topic Re: Check Point sends out MAILER-DAEMON in General Topics

Check Point sends out MAILER-DAEMON

El_Fernandez — Fri, 26 Apr 2019 08:38:10 GMT

Hi everyone,

I would like to ask why does the Security Gateway sends out this kind of email to the internal users.

and i also checked the postfix logs of the email server and gives me this info

is there a possibility that the security gateway is compromised? or if anybody here can interpret what this logs and mail means its really a big help.

Re: Check Point sends out MAILER-DAEMON

PhoneBoy — Mon, 29 Apr 2019 22:26:12 GMT

What Software Blades do you have enabled on this gateway?

Re: Check Point sends out MAILER-DAEMON

Vladimir — Tue, 30 Apr 2019 02:13:19 GMT

I'd check it for being an open relay just in case:

https://mxtoolbox.com/diagnostic.aspx

Re: Check Point sends out MAILER-DAEMON

El_Fernandez — Fri, 03 May 2019 02:36:40 GMT

Blades that are related to emails are Anti-Spam, Threat Emulation and Threat Extraction. Other Software Blades that are open are APPCtl , URLF, IPS, AV, AB, Identity Awareness.

Also i have raised this to TAC and they told me that i am experiencing this sk110813. Now that i know that is only sends this kind of email when the email is not delivered but i need more explanation or verification that the Security Gateway is not compromised or what are other factors that causes this. eg. Compromised Mail Server or PC