none
Domain Security with smart host

    Frage

  • Hi,

    We want to configure Domain Security but from my understanding both organizations have to by-pass their smart host (anti-spam gateway) for this to work. Is my understanding correct? 

    How do you do that? If you use MX record you will automatically arrive at the other side's anti-spam gateway. Should you create a separate internal DNS record for the MX record? 

    Or is it not recommended to use Domain Security and are there better options in most anti-spam gateway solutions?

    Thanks for the help!

    Kind regards

    Mittwoch, 13. Juni 2018 13:32

Alle Antworten

  • Hi,

    The mail flow with Smart Host is like:
    Inbound: Internet ---> Smart Host ---> Your Exchange Server.
    Outbound: Your Exchange Server ---> Smart Host ---> Internet.

    The MX record will point to Smart Host, then the message from internet use MX record to find the destination.
    For Outbound message, we need to create a send connector on Exchange, and use Smart Host as next hop.

    For internal mail flow, Yes, we can create a special connector and configure it with domain name, and use DNS to route message.
    Also, we can do it with some special external domain, and configure it to use external DNS record to route message.

    Best Regards,
    Allen Wang


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Donnerstag, 14. Juni 2018 07:52
    Moderator
  • Hi,

    Any further help we can do for you?
    If it's solved, would you please post the solution here to share it with us?

    Also, please free to mark the useful reply as answer. Thanks for your cooperation.

    Best Regards,
    Allen Wang


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Montag, 25. Juni 2018 02:08
    Moderator
  • Hi Allen,

    I think you misunderstood my question. I'm specifically looking to set up TLS with a specific domain of a partner company. I see that Domain Security is an option but from what I understand it does not work if mail is routed through a smart host. 

    So I am wondering what the best practice is for setting up TLS with a partner organisation. 

    Montag, 25. Juni 2018 09:31