does the mta relay have smtp sasl support for upstream rely?

Hey CyberA 

Please refer to the following KB articles regarding how to setup your XG in MTA mode along with Smarthost authentication.
Let me know if this helps.

Regards,

FloSupport | Community Support Engineer

Thanks for the KB articles, I tried these earlier but I can't get emails to send using the Smarthost settings. For instance the XG MTA never uses port 587 as I've defined it. The XG is accepting my email from LAN but they don't get sent to the upstream mx using the Smarthost settings.This is the problem and I'm wondering if its related to SASL, a misconfiguration or some bug.

I just want the XG to act as a relayhost sending my mail to the next-hop as defined by the Smarthost, internally all email coming from lan would be accepted on the XG over port 25 anonymously <-- this works, and then send those mails upstream to the relayhost <-- this doesn't work.

I found another thread with a similar issue: https://community.sophos.com/products/xg-firewall/f/email-protection/84921/mta-smarthost/317911#317911

I tried Administration->Notification Settings and defined my external email server with STARTTLS (SASL) and the test mail worked.

So it seems the MTA Smarthost feature is lacking the security / certificate options to use SASL and not adhering to the port as defined.

Hey CyberA 

Would it be possible to open your support access tunnel and PM me with the details so I can investigate your configuration and logs further?

Thanks,

FloSupport | Community Support Engineer

It's been confirmed SASL is not supported in XG 17-GA for use with the Smarthost function of the MTA. I've opened a feature request for consideration with a future version:

https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/32271829-add-support-for-sasl-to-the-mta-upstream-rely-or-s