Using Verisend with mail relayed through DuoCircle

Created by Daniel Calkin, Modified on Fri, 31 Jan at 2:26 PM by Daniel Calkin

Preparing a Domino Server with Verisend and Positive Identity to receive mail from DuoCircle

There are a few steps that Domino server administrators might need to take in order to assure that mail exiting PhishProtection, MX Backup and other Duocircle inbound mail relaying services will be accepted for delivery to users and is properly handled by Verisend and Positive Identity. They are found in the following applications:

1. Domino Directory

names.nsf

2. Positive Identity

PIdentity\PIdAdmin.nsf

3. Verisend for Domino

verisend\VerisendAdmin.nsf

For reference, here is our list of outbound mail servers:

https://support.duocircle.com/support/solutions/articles/5000524218-ip-addresses-for-firewalls

1. Domino Directory

All the Domino Directory settings mentioned in this document can be found as follows:

a. Open the Domino Directory to the list of Messaging Configuration settings and open each document that applies to Domino servers that will handle inbound traffic from Phish Protection.

b. Go to the 'Router/SMTP' tab then the sub-tabs 'Restrictions and Controls...', 'SMTP Inbound Controls'.

c. For each of these documents, check the list of settings recommendations below and make any updates needed to each document individually.

NOTE: If needed, you can copy/paste this version of the list (formatted for Domino Directory usage) into the configuration fields mentioned below

[104.232.45.*]

[204.27.244.*]

[54.191.214.3]

[54.149.210.130]

[54.191.214.36]

[54.191.151.194]

[54.148.219.64]

[54.149.206.185]

[54.186.27.61]

[54.191.158.99]

[54.186.172.23]

[54.149.36.10]

[54.149.155.156]

[54.69.130.42]

[54.213.22.21]

[54.200.247.200]

[54.186.218.12]

[54.200.129.228]

[54.149.205.143]

[54.148.222.11]

[54.148.30.215]

[54.69.62.154]

[54.68.193.51]

[54.186.60.165]

[54.149.154.28]

[54.148.229.97]

[54.186.22.84]

[52.28.30.98]

[52.29.118.68]

[52.29.142.239]

[52.29.144.204]

[52.29.162.96]

[52.58.5.29]

[52.58.7.81]

[52.58.7.120]

A. DNS Blacklists

If 'DNS Blacklist filters' or 'Private Blacklist Filter' are Enabled you will need to make two changes:

1. Set the 'Private Whitelist Filter' option to 'Enabled'

2. Add the DuoCircle list of IP addresses (as provided earlier in this document) into the field 'Whitelist the following hosts'

B. Domino SPF Checks

Check the section 'Inbound Sender Domain Authentication Controls. If the option 'Sender Policy Framework check (SPF)' is set to Enabled then you MUST to make the following change:

1. If you need to keep this setting enabled then you MUST add the DuoCircle list of IP addresses (as seen in 1.c above) into the field 'Do not perform an SPF check for the following internet hostnames/IP addresses'

2. Positive Identity

You will need to update the -Default- Server Configuration in the Positive Identity database found in the Domino Directory at PIdentity\PIdAdmin.nsf

Here is the list of IP addresses again formatted for use in the Positive Identity Configuration document that you can use to copy and paste.

104.232.45.*

204.27.244.*

54.191.214.3

54.149.210.130

54.191.214.36

54.191.151.194

54.148.219.64

54.149.206.185

54.186.27.61

54.191.158.99

54.186.172.23

54.149.36.10

54.149.155.156

54.69.130.42

54.213.22.21

54.200.247.200

54.186.218.12

54.200.129.228

54.149.205.143

54.148.222.11

54.148.30.215

54.69.62.154

54.68.193.51

54.186.60.165

54.149.154.28

54.148.229.97

54.186.22.84

52.28.30.98

52.29.118.68

52.29.142.239

52.29.144.204

52.29.162.96

52.58.5.29

52.58.7.81

52.58.7.120

Open the configuration document to the tab 'Company' then add the above list of IP addresses to the field 'Skip IP Addresses:' in the section labelled 'Internal Mail Servers'

3. Verisend for Domino

You will need to update the All Servers configuration document in the Verisend Administration database found in the Domino Directory at verisend\VerisendAdmin.nsf

Here is the list of IP addresses again formatted for use in the Verisend Configuration document that you can use to copy and paste.

104.232.45.0/24

204.27.244.0/24