Difference between revisions of "Outbound Mail Routing"

From Hornbill
Jump to navigation Jump to search
 
(78 intermediate revisions by 8 users not shown)
Line 1: Line 1:
−
__NOTOC__[[Main Page|Home]] > [[Administration]] > [[Email Administration | Email]] > Email Domains
+
This document can now be found at its new location in the [https://docs.hornbill.com/esp-config/email/email-domains/ Hornbill Document Library].
−
==Introduction==
 
−
The Email Domain serves a number of purposes. Providing a Domain is a required part of providing email functionality within some of the Hornbill applications. Hornbill includes SMTP services to manage both inbound and outbound mail.  The Email Domain configuration lets you define which domains are accepted by the Hornbill instance and provides outbound routing modes for each domain.
 
  
−
== Email Domain List ==
+
[[file:hornbill-document-library.png|Hornbill Cloud|link=https://docs.hornbill.com/esp-config/email/email-domains/]]
−
When first viewing the Email Domains page, you are presented with a list where you can add new Email Domains, view and modify existing Email Domains, or delete existing domains.
+
<!--
  
−
* To add a new Email Domain select the option in the top right of the menu bar titled ''Add Domain''
+
{{DISPLAYTITLE:Email Domains}}
−
* To view an existing Email Domain, simply click on the domain name which is presented in the list
+
{{bluebanner|[[Main Page|Home]] > [[Administration]] > [[Email Administration | Email]] > Email Domains|[[:Category:Administration|Index]]}}
−
* To delete an existing Email Domain, select the check box next the domain you to remove and then from the option in the top right of the menu bar, select the down arrow to expose the menu and select ''Delete Selected''
+
{{IntroAndLinks|Creating and configuring an Outbound Route is a required part of providing email functionality within some of the Hornbill applications. The "Domain" is primarily concerned with facilitating the Outbound mail operation, delivering from the Hornbill instance to the outside world. There are two methods of outbound routing available to us, "Direct Outbound" or "SMTP SmartHost".|
 +
:* [[Shared_Mailboxes|Shared Mailboxes (Inbound Route)]]
 +
:* [[Email_Templates|Configuring Email Templates]]
 +
:* [[How_to_configure_OAuth2_Authentication_for_Microsoft_Office_365_Mailbox_integration|MS Office 365 integration with OAuth2]]
 +
}}
  
−
==SPF/TXT Record==
+
{{infobox|Although we have expertise around our own platform and its email routing implementation, configuration, and behaviour, we use the language associated with the POP3, IMAP4, and SMTP standards and not the specific language and/or terminology of any specific vendors' mail server interfaces or platforms.
 +
This means Hornbill's technical staff are not experts with the various mail server and firewall interfaces in use. Each organisations mail routing implementation can be unique to their organisation and it will be necessary for you to have someone internally with expertise and a working knowledge of your mail servers and firewalls within your own organisation. You should refer your technical email/network expert to this document which should provide them with sufficient information to allow the planning and configuration of email integration for your organisation.}}
 +
<br>
 +
==Creating and Managing your Outbound Routes==
 +
To create and Configure a new Outbound route, in Hornbill Administration navigate to '''Home > System > Email > Outbound Domains'''. You will find a default domain entry (live.hornbill.com) comes already configured with your instance which allows you to test aspects of the Hornbill applications while you are organizing the email configuration required in your infrastructure.
  
−
If you wish to configure “Use DNS routing” or “Use SMTP SmartHost” and the domain name this is on is not live.hornbill.com, a SPF/TXT Record must be configured.  The SPF/TXT record allows Honrbill to send to the configured domain.<div class="mw-collapsible mw-collapsed" data-collapsetext="Show Less" data-expandtext="Read More" style="width:900px">
+
* To add a new Outbound route click the plus symbol in the top right of the list.
−
(It is recommended that this is configured by a system admin to add this record to DNS).
+
* To view an existing Outbound route, simply click on the name which is presented in the list.
 +
* To delete an existing Outbound route, select the check box next the domain you wish to remove and then click the red trash can button at the top right of the list.
  
