Set Up Email Routing in xorlab

Enforce TLS

In activeguard/mta/startup_cfg/postfix_custom/main.cf, set the following parameters to enforce TLS on all connections. In SaaS, they are normally already configured like this.

main.cf

smtpd_tls_cert_file = /etc/ssl/my_certs/my_cert.crt
smtpd_tls_key_file = /etc/ssl/my_certs/my_cert.key
smtp_tls_security_level = verify
smtpd_tls_security_level = encrypt

If you had to change anything, click Publish. The new Postfix settings become active within about one minute.

Route all emails to M365

Open main.cf in activeguard/mta/startup_cfg/postfix_custom/.

Set relayhost to <GUID>.mail.protection.outlook.com. You find your <GUID> in the M365 Exchange Admin Center under Mail flow → Accepted domains.

main.cf

relayhost = <GUID>.mail.protection.outlook.com

Advanced routing

If for any reason you need to route your emails to different M365 regions, configure the following in addition:

For every domain that should be routed separately, add a corresponding entry in the transport and sender_dependent_transport file.
transport
xorlab.com smtp:xorlab-com.mail.protection.outlook.com xorlab.net smtp:xorlab-net.mail.protection.outlook.com
sender_dependent_transport
@xorlab.com xorlab-com.mail.protection.outlook.com @xorlab.net xorlab-net.mail.protection.outlook.com
By default, subdomains need to be added separately. Please see Subdomain matching to change the default.

In main.cf, configure the following two lines:

main.cf

# Activate recipient transport maps
transport_maps = lmdb:/etc/postfix/transport
# Activate sender transport maps
sender_dependent_relayhost_maps = lmdb:/etc/postfix/sender_dependent_transport

When you finish editing the Postfix files, click Publish. The routing configuration becomes active within about one minute.

​Enforce TLS

​Route all emails to M365

​Next steps

Enforce TLS

Route all emails to M365

Next steps