Mail Domain and Firewall Configuration

Account administrators need to take the following steps to ensure that emails sent from OpenAir are delivered successfully and to allow communication between OpenAir and add-on service applications.

• Create a Sender Policy Framework (SPF) record to provide a list of servers that are authorized to send mail on behalf of your domain and include emails sent from OpenAir — SPF is a Simple Mail Transfer Protocol (SMTP) validation system that verifies the host names or IP addresses emails can originate from for a domain name. An SPF record is a TXT record using the SPF format with your DNS provider. An SMTP server on the receiving end determines (based on the content of the DNS TXT record) whether the nameserver / IP address the email message is sent from is approved for that domain. Setting up a DNS TXT record for SPF might be required by the email infrastructure or services (as presented by email domains) that you send email to. For more information, see the OpenAir SuiteAnswers article “OpenAir's Sender Policy Framework (SPF) Record” (Answer ID: 18737).

  Note:

  OpenAir email does not comply with DMARC alignment rules by default. Additional action may be required to ensure that OpenAir email pass either DKIM or SPF checks if you use DMARC for email authentication. Depending on your DMARC policy, OpenAir email may be marked as junk mail or not be delivered at all if both DKIM and SPF sets of checks fail. For more information, see DMARC Alignment and OpenAir Email.

• Allow the relevant OpenAir domains in the firewall settings of the servers and machines running add-on services or accepting communication with OpenAir. For example, this may be needed to allow OpenAir Automatic Backup Service files to be transferred to your SCP/SFTP server, or to allow the secure transfer of data between your OpenAir account and the OpenAir Integration Manager application.

Ensure the following domains are allowed:

• openair.com

• outbound1.openair.com

• outbound2.openair.com

• relay.openair.com

• system.openair.com

• Your account specific domain name (*.app.openair.com).

  The URL for OpenAir services includes the domain name for your OpenAir account <account-domain>. For more information about your account-specific domain name, see Your OpenAir Account URLs.

Important:

The use of OpenAir IP addresses to access or manage access to any OpenAir services is no longer supported. You should allow domains instead of IP addresses. The IP addresses of OpenAir services may change at any time without notice.