Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 426
  • Last Modified:

Receive connector to only accept mail from Office 365

Hello Experts,

I have a non-profit customer that I'm currently setting up a hybrid configuration for. We recently got them set up with a new server with Exchange 2016. They used Office 365 for their second location that is now combined with the first and on their local domain. During the first part of the migration I changed over their MX records to look directly at their external IP for a standard configuration, but the amount of spam they were getting was ridiculous.  So, last night I changed their MX record to look to Office 365 (they don't mind still paying their minuscule non-profit pricing for O365 just for the spam filtering) and configured the connectors on O365 to forward the mail onto the on-prem server. That all works fine, but they are still receiving a large amount of spam. I'm not seeing any of those messages being passed through O365, so i'm assuming it's all being sent to their outside IP address and the Exchange server is still delivering them. My question is how do I set up the receive connector so that it only accepts outside mail from O365. I've set up internal spam filters before where you just have it only accept mail from a single IP, but Microsoft has so many IPs, it doesn't look like I can do that. Any suggestions would be great!

Best,
Taylor
0
Taylor
Asked:
Taylor
2 Solutions
 
Peter HutchisonSenior Network Systems SpecialistCommented:
Yes, the only way to do it is to configure your receive connectors with a list of IPs.
addresses or IP address ranges on the network settings of the receive connector. Microsoft have published a complete list here:

Exchange Online Protection IP addresses:
https://technet.microsoft.com/en-us/library/dn163583(v=exchg.150).aspx
2
 
Jian An LimSolutions ArchitectCommented:
OR logon to exchange online and run the following command

Get-HybridMailflowDatacenterIPs | select DatacenterIPs

then you can use this to put on your receive connector easily
1
 
TaylorIT EngineerAuthor Commented:
Great! Thanks guys. I'll give this a try and let you know. Sorry I didn't respond sooner Peter, I never received a notification for you comment.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now