Exchange Online provides email and calendaring services similar to those available on premises with an Exchange server. Office 365 is a suite of services that includes Exchange Online. SpamStopsHere adds premium antispam and zero-hour virus protection to Exchange Online and Office 365 with a few simple configuration changes.

MX Records and IP Address
Your email domain has one or more public "MX" records that tell a sender's mail server the full domain name (e.g., "mail.example.com") of your Exchange Online service on the Internet. There is also an "A" record that resolves the mail domain to a fixed IP address. To use SpamStopsHere, you simply make us the destination of mail sent to you by pointing your MX records to our filtering platform. We also need to know the IP address so we can deliver your mail to your service after we filter it.
Firewall and Existing Spam Filter
We recommend that you set up a Firewall in Exchange Online (to prevent spammers from bypassing our service) and that you disable your existing spam filter.


Configure SpamStopsHere to deliver to Exchange Online

(Required) We need to know the address of your Exchange Online or Office 365 service so SpamStopsHere can deliver mail to you.

Finding your Office 365 or Exchange Online address might involve different steps than those shown here.

Copy your Office 365 mail service address

  1. Log onto your Office 365 account as an administrator.
  2. Select Admin | Office 365.
  3. In the left pane, click Domains.
  4. Select your domain, then click Manage DNS.
  5. Under DNS Records and Exchange Online locate your type MX record and copy the Points To Address for your MX record type.


Paste your Office 365 mail service address into the SpamStopsHere control panel

  1. Log onto your SpamStopsHere account
  2. Under Options, click Configurations Options next domain you wish to edit.
  3. Under Mail Server Settings, click Edit next to Customer Mail Server.
  4. Paste the entry you copied earlier in the Mail Server field, then click save.

When SpamStopsHere begins to receive mail, it will now filter and deliver it to your Exchange account.

Switch Your Exchange Online or Office 365 MX Records

(Required) Now that we know where to deliver your mail, it's time to make SpamStopsHere the last hop before it reaches you, so we can filter out the spam.

  1. Make sure you have access to the MX records provided by SpamStopsHere in either your initial setup email, or by accessing the mail servers page we visited earlier.
  2. In a new window, open your domain name providers DNS management tool. Replace your old MX records with the records provided, and save the new changes.

If you do not know how to do this, you could try emailing your hosting providers support with the values we've provided, or of course- contact our 24/7 support who will gladly help you configure your service.

It could take up to 72 hours before the changes fully propagate across the Internet.

Securing Exchange with Firewall rules

Exchange can be configured to allow mail only from our servers. We highly recommend doing this as it will prevent spammers from bypassing our servers and delivering email directly to you.

  1. Log onto your Office 365 account as an administrator.
  2. Select Admin, then from the pull down click Exchange.
  3. From left hand list select mail flow and then select rules.
  4. To add a new rule select the + (plus) sign and then select Restrict messages by sender or recipient
  5. Add a name Accept inbound only from SpamStopsHere
    Apply this rule if
    The sender is located outside the organization
    Do the following
    Delete the message without notifying anyone
  6. Check Audit this rule to have blocked messages appear in reports and message traces.
  7. Select mode Enforce for this rule.
  8. Click More Options
  9. Under Except If, add exception.
  10. Select The sender.. - IP Address is in any of these ranges or exactly matches
  11. In the specify IP address ranges window, add each of the ranges from the following steps:
    • In a separate window, open your SpamStopsHere account, and access the Service Configuration page for the domain you are configuring, then select Firewall.
    • Enable the firewall, then keep the page open as you'll need the range of IPs in just a moment, Keep this list handy!
  12. Click okay, then click save.

Congratulations, your Exchange Online and SpamStopsHere are now configured to work with each other, and your Exchange is locked down to receive mail from only our service!

Disabling Exchange Online spam filtering

We recommends disabling all other spam filtering software or services when using our service. This is easily accomplished by adding a mail flow rule in exchange online.

  1. Log onto your SpamStopsHere account
  2. Under Options, click Configurations Options next domain you wish to edit.
  3. Under Mail Server Settings, click Edit next to Firewall.
  4. Paste the entry you copied earlier in the Mail Server field, then click save.
  5. Enable the firewall option, then keep the page open as you'll need the range of IPs in just a moment.
  6. Log onto your Office 365 account as an administrator.
  7. Select Admin, then from the pull down click Exchange.
  8. From left hand list select mail flow and then select rules.
  9. To add a new rule select the + (plus) sign and then select Bypass spam filtering.
    Name
    Disable built-in Spam Filtering
    Apply this rule if
    Sender's IP address is in the range
  10. Copy and paste the IP ranges provided from our service.
    Do the following
    Set the spam confidence level (SCL) to... Bypass Spam Filtering (default)
  11. Do not add an exception
  12. Deselect Audit this rule
  13. Chose a mode for this rule, Select Enforce
  14. Click Save.

Other Resources