ESSENTIAL GUIDE FOR DOMAIN RELAY AND FILTERING SETUP

Introduction

This guide provides the essential steps required to configure email relay and filtering with the e-securemail service. It ensures protection for both inbound and outbound mail flows.

Accessing the Administration Console

Before starting the configuration, log in to the e-securemail console:

• URL: https://www.security-mail.net/

• Credentials: Use the administrator login provided during service activation.

Configuring the Destination Mail Server

• Log in to the administration console.

• Go to Configuration > Domain Settings.

• Enter the IP address or hostname of the destination mail server.

DNS Record Configuration

Update the DNS records to ensure the service operates correctly.

SPF (Sender Policy Framework)

Add or modify the SPF record:

v=spf1 include:includespf.security-mail.net -all

MX (Mail Exchange)

Redirect inbound mail flow to the e-securemail gateways:

• Priority 10: france.security-mail.net

• Priority 20: europe.security-mail.net

DKIM (DomainKeys Identified Mail)

• Generate the DKIM key from the e-securemail console (Configuration > DKIM).

• Add the following TXT record:

DMARC (Domain-based Message Authentication, Reporting, and Conformance)

Add the following TXT record for report collection.
(If you already use a strict or reject policy, simply add the rua address.)

_dmarc.your-domain.com TXT "v=DMARC1; p=none; rua=mailto:dmarc@secuserve.com;"

Restricting SMTP Connections

It is recommended to restrict connections accepted by your mail server to the following IP ranges:

85.31.212.0/24
46.30.205.248/29

Apply these restrictions at the firewall level to secure email reception.

Declaring Relayed IP Addresses

• Go to Configuration > Domain Settings > Delivery/SMTP > Relayed IPs

• Add your server’s IP address to authenticate it with the e-securemail gateways

Once validated, use smtp.security-mail.net for sending emails.

Important Restrictions

• No advertising or bulk marketing emails are allowed.

• Shared hosting servers are not supported.

Technical Support

For any assistance, contact technical support at support@secuserve.com, through the administration console, or consult the online documentation.