topic Re: SMTP traffic rejected from in Firewall and Security Management

SMTP traffic rejected from

Mike_Sab — Thu, 19 Aug 2021 10:46:34 GMT

We are on CheckPoint R77.30 (please do not ask about upgrade, we are in process of demising these firewalls) and have a SMTP rule created in 'Security' and 'Application' yet the smtp traffic is denied. What is happening?

Connectivity between gateway and the smtp server is fine, I can telnet in port 25.

Why is this happening?

Re: SMTP traffic rejected from

_Val_ — Thu, 19 Aug 2021 13:01:31 GMT

Which one of the rules you are showing is rule 39? Also, would it be possible that you still have your old SMTP server in the rule 39 and SMTP proxy config?

Re: SMTP traffic rejected from

Mike_Sab — Wed, 01 Sep 2021 08:30:52 GMT

Even though the old smtp exists, I added explicit rule for this src and dst, same error.

I can confirm the SMTP proxy config reflects the new smtp servers.

Its' strange, I made some minor changes (added new SMTP server to old SMTP rule), this doesn't get invoked but a rule for source subnet. The rule is

Source: 192.168.10.0

Dst: any

Services: Any

Action: Accept

The smtp traffic hits this rule and STILL it is dropped. It is complaining about "Failed to connect to SMTP server", I am out of ideas.

Re: SMTP traffic rejected from

the_rock — Wed, 01 Sep 2021 11:18:25 GMT

Hey Mike,

Send me a message offline, lets do remote session when convenient, we can try figure this out if the issue is still ongoing. Sounds like somethin simple might be missing.