Use DuoCircle MX Backup with SpamSentinel for Domino

Preparing a Domino Server with SpamSentinel to receive mail from DuoCircle MX Backup

There are a few steps that Domino server administrators might need to take in order to assure that mail exiting MX Backup by DuoCircle will be accepted for delivery to users and is properly handled by SpamSentinel.  They are found in the following applications:

For reference, here is our list outbound IP Addresses.

https://support.duocircle.com/support/solutions/articles/5000524218-ip-addresses-for-firewalls

1.  Domino Directory

All the Domino Directory settings mentioned in this document can be found as follows:

a.  Open the Domino Directory to the list of Messaging Configuration settings and open each document that applies to Domino servers that will handle inbound traffic from Phish Protection.

b.  Go to the 'Router/SMTP' tab then the sub-tabs 'Restrictions and Controls...', 'SMTP Inbound Controls'.  

c.  For each of these documents, check the list of settings recommendations below and make any updates needed to each document individually.

NOTE: If needed, you can copy/paste this version of the list (formatted for Domino Directory usage) into the configuration fields mentioned below

[104.232.45.*]

[204.27.244.*]

[54.191.214.3]

[54.149.210.130]

[54.191.214.36]

[54.191.151.194]

[54.148.219.64]

[54.149.206.185]

[54.186.27.61]

[54.191.158.99]

[54.186.172.23]

[54.149.36.10]

[54.149.155.156]

[54.69.130.42]

[54.213.22.21]

[54.200.247.200]

[54.186.218.12]

[54.200.129.228]

[54.149.205.143]

[54.148.222.11]

[54.148.30.215]

[54.69.62.154]

[54.68.193.51]

[54.186.60.165]

[54.149.154.28]

[54.148.229.97]

[54.186.22.84]

[52.28.30.98]

[52.29.118.68]

[52.29.142.239]

[52.29.144.204]

[52.29.162.96]

[52.58.5.29]

[52.58.7.81]

[52.58.7.120]

A.  DNS Blacklists

If 'DNS Blacklist filters' or 'Private Blacklist Filter' are Enabled you will need to make two changes:

1.  Set the 'Private Whitelist Filter' option to 'Enabled'

2.  Add the DuoCircle list of IP addresses (as provided earlier in this document) into the field 'Whitelist the following hosts'

B.  Domino SPF Checks

Check the section 'Inbound Sender Domain Authentication Controls.  If the option 'Sender Policy Framework check (SPF)' is set to Enabled then you MUST to make the following change:

1.  If you need to keep this setting enabled then you MUST add the DuoCircle list of IP addresses (as seen in 1.c above) into the field 'Do not perform an SPF check for the following internet hostnames/IP addresses'

2.  SpamSentinel for Domino

There are two sections in the SpamSentinel Server Configuration document which might need to be updated.

Here is the list of IP addresses again formatted for use in the SpamSentinel Server Configuration document that you can use to copy and paste.

104.232.45.0/24

204.27.244.0/24

54.191.214.3

54.149.210.130

54.191.214.36

54.191.151.194

54.148.219.64

54.149.206.185

54.186.27.61

54.191.158.99

54.186.172.23

54.149.36.10

54.149.155.156

54.69.130.42

54.213.22.21

54.200.247.200

54.186.218.12

54.200.129.228

54.149.205.143

54.148.222.11

54.148.30.215

54.69.62.154

54.68.193.51

54.186.60.165

54.149.154.28

54.148.229.97

54.186.22.84

52.28.30.98

52.29.118.68

52.29.142.239

52.29.144.204

52.29.162.96

52.58.5.29

52.58.7.81

52.58.7.120

A.  RBL IP Addresses to Exclude

If you have the option RBL Checks (IP Addresses) set to anything other than 'Do Not Check IP Addresses' you will need to add the new list of IP addresses to the field 'RBL IP Addresses to Exclude'

B.  Relay Servers Listing

In the 'Verisend' tab of the SpamSentinel Server Configuration document there is a field 'IP Address of Relaying Servers'.  Add the new IP addresses to this field using the list format for SpamSentinel Administration found earlier here in Section 2.

3.  Verisend for Domino

If you are using Verisend for Domino with your user mail file designs, you will need to update the All Servers configuration document in the Verisend Administration database found in the Domino Directory at verisend\VerisendAdmin.nsf

Add the list to the field 'Skip IP Addresses'.