Adding local domains (relay_domains)

Local domains are domains of your organization for which Kaspersky Secure Mail Gateway will be receiving email messages from the outside. Kaspersky Secure Mail Gateway will receive messages only for the domains you specified. Messages intended for other domains are rejected.

If local domains are not specified, Kaspersky Secure Mail Gateway will not be receiving messages for your internal mail servers.

To add a local domain of your organization:

1. In the main window of the application web interface, open the management console tree and select the Domains section.
2. Click the Add button.

   The record creation window opens.

3. In the Record type settings group, select Domain as the record type.
4. In the Domain/Email address field, type the name of the domain for which Kaspersky Secure Mail Gateway will be receiving email messages from the outside.

   Type the fully qualified domain name (FQDN).

5. Select the check box next to the name of the Local domain setting.

   Kaspersky Secure Mail Gateway will receive messages only for the domains you specified. Messages intended for other domains are rejected.

6. In the Email routing settings group, flip on the toggle switch next to the name of the Configure email routing setting.
7. In the Protocol settings group, select the email transmission protocol.
8. In the Destination address and port number field, type the IP address of the server to which you want to configure routing of email.

   You can enter an IPv4 address (for example: 192.0.0.1 or 192.0.0.0/16), an IPv6 address (for example: 2607:f0d0:1002:51::4), or subnet address in CIDR format (for example: fc00::/7).

9. In the TLS Encryption mode for all outgoing mail of the mail server settings group, select one of the following options:
   • Use TLS Encryption mode, set for all outgoing mail from the server, if you want to use the TLS encryption mode set for all outgoing mail from the server for this domain.
   • Override TLS Encryption mode for this domain, if you want to configure a different mode of connection TLS encryption for this domain.
10. If you have chosen to configure a different TLS encryption mode for this domain, in the Override TLS Encryption mode for this domain list select the mode of TLS encryption of the connection that you want to set.
11. If you want to configure the DKIM signature for messages from addresses of this domain, in the DKIM signature for messages from domain addresses settings group, do the following:
    1. Click the Add button.

       The Creating DKIM signature for the domain window opens.

    2. In the Selector field, type the name that will help you find the DKIM signature.
    3. In the Key name list, select the DKIM key based on which the DKIM signature will be added to messages.
    4. Click OK.

       The Creating DKIM signature for the domain window closes.

12. Click the Add button in the lower part of the window.

The domain for which Kaspersky Secure Mail Gateway will be receiving messages appears in the list of domains.

See also Configuring MTA settings Configuring transmission and reception of messages by the MTA Configuring email routing (transport_map) Adding trusted networks and network hosts (mynetworks) Configuring advanced MTA settings

Page top