Check Point sends out MAILER-DAEMON

[El_Fernandez]

Hi everyone,

I would like to ask why does the Security Gateway sends out this kind of email to the internal users.

 

and i also checked the postfix logs of the email server and gives me this info

is there a possibility that the security gateway is compromised? or if anybody here can interpret what this logs and mail means its really a big help.

[PhoneBoy]

What Software Blades do you have enabled on this gateway?

[El_Fernandez]

Blades that are related to emails are Anti-Spam, Threat Emulation and Threat Extraction. Other Software Blades that are open are APPCtl , URLF, IPS, AV, AB, Identity Awareness.

Also i have raised this to TAC and they told me that i am experiencing this sk110813. Now that i know that is only sends this kind of email when the email is not delivered but i need more explanation or verification that the Security Gateway is not compromised or what are other factors that causes this. eg. Compromised Mail Server or PC

[Vladimir]

I'd check it for being an open relay just in case:

https://mxtoolbox.com/diagnostic.aspx