Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 27 subscribers
  • Views 13827 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall drops SMTP Connections from its own WAN interface.

Ulrich C. Thiess

The Firewall works in MTA mode.

In the firewall log i found many drops of connection from the external firewall wan port to many different smtp hosts.

I created a rule for this, but it won't work.

But it seems that everything is working???? What exactly does the firewall do?

 

Thanks.



This thread was automatically locked due to age.
Parents
  • 0

    Hi Ulrich,

    Could you provide us the dumps for this issue as per the steps mentioned below? 

    Step 1: Which port are you using, as per the logs the Port is 25. Is there a dual profile in your Outlook? 

    Step 2: Take the dump of the traffic from that system address i.e. 192.168.178.2 and the port used for the connection in console access. 

    Command :console> tcpdump 'host 192.168.178.2 and port 25

    Output: 

    Command :console> drop 'host 192.168.178.2  

    Output:

     

     

     

     

  • 0 in reply to Aditya Patel

    192.168.178.2 is the WAN Port of the firewall itself.

    The firewall wan't to make a connection to port 25.

Reply Children