−
<div class="mw-collapsible-content">
+
===Outbound Mail Routing Details===
 +
 
 +
To successfully configure an Outbound Mail Route the following details must be completed.
 +
{{bullet1|Domain Name|The name that is used here '''must''' be a valid domain name.  For example 'mycompany.com'}}
 +
{{bullet1|Enable processing incoming mail on this route|Turnning this on will allow any email that has been sent to this domain to be processed by the SMTP service and allow it to be routed to the appropriate mailbox.}}
 +
{{bullet1|Automatically Create Address for this route when a new mailbox is created|When a new user is created a personal mailbox is created and associated with that user.  When this feature is enabled, each new user will be automatically allocated an email address using this domain name.  The Address Format can then be used to set the format of the username.}}
 +
{{bullet1|Address Format|The Address Format to be used when a new personal mailbox is created. This is only available if you have enabled the option above to automatically create addresses for this route. The formats that can be selected are based on variations of the Firstname and Lastname of the user with the exception of the LoginID.}}
 +
{{bullet1|Enable DKIM|DomainKeys Identified Mail (DKIM) is an email authentication method designed to make sure messages aren't altered in transit between the sending and recipient servers and to detect forged sender addresses in email (email spoofing), a technique often used in phishing and email spam.}}
 +
{{bullet2|DKIM Selector|A DKIM selector is specified when the private/public key pair is created when DKIM is set up for the email domain (or email sender), and it can be any arbitrary string of text}}
 +
{{bullet2|DKIM Key Size|Choose between 1024 and 2048 bits for your key size.}}
 +
:::{{infobox|Once the Email Domain has been saved, you will be presented with a DKIM Key}}
 +
{{bullet1|Outbound Routing Mode|There are two methods of outbound routing available in Hornbill, ''Use DNS Routing'' and ''Use SMTP Smart Host''.  Select the one that is most desirable to you based on the descriptions below.}}
 +
<br>
 +
 
 +
== Outbound Routing Modes ==
 +
Now that you have familiarised yourself with where and how Outbound Routing is configured in Hornbill Administration, the next step is to understand which Outbound Routing mode is most suitable for your organisation. The available modes are described below and the decision essentially comes down to what's dictated by your internal IT policies. If your policies don't limit your choice then it's simply what you prefer when it comes to maintaining this integration going forward.
 +
<br>
 +
<br>
 +
===Option 1: Direct Outbound===
 +
If you wish to use the Direct Outbound method, this quite simply involves the addition of an SPF and TXT record to your DNS server,  validating the record using the SPF Check button within the Hornbill Administration UI, and saving the configuration upon success. Please see the section below relating to the SPF/TXT record for more information. 
 +
 
 +
When email is delivered using the Direct Outbound method, our servers will automatically negotiate the highest level of transport encryption supported by the remote SMTP server. This is completely automatic and is negotiated each and every time a new SMTP connection is made. We support the TLS 1.2, TLS 1.1, TLS 1.0, SSL 3.0 and Plain Text protocols, prioritised and negotiated for in that order
 +
<br>
 +
 
 +
====SPF/TXT Record====
 +
 
 +
If you wish to configure “Use Direct Outbound” and the domain name used in the email from address is not live.hornbill.com, a SPF/TXT Record must be configured.  The SPF/TXT record allows Hornbill to send email using the configured domain without risk of breaching any anti-spam/email source validation checks.
 +
<div class="mw-collapsible mw-collapsed" data-collapsetext="Show Less" data-expandtext="Read More" style="width:900px">
 +
It is recommended that this is configured by a system admin to add this record to your DNS.
 +
 
 +
<div class="mw-collapsible-content" style="width:1050px">
 
The following record is to be added  
 
The following record is to be added  
 
*'''include:_spf.hornbill.com'''
 
*'''include:_spf.hornbill.com'''
Line 21: Line 58:
 
An example SPF/TXT record would be  
 
An example SPF/TXT record would be  
  
−
''v=spf1 mx a:mail.hornbill.com ip4:64.89.44.0/23 '''include:_spf.hornbill.com''' ~all''
+
''v=spf1 include:_spf.hornbill.com ~all''
  
 
On all outbound email for this domain, Hornbill checks that the SPF/TXT record has the  '''include:_spf.hornbill.com''' section set otherwise the mail will refuse to send.
 
On all outbound email for this domain, Hornbill checks that the SPF/TXT record has the  '''include:_spf.hornbill.com''' section set otherwise the mail will refuse to send.
Line 28: Line 65:
  
 
SPF/TXT – these are both types of DNS record which should be set although SPF have been officially deprecated it still may be used so it can be a good idea to set. The main record that needs to be added is the TXT version.
 
SPF/TXT – these are both types of DNS record which should be set although SPF have been officially deprecated it still may be used so it can be a good idea to set. The main record that needs to be added is the TXT version.
−
 
+
<br>
 +
<br>
 +
'''When creating a domain you will not be able to save until you have successfully tested the SPF.'''
 +
[[File:SPF Check Fail.PNG |centre|750px|Hornbill]]
 +
<br>
 +
<br>
 
To confirm that the include has been added to a TXT/SPF record it is possible to check using this 3rd party website http://mxtoolbox.com/SuperTool.aspx?action=spf (Hornbill takes no responsibility for 3rd party websites).
 
