Preparing a Domino Server with Verisend and Positive Identity to receive mail from DuoCircle
There are a few steps that Domino server administrators might need to take in order to assure that mail exiting PhishProtection, MX Backup and other Duocircle inbound mail relaying services will be accepted for delivery to users and is properly handled by Verisend and Positive Identity. They are found in the following applications:
1. Domino Directory
names.nsf
2. Positive Identity
PIdentity\PIdAdmin.nsf
3. Verisend for Domino
verisend\VerisendAdmin.nsf
For reference, here is our list of outbound mail servers:
https://support.duocircle.com/support/solutions/articles/5000524218-ip-addresses-for-firewalls
1. Domino Directory
All the Domino Directory settings mentioned in this document can be found as follows:
a. Open the Domino Directory to the list of Messaging Configuration settings and open each document that applies to Domino servers that will handle inbound traffic from Phish Protection.
b. Go to the 'Router/SMTP' tab then the sub-tabs 'Restrictions and Controls...', 'SMTP Inbound Controls'.
c. For each of these documents, check the list of settings recommendations below and make any updates needed to each document individually.
|
NOTE: If needed, you can copy/paste this version of the list (formatted for Domino Directory usage) into the configuration fields mentioned below
[104.232.45.*]
[204.27.244.*]
[54.191.214.3]
[54.149.210.130]
[54.191.214.36]
[54.191.151.194]
[54.148.219.64]
[54.149.206.185]
[54.186.27.61]
[54.191.158.99]
[54.186.172.23]
[54.149.36.10]
[54.149.155.156]
[54.69.130.42]
[54.213.22.21]
[54.200.247.200]
[54.186.218.12]
[54.200.129.228]
[54.149.205.143]
[54.148.222.11]
[54.148.30.215]
[54.69.62.154]
[54.68.193.51]
[54.186.60.165]
[54.149.154.28]
[54.148.229.97]
[54.186.22.84]
[52.28.30.98]
[52.29.118.68]
[52.29.142.239]
[52.29.144.204]
[52.29.162.96]
[52.58.5.29]
[52.58.7.81]
[52.58.7.120]
A. DNS Blacklists
If 'DNS Blacklist filters' or 'Private Blacklist Filter' are Enabled you will need to make two changes:
|
1. Set the 'Private Whitelist Filter' option to 'Enabled'
2. Add the DuoCircle list of IP addresses (as provided earlier in this document) into the field 'Whitelist the following hosts'
|
B. Domino SPF Checks
Check the section 'Inbound Sender Domain Authentication Controls. If the option 'Sender Policy Framework check (SPF)' is set to Enabled then you MUST to make the following change:
1. If you need to keep this setting enabled then you MUST add the DuoCircle list of IP addresses (as seen in 1.c above) into the field 'Do not perform an SPF check for the following internet hostnames/IP addresses'
|
2. Positive Identity
You will need to update the -Default- Server Configuration in the Positive Identity database found in the Domino Directory at PIdentity\PIdAdmin.nsf
Here is the list of IP addresses again formatted for use in the Positive Identity Configuration document that you can use to copy and paste.
104.232.45.*
204.27.244.*
54.191.214.3
54.149.210.130
54.191.214.36
54.191.151.194
54.148.219.64
54.149.206.185
54.186.27.61
54.191.158.99
54.186.172.23
54.149.36.10
54.149.155.156
54.69.130.42
54.213.22.21
54.200.247.200
54.186.218.12
54.200.129.228
54.149.205.143
54.148.222.11
54.148.30.215
54.69.62.154
54.68.193.51
54.186.60.165
54.149.154.28
54.148.229.97
54.186.22.84
52.28.30.98
52.29.118.68
52.29.142.239
52.29.144.204
52.29.162.96
52.58.5.29
52.58.7.81
52.58.7.120
Open the configuration document to the tab 'Company' then add the above list of IP addresses to the field 'Skip IP Addresses:' in the section labelled 'Internal Mail Servers'
|
3. Verisend for Domino
You will need to update the All Servers configuration document in the Verisend Administration database found in the Domino Directory at verisend\VerisendAdmin.nsf
Here is the list of IP addresses again formatted for use in the Verisend Configuration document that you can use to copy and paste.
104.232.45.0/24
204.27.244.0/24
54.191.214.3
54.149.210.130
54.191.214.36
54.191.151.194
54.148.219.64
54.149.206.185
54.186.27.61
54.191.158.99
54.186.172.23
54.149.36.10
54.149.155.156
54.69.130.42
54.213.22.21
54.200.247.200
54.186.218.12
54.200.129.228
54.149.205.143
54.148.222.11
54.148.30.215
54.69.62.154
54.68.193.51
54.186.60.165
54.149.154.28
54.148.229.97
54.186.22.84
52.28.30.98
52.29.118.68
52.29.142.239
52.29.144.204
52.29.162.96
52.58.5.29
52.58.7.81
52.58.7.120
Add the list to the field 'Skip IP Addresses'.
|
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article