The entry to be created in the section TLS settings by clicking on Add TLS Domain is described in the sub-chapter Add TLS Domain .
In the section SMTP Settings in section TLS encryption, the option Require TLS encryption must be activated so that SEPPmail Secure E-Mail Gateway does not accept insecure connections.
The servers to be entered In the section Relaying differ depending on the region and can be determined from the table of required SPF entries under Email Security Cloud Gateway - Implementing SPF for Outbound Email.
To do this, the entry from ‘include:’ of the SPF entry of the respective region must be determined as follows, for example:
dig <region>._netblocks.mimecast.com TXT
For example for Germany:
$ dig de._netblocks.mimecast.com TXT
; <<>> DiG 9.11.9 <<>> de._netblocks.mimecast.com TXT
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37133
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;de._netblocks.mimecast.com. IN TXT
;; ANSWER SECTION:
de._netblocks.mimecast.com. 142 IN TXT "v=spf1 ip4:51.163.158.0/24 ip4:194.104.109.0/24 ip4:194.104.111.0/24 ip4:194.104.110.21/32 ip4:194.104.110.240/28 ip4:62.140.10.21/32 ip4:62.140.7.0/24 ip4:194.104.108.240/29 ip4:194.104.108.21/32 ~all"
;; Query time: 56 msec
;; SERVER: xxx.xxx.xxx.xxx#53(xxx.xxx.xxx.xxx)
;; WHEN: Di Dez 17 14:14:54 CET 2024
;; MSG SIZE rcvd: 269
For the de region, the IPs to be entered would therefore be as follows:
51.163.158.0/24
194.104.109.0/24
194.104.111.0/24
194.104.110.21/32
194.104.110.240/28
62.140.10.21/32
62.140.7.0/24
194.104.108.240/29
194.104.108.21/32
In single-tenant systems, the following additional settings are required:
The settings per each email domain are described in the section Managed domains, the necessary TLS settings are described in Add TLS Domain .
