Solved

Using Connection Filter in Office 365/Hosted Exchange in conjunction with AppRiver

Posted on 2014-02-28
3
886 Views
Last Modified: 2014-03-07
Hello experts.

We use hosted exchange in office 365 in conjunction with AppRiver for spam protection.  All incoming emails are supposed to go through appriver before being approved and then forwarded to office365/exchange.  

What has been occurring is that some spammers are sending directly to office365 thereby bypassing our spam protection altogether.  I looked at some recommendations from AppRiver and in theory all I need to do is add a list of their IP Addresses and Networks to the 'IP Allow List' under Exchange--Protection--Connection Filter, and then block everything else (if email is received from an IP on both lists, it will be allowed).  

"IP addresses must be specified in the format nnn.nnn.nnn.nnn where nnn is a number from 0 to 255. You can also specify Classless Inter-Domain Routing (CIDR) ranges in the format nnn.nnn.nnn.nnn/rr where rr is a number from 24 to 32. IPv6 address can be input but messages sent from these addresses will not be accepted by the service. "

Because of the CIDR Range limits listed above, I am unsure how to go about blocking large ranges of addresses, or if I am even aproaching this problem in the right way(I have only been working with Office365 for about 4 weeks).

Thanks in advance.
0
Comment
Question by:orther
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 41

Accepted Solution

by:
Adam Brown earned 500 total points
ID: 39895937
What you need to do is modify your default Receive connector so that it will only accept email from App-River. Since you're on office 365, you can do this by going to Exchange->Mail Flow -> Connectors then you can create a new Receive connector. Click the + sign, then Fill out the wizard that pops up. Enter * for the Sender Domains then enter the IP Address range for App-River (should be able to get this from their website somewhere) under Sender IP Addresses. Give the connector a name and leave everything else default. This will make sure that the only IP addresses that are able to send to your tenant are from App-River, so you won't have to have a huge list of blocked IPs, just a list of allowed ones.
0
 

Author Comment

by:orther
ID: 39896023
"The Hybrid Mail Flow inbound connector was created when hybrid mail flow was configured.  This connector cannot be modified."

This is in the comment box of the only inbound connector I see currently.  Will that be a problem?
0
 
LVL 41

Expert Comment

by:Adam Brown
ID: 39896037
No. Just add another connector and set it up accordingly, but make sure your On-prem IPs are in Sender IPs as well.
0

Featured Post

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question