Locking Down Your Office 365 Mail Server

Source: docs.titanhq.com Product: SpamTitan Imported content type: docs_page Product stream: legacy

Locking Down Your Office 365 Mail Server

Abstract

Follow the steps in this guide to lock down your inbound email flow in Office 365 to only accept email from SpamTitan Cloud IP addresses.

Notice

The instructions below include information about tools that are not owned or managed by TitanHQ and are only intended as a guideline to help you. As such, the information may be subject to change without us knowing.

If you notice anything out of place, please email docs@titanhq.com and let us know.

Follow the steps below to lock down your inbound email flow in Office 365 to only accept email from your SpamTitan. This requires you to create a receive connector in Office 365.

1. Log on to your Office 365 Exchange Admin Center (EAC).

   Note

   If you are using Microsoft 365 Defender, log in to security.microsoft.com and select Exchange message trace from the sidebar menu to open your Exchange Admin Center.

2. Click Mail flow and then Connectors from the sidebar menu to view your connectors.

3. Click Add a connector and the ‘New connector’ window displays. Select Partner organization as shown:

   

4. Click Next and the ‘Connector name’ window displays.

5. In the Name: field give the connector a meaningful name. For example, SpamTitan to Office 365. Click Next.

6. In the ‘Authenticating sent email’ window:

   1. Select By verifying that the sender domain matches one of the following domains.

   2. Enter * in the dialog box and click .

      

   3. Click Next.

7. In the ‘Security restrictions’ window:

   1. Check Reject email messages if they aren’t sent over TLS.

      Important

      This option requires that outbound TLS is enabled in SpamTitan.

   2. Select Reject email messages if they aren’t sent from within this IP address range and enter your SpamTitan IP address.

      Note

      See SpamTitan Cloud IP addresses for shared cloud IPs, or enter your own private SpamTitan IPs if using SpamTitan Private Cloud.

   3. Click to save the IP you entered:

      

   4. Click Next.

8. The ‘Review connector’ page displays the information you have entered above. Verify the information is correct and click Create connector.