Topic Last Modified: 2010-07-20
If you have an on-premises messaging system, you can add the IP addresses of your gateway servers and internal e-mail servers to Outlook Live safelists. Safelists are also known as whitelists. You can add IP addresses to Outlook Live safelists to make sure that e-mail that comes from your on-premises messaging system isn't treated as spam.
How do you add IP addresses to these safelists? See Add IP addresses to IP safelists.
Important If your organization is using Forefront Online Protection for Exchange (FOPE) with Outlook Live, this topic doesn't apply to your IP safelists. See FOPE - Manage IP Safelist.
Outlook Live safelists
You submit IP addresses to be added to the Outlook Live safelists at the Live@edu Service Management Portal. You add the IP address to the gateway servers list or to the internal mail servers list. You can't add the same IP address to both lists. The list where you add your server's IP address determines how messages that are received from that server are treated.
Which list do you use when? Let's take a look.
Gateway server list Gateway servers are Internet-facing servers that relay e-mail to Outlook Live from another mail server. A gateway IP address is always a statically-assigned, public IP address. We don't block or throttle connections from IP addresses on the gateway server list. However, we also look at the source IP address of the message. If the source IP address isn't listed on the internal mail servers list, we perform content filtering on the message. If you add IP addresses to the gateway servers list, you should also add IP addresses to the internal servers list.
If your gateway server meets any of the following criteria, add the IP address to the gateway servers list:
-
The gateway server relays e-mail directly from the Internet. For example, when you have a shared address space with on-premises relay, e-mail may be received first by your gateway servers. Then, mail that is addressed to Outlook Live recipients is relayed to Outlook Live.
-
The gateway server relays e-mail from internal mail servers and relays messages from the Internet without processing by internal mail servers.
-
The gateway server relays general Internet traffic for an internal network.
Internal mail servers Internal mail servers generate e-mail messages that are sent to Outlook Live from your on-premises messaging system. An internal mail server IP address is always a statically assigned public IP address.
IP addresses on the internal mail servers list don't undergo any connection filtering or content filtering. Make sure that servers on this list are trusted to never send junk e-mail and that they don't relay Internet mail that hasn't already been filtered for spam to Outlook Live users.
If your server meets any of the following criteria, add the IP address to the internal mail servers list:
-
You have a gateway server that is dedicated to relaying e-mail messages from your on-premises mail servers. In this scenario, you may have IP addresses listed on only the internal mail servers list.
-
Your internal mail servers have private IP addresses. In this scenario, you should add your gateway servers to the internal mail server list, not to the gateway server list.
-
You have an on-premises e-mail server that relays e-mail to Outlook Live through an IP address that is on the gateway servers list.
Important You can't add third-party SMTP IP addresses to the Outlook Live safelists on behalf of your organization. The most effective method to guarantee e-mail delivery into Outlook Live is to encourage third-parties to become a certified sender. For more information about the external service, see Sender Score Certified.
To maintain high quality service, Live@edu requires you have sole sending rights on the public IP addresses that you submit for safelisting on behalf of your organization. If your organization isn't listed as the sole owner in the public IP addresses, you must submit additional information from the ISP or sole owner of the IP address that verifies that your organization is the sole sender. An e-mail from the contact address in the IP Whois record is sufficient verification. The e-mail must state that your organization is the sole sender for the IP address.
To submit verification, submit an online support request at the Live@edu Partner Center. After this verification is received, Live@edu will process the IP request within three business days. If you don't see the status updated in the Live@edu Service Management Portal in three business days, contact Live@edu Partner Center.
Add IP addresses to IP safelists
To add your organization's IP addresses to Outlook Live safelists, after you enroll your organization with Microsoft Live@edu, follow these steps.
-
In the Live@edu Service Management Portal, click Mail Delivery.
-
Click Manage IP safelists.
-
In the Add gateway servers section, type the IP addresses of your gateway servers.
-
In the Add internal mail servers section, type the IP addresses of your internal mail servers.
-
Click Submit. You can submit up to five IP addresses per request in each section.
Important It takes up to three business days to update the safelists. After you submit your request, you can view the status of the IP addresses you've submitted on the Mail Delivery page in the Live@edu service management portal. If you don't see the status updated in the portal in three business days, contact Live@edu Partner Center.
You can add a total of 2,000 IP addresses to the Outlook Live safelists. To delete an IP address from the Outlook Live safelists, select it and then click
.