Domain Security with smart host


  • Hi,

    We want to configure Domain Security but from my understanding both organizations have to by-pass their smart host (anti-spam gateway) for this to work. Is my understanding correct? 

    How do you do that? If you use MX record you will automatically arrive at the other side's anti-spam gateway. Should you create a separate internal DNS record for the MX record? 

    Or is it not recommended to use Domain Security and are there better options in most anti-spam gateway solutions?

    Thanks for the help!

    Kind regards

    Mittwoch, 13. Juni 2018 13:32

Alle Antworten

  • Hi,

    The mail flow with Smart Host is like:
    Inbound: Internet ---> Smart Host ---> Your Exchange Server.
    Outbound: Your Exchange Server ---> Smart Host ---> Internet.

    The MX record will point to Smart Host, then the message from internet use MX record to find the destination.
    For Outbound message, we need to create a send connector on Exchange, and use Smart Host as next hop.

    For internal mail flow, Yes, we can create a special connector and configure it with domain name, and use DNS to route message.
    Also, we can do it with some special external domain, and configure it to use external DNS record to route message.

    Best Regards,
    Allen Wang

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact

    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Donnerstag, 14. Juni 2018 07:52