Reflexion KBA's: RTC
Reflexion and you: Office365 mail
Posted by , Last modified by Max McElroy on 22 November 2019 11:26 AM

Overview
This guide will cover both inbound and outbound configuration

NOTE: We recommend this process is completed using Internet Explorer. There are known issues with browser controls used in the final validation step.

Outbound

To set up outbound mail with Office 365, you will need to do the following:

  • Log into the Office 365 administration console.Navigate to the Admin > Exchange menu.
  • In the Exchange Admin Center, navigate to the Mail Flow > Connectors menu and create a new connector.
  • In the “From” section, select Office 365, and in the “To” section, select Partner Organization. Click Next.
  • Give the new connector a name, optional description, and decide if the connector should be enabled once it has been saved using the “Turn it on” checkbox. Click Next.
  • Leave the default “Only when email messages are sent to these domains” selected and click the plus icon to add the recipient domains that should use this connector.
  • To route all outbound email to Reflexion, enter * here and click OK, followed by Next.
  • Select the “Route email through these smart hosts” option, then click the plus icon and enter asp-submit.reflexion.net as the smart host. Click Save, followed by Next.
  • Leave the default “Always use Transport Layer Security (TLS) to secure the connection (recommended)” and “Issued by a trusted certificate authority (CA)” set and click Next.
  • Verify your settings and click Next.
  • To validate the settings, add an email address of a recipient from a domain external to your organization and click Validate.
  • Once Office 365 has successfully validated your settings, click Save.


Next Steps

To verify that Office 365 is routing email outbound via Reflexion successfully, log in to the Reflexion Console (asp.reflexion.net) and click on the customer name > Reports > Recent Messages > Outbound.

You should see messages from your organization's internal users to external recipients listed here.

If you do not see messages listed here shortly after they have been sent, this typically indicates a configuration problem with your Office 365 send connector.

Double check your configuration and use the Office 365 Message Trace tool found in the Mail Flow > Message Trace menu of the Exchange Admin Center to help you identify the issue.


Inbound

For inbound configuration, the MX records for the domain will still point to Reflexion.

In Reflexion

Office 365 should provide you an inbound MX record. Typically their MX records are in the form "company-domain".mail.protection.outlook.com.

In our portal, you can click on Enterprise Options > Enterprise Domains and then "Click here to add a new domain route" or you can click the icon under the Edit column and modify your existing entry.  If you are creating a new delivery destination, please make sure that the Type is set to FQDN.

In O365

Since messages are already being filtered by Reflexion, there is no need to have inbound mail filtered again by O365.  To disable the spam filtering specifically for messages coming from our IP addresses, please create a Mail Rule with the following flags:

Name:
Reflexion bypass

Apply rule if
Sender is located : Outside the organization

And
Sender's IP address is in the range: 208.70.208.0/24, 208.70.209.0/24, 208.70.210.0/24, 208.70.211.0/24

Do the following
Set spam confidence level (SCL) to : Bypass spam filtering.


This rule allows any messages forwarded by Reflexion to bypass any spam checks that O365 performs, including SPF checks which often cause inbound mail to end up in user's junk mail boxes.
Additionally, you could also create a "mirror rule" to reject any messages that do not come from our IP addresses.  O365 does not provide a template for this however, so we do not have an example to provide.

(60 vote(s))
Helpful
Not helpful

Comments (0)
Post a new comment
 
 
Full Name:
Email:
Comments:
CAPTCHA Verification 
 
Please enter the text you see in the image into the textbox below (we use this to prevent automated submissions).