ISPconfig 3 with Microsoft exchange online protection

Discussion in 'ISPConfig 3 Priority Support' started by Norman, Mar 22, 2017.

  1. Norman

    Norman Member HowtoForge Supporter


    Setting up inbound connector in EOP is easy enough.
    But the outgoing relay is a bit difficult.

    I either have to do relayhost=microsoftsoutboundconnectordomain
    or use ISPConfig3's email routing.

    Both solutions have issues.
    relayhost causes all emails on system to go via outbound connector (unecessary especially when having websites and stuff that send normal emails).

    I only wish to use the outbound connectors for users with an EOP license.
    Now, if I use email routing. The outgoing emails are correct BUT incoming mail to a user on the domain I setup to route to the outbound connector also get sent out again. Essentially causing a loop since

    postfix -> microsoft EOP -> back to postfix -> repeat (5 or 6 times until it gives up)

    How can I make it so that the email routing doesn't pass emails on to the external connector for incoming emails? Only from local users and outwards.

    Thanks in advance
  2. Norman

    Norman Member HowtoForge Supporter

    I have solved this for now by using

    sender_dependent_relayhost_maps = hash:/etc/postfix/relayhost_maps
    in /etc/postfix/
    and setting up a postmap:ed file
    Can ISPconfig 3 do something similar in the interface ? (so it's kept between updates)
  3. florian030

    florian030 ISPConfig Developer ISPConfig Developer

    3.1 does not change sender_dependent_relayhost_maps during an update.
  4. Norman

    Norman Member HowtoForge Supporter

    Awesome that's good to know. But would you recommend that I use sender_dependent_relayhost_maps for this sort of use case?

    I dont want to cause mail loops, and allow local delivery and incoming external mails. Only when external outgoing emails for this specific domain is when I want to send it to EOP.
  5. florian030

    florian030 ISPConfig Developer ISPConfig Developer

    You can use sender_dependet_relayhost_maps. This will relay mails from to your relayhost - even if they are created local. Maybe you need some auth before the relay-server accepts the mails.
  6. Norman

    Norman Member HowtoForge Supporter

    Yep, the send connectors are already authed for that IP. So it seems to work as it should.

Share This Page