CONBOOL
  • Blog
  • Dokumentation
Loslegen
CONBOOL

Sichere und automatisierte E-Mail-Sicherheit für Unternehmen – einfach, zentral und zuverlässig.

© Copyright 2026 Conbool. Alle Rechte vorbehalten.

Auszeichnungen
  • OMR Leader Badge für E-Mail-Sicherheit
Mitglied bei
  • Bitkom Mitglied – Digitalverband
  • BSI Allianz für Cyber-Sicherheit – Mitglied
Über uns
  • Blog
  • FAQ
  • Partner
  • Kontakt
Produkt
  • SecureMail
  • MailGuard
  • Disclaimer
  • Dokumentation
Add-ins
  • Disclaimer
  • SecureMail
  • SecureFiles
Rechtliches
  • Nutzungsbedingungen
  • Datenschutzerklärung
  • Impressum
Dokumentation
  • Rollen & Berechtigungen

Exchange On-Premises

Mail server variant for a local Exchange server, version 2016 or later. Send/Receive Connector and transport rules in the Exchange Admin Center.

Prerequisite: Step 1, Domain & DNS Setup is complete and all four DNS checks are green.

What happens here: A Send Connector, a Receive Connector, and two transport rules are created in the local Exchange Admin Center. In the Setup Assistant, the Manual configuration mode is chosen.

Effort: 30 to 45 minutes.


Step A. Send Connector

Navigation: Exchange Admin Center (On-Premises) → Mail flow → Send Connectors → new Send Connector

FieldValue
NameConbool Outbound Connector
TypeCustom
Address space* for all domains, or specific domains
Smart hostmail.conbool.com
Smart host authenticationNone, authentication is handled via TLS certificate
Require TLSEnabled, domain validation against mail.conbool.com
Use MX RecordNo
Source serverHub Transport server that should use the connector

Create and enable the connector.


Step B. Receive Connector

Navigation: Exchange Admin Center (On-Premises) → Mail flow → Receive Connectors → new Receive Connector on the respective server

FieldValue
NameConbool Inbound Connector
TypePartner
Network adapter bindingsLeave default, all available IPs on port 25
Remote IP rangesConbool IP addresses, provided by Conbool
Require TLSEnabled
TLS Sender Certificate Namemail.conbool.com
Restrict Domains to CertificateYes

Create and enable the connector.

Firewall: Port 25 (SMTP) must be open from the Conbool IP addresses to the Exchange server.


Step C. Transport Rule "Relay to Conbool"

Navigation: Exchange Admin Center (On-Premises) → Mail flow → Rules → new rule

This rule routes outbound emails through Conbool and prevents loops.

  1. Name: Conbool Exchange transport rule
  2. Sender address location: Header or envelope
  3. Apply this rule if: The sender is located → Inside the organization
  4. Do the following: Route the message to the following connector → Conbool Outbound Connector
  5. Except if (add all four exceptions):
    • A message header matches → Header: X-Conbool-<YourDomain> (e.g. X-Conbool-example-com) → Pattern: true
    • The message type is → Calendaring
    • A message header contains → Header: Return-Path → Words: <>
    • The sender address matches → Pattern: <>
  6. Priority: 0
  7. Mode: Enforce
  8. Save and enable.

Step D. Transport Rule "Classify Spam"

Navigation: Exchange Admin Center (On-Premises) → Mail flow → Rules → new rule

This rule sorts emails marked as spam by Conbool into the Spam folder.

  1. Name: Conbool Spam classification rule
  2. Apply this rule if: A message header matches → Header X-Conbool-Flag → Pattern YES
  3. Do the following: Modify the message properties → set SCL to 7
  4. Priority: 1
  5. Mode: Enforce
  6. Save and enable.

Done When

Back in the Setup Assistant at the Mail Server step. Enter the relay host of the Exchange server, typically the FQDN of the Hub Transport server, for example mail.yourcompany.local, then click Test Connection. Status "SMTP reachable" means the connection is established.

Continue with the connection test and completion.

Auf dieser Seite

  1. Step A. Send Connector
    1. Step B. Receive Connector
    2. Step C. Transport Rule "Relay to Conbool"
    3. Step D. Transport Rule "Classify Spam"
    4. Done When