I am receiving the same error message as above. I appear to only be getting the message when the sender is sending me an attachment. Any ideas on how to correct this?

Thanks,

Nic

If the Blocker is the one terminating the connection there should be a log as to why it decided to do so. Hopefully finding the transaction in your logs regarding the connection that's being dropped would give you a good starting point. If it is attachment related, I would look into the antivirus logs to see if it is being rejected by the Sophos scan due to potential virus payload. Otherwise, if the sender is receiving a bounce message, the contents of the bounce may give us some insight as to what may be going on.

Is there a place in the blocker that limits the size of attachments? The bounceback said something about the message being to big or the receivers mailbox being full. Both of these are set correctly on the server. Any ideas?

Thanks,

Nic

You can limit the size of incoming mails in the Mail Flow Policy. The MFP is attached to a Sender Group (SG) in the Host Access Table (HAT). Therefore, you have to find out in which SG the sender will have a match (mail_logs will give you a helping hand doing this). The SGs are first match out: the match is based on the SBRS or the Sender address.

Cheers,

Edgar