000005]: Mail sending is failed 1 times

    Unfortunatelly, it says nothing for me.