Forum Discussion

WilliamLin's avatar
WilliamLin
Icon for Nimbostratus rankNimbostratus
Sep 06, 2022

ASM secheduled reports "SMTP Error: The following recipients failed"

Hello everyone, I want to use BIGIP ASM  "Secheduled Reports" to send attack report to my enterprise email. But when I use "send now" button to send mail, somehow it just keep getting the error mess...
  • WilliamLin's avatar
    WilliamLin
    Sep 07, 2022

    Thanks for your reply !!

    It's really helpful to let me think about the error may not cause by BIG-IP it self.

    Although in pcap the SMTP server reponsed status 220 and 250, which should mean the request was successed. But the connection terminated at SMTP RCPT phase.

    So, I searched SIEM logs to find out which device cut the connection down. Eventually it comes firewall between DMZ and Intranet dropped the request. Our firewall admin only allowed BIGIP connect SMTP port 465, which our SMTP serve at port 25. It seems BIGIP "Test Connection" doesn't base on port. (And I really have no idea why L4 firewall didn't drop the connection at the first time SMTP handshake in disallow port.)

    Secheduled Reports worked fine after changed the firewall allowing WAF to SMTP server port 25.

    Thanks again!