To confirm that the include has been added to a TXT/SPF record it is possible to check using this 3rd party website http://mxtoolbox.com/SuperTool.aspx?action=spf (Hornbill takes no responsibility for 3rd party websites).
 
</div>
 
</div>
 +
</div>
 +
<br>
 +
 +
===Option 2: SMTP SmartHost===
 +
A smart host is a type of email message transfer agent that allows a Simple Mail Transfer Protocol (SMTP) server to route email via an intermediate mailserver rather than directly to the recipient's server. With this method, a mailserver within your organisation is configured to allow the relaying of emails from your Hornbill instance (based in our data centre) to your end users. With the relay configured, any outbound email will pass through your domain and therefore, from the recipients perspective, the source domain will correspond to that used in the "from address" that we configure within Hornbill.
 +
<br>
 +
<br>
 +
To successfully complete the Email integration using this method you will need to:
 +
:# Create an outbound route in Hornbill and configure the necessary details (as shown in the image below).
 +
:# Configure a relay connector on your mail server (allowing relay from the appropriate origin IP stated below)
 +
:# Configure any necessary firewall rules (allowing traffic from the appropriate origin IP) to allow communication from your Hornbill instance.
 +
<br>
 +
'''PLEASE NOTE:''' if you are not familiar with how to complete steps 2) and 3), please refer to the relevant vendor-specific documentation for your mail server and firewall interfaces.
 +
<br>
  
−
==Domain Options==
+
====Origin IP Address====
 +
The origin IP that should be specified in any such firewall rules is one of the following and is dependent on the location of your instance. You should have both the Primary and Secondary IP for your geographical area:
 +
* Europe: - 87.117.243.10 OR  212.71.225.67 (If you are a UK or European customer, your instance will be located in our European data centre and any outbound mail will originate from here)
 +
* North America: - 69.174.249.200 OR  64.34.188.200  (If you are a North American or Canadian customer, your instance will be located in our North American data centre and any outbound mail will originate from here)
  
−
=== Name ===
+
(More information about our data centres can be found in our FAQ: '''[[FAQ:Data_Centres|Hornbill Data Centres]]'''. If you are unable to find the answer you're looking for, please head over to the '''[https://forums.hornbill.com Hornbill forums]''' and start a discussion).
−
The name that is used here needs be a valid domain name. For example 'hornbill.com'
 
−
=== Domain Options ===
 
−
* Enable incoming mail for this domain - This will allow any email that has bee sent to this domain to be processed by the SMTP service and allow it to be routed to the appropriate mailbox.
 
−
* Automatically create address for this domain when a new mailbox is created - When a new user is created a personal mailbox is created and associated to that user.  When this feature is enabled, each new user will be automatically allocated an email address using this domain name.  The Address Format can then be used to set the format of the username.
 
  
−
=== Address Format ===
+
The origin IP addresses are also contained in the "Email Integration Information" communication sent from your Product Specialist at the beginning of the Switch On.
−
The Address Format is only available if you have selected to automatically create addresses for this domain. The formats that can be selected are based on variations of the Firstname and Lastname of the user with the exception of the LoginID.
+
<br>
 +
<br>
  
−
* F.Lastname
+
====Smart Host Details:====
−
* F_Lastname
+
The information you will need to have to hand when specifying your SMART Host is indicated below:
−
* Firstname.L
+
<br>
−
* Firstname.Lastname
+
[[File:SMART Host Details.PNG|700px|SMART Host Configuration Form]]
−
* Firstname_L
 
−
* Firstname_Lastname
 
−
* LoginId
 
  
−
=== Outbound Routing Mode ===
+
==How to configure OAuth2 Authentication for Microsoft Office 365 Mailbox integration==
  
−
==== Use Default SMTP mail server settings ====
+
'''[[How_to_configure_OAuth2_Authentication_for_Microsoft_Office_365_Mailbox_integration|Guide can be found here]]'''
−
==== Use SMTP SmartHost ====
 
−
==== Use DNS Routing ====
 
  
 
[[Category:Administration]]
 
[[Category:Administration]]
 +
-->
 +
[[Category:HDOC]]

Latest revision as of 20:08, 11 April 2024

This document can now be found at its new location in the Hornbill Document Library.

Hornbill Cloud

Retrieved from "https://wiki.hornbill.com/index.php?title=Outbound_Mail_Routing&oldid=32291"